Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Og4v7/UFxplUoSpjsLfE3zmsVT7hooVDDpa/8zgibIs=
Subject key identifier:   FB:AE:AF:43:F1:A8:11:25:7E:6E:89:67:C9:61:B6:17:FD:4F:84:A1
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       057D2EE2DD710999B3BAF64101CC27B89C2A5968
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:23:56 +0000
ROA not before:           Tue 14 Feb 2023 14:18:56 +0000
ROA not after:            Tue 13 Feb 2024 14:23:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7d:2e:e2:dd:71:09:99:b3:ba:f6:41:01:cc:27:b8:9c:2a:59:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:18:56 2023 GMT
            Not After : Feb 13 14:23:56 2024 GMT
        Subject: CN=FBAEAF43F1A811257E6E8967C961B617FD4F84A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:b6:0c:c1:c8:9b:78:b4:f7:0d:da:36:17:
                    52:67:30:68:4f:e1:ca:d3:ab:37:23:00:88:50:16:
                    82:2f:27:38:bf:b7:ed:cd:ba:b1:54:06:8f:f6:69:
                    4b:4f:f6:e5:bb:01:b0:c2:c2:7c:25:f3:7b:df:96:
                    d6:10:52:b3:7b:d0:b0:d6:74:f2:1e:bf:e2:fb:5b:
                    14:82:92:15:bd:39:15:d9:bc:a3:ab:ea:77:97:98:
                    ca:5d:e1:03:60:05:e5:14:8d:3c:5d:b3:32:2d:f0:
                    cf:c6:8f:02:9e:71:a7:c4:f9:c3:e1:ea:5b:e7:a3:
                    c6:82:08:e2:78:25:41:fd:fa:e5:76:da:19:35:8d:
                    53:5f:47:23:27:c4:04:3c:a8:4a:79:64:d7:b7:f6:
                    82:e6:ea:65:70:05:32:02:44:29:9d:76:7f:e8:13:
                    12:07:cc:e7:a7:d3:18:d2:5f:26:7c:38:43:ac:68:
                    8d:e1:bf:a7:24:1a:9f:10:2e:24:d8:a2:c5:b6:c5:
                    b1:94:aa:28:7c:e7:c4:c7:9f:62:39:b7:fe:5a:98:
                    c9:27:c1:64:1c:a4:00:5d:19:9f:1e:8f:43:4d:ac:
                    26:48:7c:12:da:40:94:6f:0e:23:f6:ef:c8:6e:ce:
                    c0:5d:30:56:21:01:ca:d4:5f:02:72:66:58:c2:47:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:AF:43:F1:A8:11:25:7E:6E:89:67:C9:61:B6:17:FD:4F:84:A1
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:89:55:49:d7:3d:11:1b:c6:07:aa:c6:aa:b3:e0:db:17:4f:
         26:96:b1:71:a0:68:7c:bf:25:c1:9f:3b:58:54:1c:34:5e:e6:
         ed:4d:c9:35:0a:c2:ae:b2:2c:61:d5:73:00:ca:b6:a4:30:69:
         d6:2f:d8:d3:98:92:12:38:d1:c9:6c:45:7b:aa:b9:f4:5f:d1:
         0a:ac:fa:d2:a4:d4:fc:6a:47:f3:5f:13:9b:26:1f:f3:2b:67:
         1e:c2:cc:f1:7e:f5:1b:e6:81:a7:cd:bc:52:4c:b9:fa:42:eb:
         61:7f:8c:ff:72:e5:18:8e:dd:56:a2:c9:8a:aa:19:4c:a0:d1:
         e0:03:b7:2f:96:6b:0d:91:96:86:60:50:77:9c:db:81:0e:c9:
         7a:87:a4:43:0e:b3:fd:0d:ed:30:cf:be:71:7d:de:3a:8e:e9:
         51:f9:75:6b:ef:19:a7:50:c8:57:4c:96:6e:d6:24:1a:35:78:
         6f:34:47:0d:fe:4f:9d:23:eb:13:35:6f:52:00:78:04:23:15:
         60:a1:9b:e1:23:42:c6:84:db:15:d9:02:36:1d:d0:b4:b9:26:
         3a:1d:94:b8:53:ac:3d:e1:34:d4:f6:d9:63:9c:03:a8:d1:37:
         a7:30:39:0f:6e:38:b7:26:0e:51:36:c3:7e:f6:6d:13:23:ba:
         92:1f:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:35:16 2025 by rpki-client