Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e2033323830.roa
File:                     323630323a666336383a31303a3a2f34382d3438203d3e2033323830.roa (raw, json)
Hash identifier:          pqFMJrSwLtzzpQN113Euk9IAFuZsIY+I8vzuIMrsOE8=
Subject key identifier:   15:FD:56:C3:B9:0E:AF:DB:89:56:26:18:E3:ED:0C:16:0D:D7:1E:CD
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       54F4A280F4876F4F4F54C47C25E2125215952356
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e2033323830.roa
Signing time:             Fri 10 Jan 2025 05:25:32 +0000
ROA not before:           Fri 10 Jan 2025 05:20:32 +0000
ROA not after:            Fri 09 Jan 2026 05:25:32 +0000
asID:                     3280
IP address blocks:        2602:fc68:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:a2:80:f4:87:6f:4f:4f:54:c4:7c:25:e2:12:52:15:95:23:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jan 10 05:20:32 2025 GMT
            Not After : Jan  9 05:25:32 2026 GMT
        Subject: CN=15FD56C3B90EAFDB89562618E3ED0C160DD71ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:ac:d9:cd:af:9f:08:ea:8f:f4:69:dd:6a:
                    76:ed:35:83:d9:f8:07:0a:e6:be:cf:be:97:20:99:
                    e1:d1:35:f8:c3:65:be:bb:a5:2a:90:cb:ad:47:7b:
                    e2:af:a8:07:75:1c:dc:e8:a2:b6:ef:a9:2c:4f:af:
                    ca:43:0c:08:1f:50:28:7a:d8:9b:2c:f6:b7:15:62:
                    e7:6f:95:b7:93:31:71:f8:d4:3f:d0:ca:de:78:d6:
                    b6:e4:28:ce:5a:65:a0:24:85:18:53:9e:a2:c4:e8:
                    85:d9:c2:8c:54:e9:a8:85:2e:6e:0c:43:ad:ab:1e:
                    54:41:e6:a8:db:74:0d:5b:c8:d1:37:9f:2d:94:5a:
                    a6:3c:08:e2:58:0c:50:72:5e:cd:b4:9a:59:a2:21:
                    c0:53:e4:62:fb:2c:45:5b:03:52:f9:37:cd:98:39:
                    b2:48:6f:42:09:6b:ae:0a:44:32:61:d8:f0:1f:5b:
                    e6:eb:3e:87:6c:1c:aa:c7:4e:7c:ad:f9:fc:89:55:
                    06:c0:1f:85:a8:23:13:7d:cf:5b:a0:01:64:47:8d:
                    d6:28:93:93:3b:a8:4c:c9:99:c3:15:15:8c:d1:ee:
                    f4:3b:71:75:0c:ce:37:31:c9:77:76:22:80:2a:30:
                    7e:4b:cd:3a:cf:a0:6d:32:2e:48:40:44:c3:24:7d:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:56:C3:B9:0E:AF:DB:89:56:26:18:E3:ED:0C:16:0D:D7:1E:CD
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:8a:0c:6b:a6:44:ac:ce:e6:44:65:c9:e8:6a:1e:a1:71:
         f6:1a:52:61:fc:e3:17:ec:15:84:33:87:51:71:e3:66:a3:76:
         15:94:f8:a8:8c:36:1b:0d:d1:1d:52:47:a0:eb:a6:6f:f6:26:
         ef:8e:62:26:6f:b1:f3:00:ee:8e:ed:65:c2:be:46:94:47:5b:
         8c:a3:98:47:b0:7a:2e:af:9f:1b:6a:cc:55:12:0a:7d:0d:d3:
         6b:ea:8b:5f:1d:00:06:c7:2b:17:0a:27:ec:5b:a4:b8:e1:e7:
         6a:ae:4c:c9:df:69:60:1a:79:39:5a:79:5f:f6:18:5f:c8:99:
         be:92:2b:e9:37:27:21:e6:ac:3f:4e:94:9e:6f:54:f8:5f:ab:
         95:bf:76:f3:c8:95:a6:fd:5d:2e:af:be:cd:62:86:fa:e6:72:
         78:4e:0b:55:ff:3e:12:08:46:16:82:56:5f:e8:a9:69:16:5f:
         2a:50:bf:3e:a6:59:fb:af:14:2d:b3:21:46:f8:24:1b:ec:6d:
         8d:2e:15:9a:9a:da:b1:a8:5f:29:22:30:19:da:66:2a:1c:95:
         a8:b4:0e:75:b7:fa:97:f4:ee:6d:f2:11:ce:b7:bc:0d:6f:7e:
         46:9e:14:58:90:ae:43:71:01:84:90:87:3f:2a:4c:51:67:7a:
         44:4b:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:08:03 2025 by rpki-client