Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          TEPutdDqjfIt5F6njRHoYXLBjaKkFQigcKpyREH/1kg=
Subject key identifier:   0F:77:D9:9D:35:06:37:5C:93:3D:09:D9:4B:E7:BD:0E:44:97:BD:5B
Certificate issuer:       /CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
Certificate serial:       72BD720A8A63CE59FFCE0405F1F44229D3A0EC25
Authority key identifier: E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Mon 30 Jan 2023 20:23:16 +0000
ROA not before:           Mon 30 Jan 2023 20:18:16 +0000
ROA not after:            Mon 29 Jan 2024 20:23:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bd:72:0a:8a:63:ce:59:ff:ce:04:05:f1:f4:42:29:d3:a0:ec:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
        Validity
            Not Before: Jan 30 20:18:16 2023 GMT
            Not After : Jan 29 20:23:16 2024 GMT
        Subject: CN=0F77D99D3506375C933D09D94BE7BD0E4497BD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:a1:ab:fe:60:0f:4e:a7:46:d6:ef:bf:da:
                    82:0e:19:f9:7a:a3:fb:27:fd:fd:ee:36:32:f8:23:
                    0c:11:b9:49:b0:50:83:34:e5:51:c1:2d:cd:cc:ee:
                    b9:85:ab:a0:0d:3f:72:c7:30:52:2a:de:5e:29:69:
                    20:95:b3:4e:e2:44:cc:a8:e5:b0:da:ae:74:c6:49:
                    61:73:7b:38:03:95:f3:0f:95:3e:c3:b4:66:d6:69:
                    17:19:4c:68:ae:52:5b:76:a0:2f:7a:45:e4:44:f8:
                    62:b6:e3:1b:21:e2:6c:59:42:c6:04:83:f9:6a:c2:
                    84:eb:07:5c:9b:35:d2:5f:2d:8e:d3:bd:b7:64:e9:
                    9d:11:a3:be:e0:d0:9c:4a:21:8c:7f:34:0a:f0:11:
                    3c:2d:6c:f2:7d:d8:53:4b:55:9b:e0:8c:d8:62:fd:
                    70:25:04:b7:b5:37:81:c3:fd:eb:65:3c:e4:8d:e7:
                    4f:39:90:ad:b2:96:56:07:e0:6c:df:d4:de:ff:c1:
                    17:60:ce:9d:6a:10:54:4a:c0:6a:e9:ba:e5:1a:b2:
                    c9:0b:f8:af:55:6c:f5:78:b2:c1:e1:af:4c:34:70:
                    1b:9c:85:f0:a9:e7:8d:37:64:cc:54:db:e2:16:2f:
                    07:d4:fe:d6:db:da:14:e4:5d:41:51:4b:b5:3d:20:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:77:D9:9D:35:06:37:5C:93:3D:09:D9:4B:E7:BD:0E:44:97:BD:5B
            X509v3 Authority Key Identifier:
                keyid:E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/E690836380853DB0773566AB4620ACB4F3DD3E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:16:30:66:a8:09:d6:a1:9f:f8:3f:81:16:7a:50:0c:68:
         11:8f:a7:f3:30:f1:04:34:c2:e4:d4:ad:b7:f1:11:6a:3c:dd:
         06:ca:f9:07:7f:99:8d:01:36:db:be:df:24:6d:be:af:e3:b2:
         cc:ef:7a:c9:42:3b:dc:c2:0b:6f:20:c6:72:03:cb:07:81:13:
         d5:fb:f0:49:b5:5f:0a:f4:d3:ca:d3:a6:54:3f:bb:e5:d2:fe:
         82:7e:cf:9f:56:79:aa:b8:82:0f:da:b2:59:57:a5:06:a2:5f:
         74:a7:11:d5:ca:1c:5c:4d:24:fe:e3:85:b9:de:2f:28:02:6d:
         64:2d:bd:b2:91:76:cb:78:9a:ee:cb:bf:17:79:b7:64:5b:80:
         1e:72:bb:15:a6:16:3e:e8:ae:b0:63:6a:9a:0a:58:8f:be:38:
         1e:51:0f:6a:8b:69:74:c1:98:77:5f:1b:76:c4:74:4a:b5:6c:
         a2:75:67:d9:16:e5:b8:72:14:98:5e:79:e7:77:8e:51:77:17:
         c5:7c:1d:1d:82:14:05:63:44:09:26:cf:31:b1:08:82:ae:d7:
         ec:2c:c3:f7:35:60:c9:e9:82:41:ac:68:ac:a5:4f:4a:7e:27:
         76:ba:4c:b6:0d:5f:41:b1:a6:41:8e:d2:a0:71:64:5d:ab:da:
         91:59:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org