Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3438203d3e203532323130.roa
File:                     323630323a666364333a3a2f33362d3438203d3e203532323130.roa (raw, json)
Hash identifier:          lY3xggm8+/7AHuTnRlpifb+vBYwCXTlc6DIMLhNlyRM=
Subject key identifier:   34:2B:D7:E3:CF:39:CA:20:A3:22:D2:7C:FC:23:7A:D6:51:FC:9E:37
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       4670C7DD57D5BA953A80E03DA0708E8EABFCD0D0
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3438203d3e203532323130.roa
Signing time:             Sun 01 Jan 2023 08:58:19 +0000
ROA not before:           Sun 01 Jan 2023 08:53:19 +0000
ROA not after:            Sun 31 Dec 2023 08:58:19 +0000
asID:                     52210
IP address blocks:        2602:fcd3::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:c7:dd:57:d5:ba:95:3a:80:e0:3d:a0:70:8e:8e:ab:fc:d0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Jan  1 08:53:19 2023 GMT
            Not After : Dec 31 08:58:19 2023 GMT
        Subject: CN=342BD7E3CF39CA20A322D27CFC237AD651FC9E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:b3:b8:d3:65:63:f2:6c:32:67:ec:34:b1:
                    c5:50:e2:d6:3b:bc:93:c0:ed:d6:b6:1c:78:c6:69:
                    ad:f2:68:89:1c:d8:5e:d5:10:89:6a:a9:dc:a5:11:
                    83:46:6b:0e:49:81:03:4d:b4:1a:11:1f:4f:e1:a7:
                    76:4d:ba:fe:63:2f:17:ff:a9:81:4b:e6:92:67:27:
                    ad:63:de:76:23:cf:f0:57:64:68:9c:f9:36:e4:0b:
                    9a:7a:ad:73:a8:40:82:d4:0f:87:48:4e:f0:0e:a6:
                    15:7a:7e:f5:fd:90:cf:3d:d6:7a:0a:a0:13:82:78:
                    08:c5:15:e8:57:d6:f9:60:aa:12:40:f7:fd:3e:0e:
                    1f:78:57:5e:6f:85:de:df:3e:68:28:9a:3d:6c:1d:
                    a2:ab:4b:27:f4:98:63:00:ce:16:da:b8:1c:09:77:
                    37:f5:d9:2c:af:95:1a:1c:ed:f7:e7:73:20:dc:8b:
                    51:8e:62:6f:17:51:a6:3f:e2:d6:11:47:d5:e6:48:
                    12:90:e5:d1:b0:89:4c:5f:f4:b7:b3:bf:cb:04:83:
                    69:6f:bc:b4:19:14:49:b5:b5:86:77:26:13:c7:eb:
                    a8:78:10:79:37:e2:18:69:18:8a:91:a6:95:14:a0:
                    54:fa:1e:0e:59:23:83:12:1b:5c:16:63:f0:a3:0e:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2B:D7:E3:CF:39:CA:20:A3:22:D2:7C:FC:23:7A:D6:51:FC:9E:37
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:46:4f:32:69:14:84:6e:29:e4:36:ea:16:6f:28:c8:d4:
         07:ea:9f:96:68:8e:ca:9e:09:f9:4e:f7:74:a7:e1:dc:70:6e:
         03:28:c4:73:52:ae:3c:bb:3b:74:af:0d:14:40:55:b2:7b:29:
         71:c6:92:f0:19:40:9d:3e:f5:a6:21:c8:ee:33:1f:93:92:bd:
         c9:99:bd:e2:04:18:10:65:32:72:b4:62:1f:99:ec:2f:d6:97:
         b4:fb:66:d2:b5:e7:7f:4c:fb:a8:84:12:dc:fe:b6:2f:8c:52:
         1d:7f:c7:52:75:58:23:5c:22:7b:0f:7b:40:ca:d4:e0:bb:04:
         b1:bc:e0:d3:0d:bc:50:10:a0:1c:3f:7b:70:d4:58:7f:51:8e:
         ba:bc:9e:cb:5d:b2:d4:7b:74:20:bb:fe:8b:ec:67:37:52:1c:
         09:00:17:d3:50:aa:ab:14:5b:40:9e:e8:4a:af:ab:69:a4:f3:
         eb:61:dd:cd:0e:07:60:80:ed:d8:8f:de:8d:fa:3e:ea:5e:c8:
         9d:d0:20:39:86:ae:73:f4:22:dd:1a:aa:e2:60:45:f9:2f:5a:
         8c:34:d5:78:5d:9e:0f:25:7f:82:19:53:d9:f9:22:a2:0e:72:
         0d:b7:dc:38:5f:ae:86:bd:2c:89:fb:1c:5d:29:b3:28:e5:1f:
         10:ec:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org