Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a31303a3a2f34342d3434203d3e20323132393334.roa
File:                     323630323a666364333a31303a3a2f34342d3434203d3e20323132393334.roa (raw, json)
Hash identifier:          TInX6mS1lcvP/GGIvQ6Syxrvu0/9KOH0Kzi1RGm3oRc=
Subject key identifier:   EB:7A:5F:48:D4:99:6A:5A:D4:D2:D7:13:B4:8E:DC:CC:20:74:B3:96
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       0C68C417DDF1DA5AE13B7CD58AEEA68395472ECC
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a31303a3a2f34342d3434203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:07:57 +0000
ROA not before:           Fri 09 Dec 2022 16:02:57 +0000
ROA not after:            Fri 08 Dec 2023 16:07:57 +0000
asID:                     212934
IP address blocks:        2602:fcd3:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:68:c4:17:dd:f1:da:5a:e1:3b:7c:d5:8a:ee:a6:83:95:47:2e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:57 2022 GMT
            Not After : Dec  8 16:07:57 2023 GMT
        Subject: CN=EB7A5F48D4996A5AD4D2D713B48EDCCC2074B396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:6a:fa:4e:be:60:ab:61:d6:c0:fd:6a:99:
                    2f:d2:00:ff:25:f7:e8:02:68:64:16:68:53:ea:6b:
                    dd:26:00:bb:59:78:b0:c0:77:bd:e2:fe:40:bb:86:
                    81:3a:0c:f2:b4:18:c3:15:a9:10:8a:a7:24:8c:66:
                    5c:fb:26:99:8f:18:61:dd:62:e4:07:a2:68:52:ba:
                    43:07:7d:73:11:88:ff:45:a2:a1:17:4a:80:99:23:
                    ed:57:4c:c1:64:22:e0:91:9a:b6:93:25:d5:13:4c:
                    3b:50:f8:26:fb:37:c0:bd:9a:ec:30:1d:21:ee:38:
                    38:eb:9c:76:84:09:7d:eb:f7:19:4d:fe:a2:5a:84:
                    ba:f7:e9:35:73:cd:f5:77:1d:d8:17:cb:de:53:fa:
                    a8:ac:5b:f2:72:18:cd:ab:af:16:61:bc:6c:78:d0:
                    f1:5e:ce:db:98:63:97:e2:36:dc:19:e9:aa:22:4f:
                    d5:94:fe:f8:ea:6d:7e:b5:31:99:61:19:80:b3:a7:
                    33:4f:ed:bf:5d:52:fc:56:a1:67:5b:dc:31:e8:fe:
                    a9:52:af:2d:cb:e8:0e:62:eb:56:ff:21:53:09:49:
                    96:5d:f3:df:3d:b1:45:e6:69:3c:5d:7d:9e:1f:4d:
                    be:d5:e5:d2:5a:56:ae:68:c8:da:98:b9:00:19:a4:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:5F:48:D4:99:6A:5A:D4:D2:D7:13:B4:8E:DC:CC:20:74:B3:96
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a31303a3a2f34342d3434203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:c1:0f:69:78:e4:ab:c5:0d:e1:f5:a7:91:10:70:19:b2:fc:
         f2:22:70:b5:06:21:2c:b0:e1:d5:84:09:e8:e6:b3:f7:db:7a:
         11:ba:24:93:58:bc:01:0b:ea:36:4e:4e:7f:f2:4d:93:77:99:
         4b:3a:63:bd:e3:ca:9e:ac:b5:85:9c:95:da:66:ca:21:17:82:
         ae:19:36:53:19:68:15:9f:d5:89:af:59:19:35:00:bd:e0:37:
         2c:6e:a7:22:0d:fc:a5:39:f0:3d:02:94:19:1a:f9:81:8b:fc:
         c2:4d:8a:a0:07:c9:4a:0a:66:08:4f:57:a4:b6:79:6a:cf:54:
         87:49:b8:e1:8c:97:06:e3:0d:2c:0b:b8:ff:00:62:31:3e:05:
         27:c9:fd:f5:7a:05:d6:b8:41:c4:21:ad:64:df:d3:17:2e:bc:
         b5:45:38:60:74:5e:7a:14:51:73:8d:26:aa:d5:35:af:0e:02:
         9f:61:46:8f:c0:35:17:58:08:ee:57:5b:99:d7:de:64:99:d3:
         70:94:b6:21:e2:3c:fd:70:19:93:08:91:6b:93:de:c6:32:98:
         80:05:f9:2b:95:3a:f9:d4:ae:85:c6:c9:b1:0e:cd:1b:25:4c:
         77:56:4a:5b:8d:fc:3c:9f:03:2f:02:b4:a6:4b:71:e4:b5:ff:
         41:bb:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org