Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          ZKAn97rqX24atNdMOKExONm9U2wSxJB3U/AAl2v5U2A=
Subject key identifier:   71:67:9B:F3:9F:08:BB:16:92:FD:3D:25:7E:AD:61:F1:B7:6D:B8:92
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       2E73EDCFBED38AF7883E684FB3E87C7648B11A65
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:23:50 +0000
ROA not before:           Tue 14 Feb 2023 14:18:50 +0000
ROA not after:            Tue 13 Feb 2024 14:23:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:ed:cf:be:d3:8a:f7:88:3e:68:4f:b3:e8:7c:76:48:b1:1a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:18:50 2023 GMT
            Not After : Feb 13 14:23:50 2024 GMT
        Subject: CN=71679BF39F08BB1692FD3D257EAD61F1B76DB892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:8f:b1:fd:ab:7f:1a:8d:12:4c:ee:c7:fc:
                    d2:9a:4d:58:15:c9:d7:01:23:16:13:76:c6:0e:69:
                    08:24:a7:cf:9e:4b:e7:ed:57:54:10:e7:23:a4:43:
                    03:d1:30:d7:0c:14:aa:3f:77:c5:e1:90:33:7d:f7:
                    58:6a:20:c0:35:66:e4:64:7d:fb:b8:16:66:b5:ec:
                    33:02:84:98:64:9c:66:fe:51:6d:c3:cc:81:90:40:
                    ad:8a:a3:01:02:f1:90:c2:f3:88:e0:98:6e:b1:c9:
                    9b:3b:f5:b2:15:8e:f9:f5:6a:e6:bf:7f:12:28:f7:
                    db:66:f5:8b:d6:2d:c6:dd:03:83:76:e1:3c:6b:8f:
                    a1:f1:56:1c:48:1a:40:45:a1:38:15:0d:21:d6:dc:
                    d4:bb:d0:ee:ce:28:c2:59:5b:3a:72:f0:95:66:b7:
                    30:c7:38:d7:25:5a:ed:3b:b7:b0:4a:1d:b2:05:8a:
                    65:1a:02:05:e0:89:cb:ff:30:77:b8:56:75:a8:0e:
                    a4:b2:e4:72:33:a0:43:bd:1d:48:c2:60:25:5e:91:
                    ce:bd:f9:f6:ab:28:e1:d8:61:39:9c:95:94:1d:a6:
                    4a:db:b6:fa:3d:1f:9c:04:e6:1b:66:a0:b0:d5:69:
                    92:72:48:cf:3d:f5:4d:e2:4b:db:1d:54:7b:72:be:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:9B:F3:9F:08:BB:16:92:FD:3D:25:7E:AD:61:F1:B7:6D:B8:92
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:6d:fa:fa:b5:c4:99:a6:b2:45:24:60:f2:b5:49:50:bd:
         74:24:d8:3b:e9:57:17:42:85:03:05:20:7f:d6:4e:7b:18:b3:
         bc:90:96:df:62:1a:81:49:e3:37:95:e5:8c:50:09:4e:c1:11:
         29:29:56:02:f5:56:8b:91:8f:cd:f5:72:4e:2f:80:2e:f0:8b:
         c2:ac:31:20:d4:6e:48:df:bf:00:0a:8a:e8:7c:11:5d:44:fc:
         1a:5a:32:a3:89:af:55:22:95:bf:04:ee:af:20:c5:72:67:20:
         d4:5e:8e:82:6a:42:4d:e0:7f:c4:da:43:66:a4:14:8b:47:4a:
         2d:d8:43:e0:2d:54:9a:06:ec:66:0c:13:59:e9:4c:e5:75:f1:
         84:c3:77:4b:e9:8c:ea:bf:04:86:8c:f0:11:21:c9:09:c4:98:
         c9:1f:b7:7f:ec:d4:6c:35:5e:33:6c:8c:51:b2:f8:4c:33:45:
         df:12:18:c0:0e:ac:4b:44:de:9f:38:90:52:cb:e2:07:4e:a2:
         50:3c:d7:ea:9e:96:2e:48:f7:31:1f:07:33:a7:c8:a6:79:40:
         20:0b:ff:61:ee:72:d6:3b:c2:5e:fa:8b:4b:dd:4e:6a:29:41:
         fc:6c:3e:38:89:a0:7c:bb:71:59:97:63:3f:7f:df:ba:d5:d3:
         ab:2d:09:f6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIULnPtz77TiveIPmhPs+h8dkixGmUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQxNTllOGEzMmI1ZmQ2N2FmOGEwNzQw
OTE2YjA1NjIxODYyMGI4ZjMwHhcNMjMwMjE0MTQxODUwWhcNMjQwMjEzMTQyMzUw
WjAzMTEwLwYDVQQDEyg3MTY3OUJGMzlGMDhCQjE2OTJGRDNEMjU3RUFENjFGMUI3
NkRCODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN6Psf2rfxqN
Ekzux/zSmk1YFcnXASMWE3bGDmkIJKfPnkvn7VdUEOcjpEMD0TDXDBSqP3fF4ZAz
ffdYaiDANWbkZH37uBZmtewzAoSYZJxm/lFtw8yBkECtiqMBAvGQwvOI4Jhuscmb
O/WyFY759Wrmv38SKPfbZvWL1i3G3QODduE8a4+h8VYcSBpARaE4FQ0h1tzUu9Du
zijCWVs6cvCVZrcwxzjXJVrtO7ewSh2yBYplGgIF4InL/zB3uFZ1qA6ksuRyM6BD
vR1IwmAlXpHOvfn2qyjh2GE5nJWUHaZK27b6PR+cBOYbZqCw1WmSckjPPfVN4kvb
HVR7cr4n8wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFHFnm/OfCLsWkv09JX6tYfG3
bbiSMB8GA1UdIwQYMBaAFKaBdHIydMjaSFkTEsvDafu3OQprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODYwNDQ2ZTQwMTg2M2NmOTQ5NTM1NzIwLzAv
QTY4MTc0NzIzMjc0QzhEQTQ4NTkxMzEyQ0JDMzY5RkJCNzM5MEE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzQ0ZTAzYzYxLTZlMzktNDlhNS1iYjIyLTc3Y2M1YjBhYjA2Zi9mY2Iy
MGY1OTY2NDE1OWU4YTMyYjVmZDY3YWY4YTA3NDA5MTZiMDU2MjE4NjIwYjhmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2MDQ0NmU0MDE4NjNj
Zjk0OTUzNTcyMC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzEzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwEAMA0G
CSqGSIb3DQEBCwUAA4IBAQCN7m36+rXEmaayRSRg8rVJUL10JNg76VcXQoUDBSB/
1k57GLO8kJbfYhqBSeM3leWMUAlOwREpKVYC9VaLkY/N9XJOL4Au8IvCrDEg1G5I
378ACorofBFdRPwaWjKjia9VIpW/BO6vIMVyZyDUXo6CakJN4H/E2kNmpBSLR0ot
2EPgLVSaBuxmDBNZ6UzldfGEw3dL6YzqvwSGjPARIckJxJjJH7d/7NRsNV4zbIxR
svhMM0XfEhjADqxLRN6fOJBSy+IHTqJQPNfqnpYuSPcxHwczp8imeUAgC/9h7nLW
O8Je+otL3U5qKUH8bD44iaB8u3FZl2M/f9+61dOrLQn2
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:38:01 2025 by rpki-client