Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162313a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666364333a3162313a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          IHvX314mKuDz4AD8Pvgb0mkWK5fUD+2DoH1XQVz+lv0=
Subject key identifier:   24:EC:AE:A7:E4:C5:0D:F5:A5:43:F2:E9:88:1B:37:6D:37:4A:62:79
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       4B2255E9D4DC84393D5ED40E269FE2A859C775A4
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162313a3a2f34382d3438203d3e203233343730.roa
Signing time:             Fri 09 Dec 2022 16:07:03 +0000
ROA not before:           Fri 09 Dec 2022 16:02:03 +0000
ROA not after:            Fri 08 Dec 2023 16:07:03 +0000
asID:                     23470
IP address blocks:        2602:fcd3:1b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:22:55:e9:d4:dc:84:39:3d:5e:d4:0e:26:9f:e2:a8:59:c7:75:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:03 2022 GMT
            Not After : Dec  8 16:07:03 2023 GMT
        Subject: CN=24ECAEA7E4C50DF5A543F2E9881B376D374A6279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:4d:2e:55:97:48:80:cc:df:10:1f:df:3c:
                    0d:85:a7:63:70:4d:7b:8f:71:58:ec:4e:62:3c:8a:
                    b9:12:ea:ad:5b:52:20:02:51:b6:71:2f:d2:81:ae:
                    ab:53:c8:34:4a:49:38:60:b8:e9:26:06:cb:6c:7a:
                    da:1d:80:1f:98:29:7f:4f:73:ec:f5:8b:ac:10:55:
                    7f:75:f6:f6:95:38:aa:b4:0b:e8:98:d4:33:66:7a:
                    57:58:d0:7c:c3:25:ab:8d:e3:10:56:30:c5:df:bf:
                    82:9d:f4:ca:81:bf:e7:eb:48:17:23:19:b1:a8:90:
                    ea:ba:28:0a:eb:24:e9:67:99:24:fe:af:57:d7:88:
                    05:27:64:9c:08:32:e1:28:a5:0e:75:bd:6a:83:f9:
                    01:21:f0:81:4b:26:b4:02:27:c9:af:c2:4f:8c:af:
                    39:81:16:a4:4d:88:f4:05:d8:0c:6d:56:4e:e2:e8:
                    81:d0:94:2b:d7:40:05:44:40:26:53:23:bf:f3:12:
                    ca:89:93:b2:8d:2f:42:e7:8a:02:88:cf:c8:8c:87:
                    ad:cb:47:14:78:f7:d8:ef:e1:ab:39:41:37:7c:e2:
                    54:cf:94:d5:90:7e:1b:bd:22:60:58:34:59:f3:d8:
                    1f:89:2b:f2:9d:44:8a:da:93:22:df:3d:6b:5f:08:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:AE:A7:E4:C5:0D:F5:A5:43:F2:E9:88:1B:37:6D:37:4A:62:79
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162313a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:59:f5:b0:7e:ae:d2:6c:88:da:29:be:f2:37:94:11:87:
         10:bf:8a:11:04:0b:f0:1e:e8:76:91:67:7e:86:6f:82:ba:05:
         75:4b:0b:41:76:81:b2:3b:f3:8d:28:2c:dd:8c:4d:46:26:c4:
         e5:e3:34:59:27:4a:ca:de:60:19:f6:45:dc:e6:f4:3a:73:05:
         a8:c3:1a:4f:5d:49:57:cc:cd:36:ac:2c:49:35:97:f2:a2:44:
         1f:49:00:03:d0:7e:be:fb:f3:3b:88:5e:68:76:bb:d4:1f:f0:
         ff:b0:91:53:84:47:9a:45:25:2e:a8:38:00:4b:3a:92:09:e6:
         d8:2c:22:1c:0e:c3:8f:51:ff:d2:e3:90:8b:a7:a5:7d:ca:07:
         d5:ef:31:41:f9:f4:18:54:3f:6f:94:99:7e:62:fb:66:b0:71:
         30:ea:bd:c0:bd:b2:ed:8a:f6:65:5b:f6:28:49:ec:9a:81:e8:
         b5:96:be:00:47:2b:4c:98:62:e0:a6:f1:d9:0b:4a:be:bf:86:
         e1:74:a8:d5:4d:96:bd:8f:82:77:97:45:f9:85:8a:ac:10:80:
         6f:c9:f5:de:e8:db:1d:51:96:73:e7:99:64:07:ba:ca:ee:bb:
         0f:0e:4a:9f:65:91:2e:f6:79:15:d9:ac:1d:8a:c2:02:06:12:
         05:c8:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org