Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          G9rKtWYaGoMSU3wR1jK3wB24lOnsBnsBtAuWjqoypkk=
Subject key identifier:   DD:E1:76:DD:03:80:55:4A:C1:E4:99:79:D0:84:B9:B3:BF:7C:8B:8D
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       296E1B3DA6A126F4C56CF2262CEFE51CAAB5A09C
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Fri 10 Feb 2023 20:17:34 +0000
ROA not before:           Fri 10 Feb 2023 20:12:34 +0000
ROA not after:            Fri 09 Feb 2024 20:17:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6e:1b:3d:a6:a1:26:f4:c5:6c:f2:26:2c:ef:e5:1c:aa:b5:a0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 10 20:12:34 2023 GMT
            Not After : Feb  9 20:17:34 2024 GMT
        Subject: CN=DDE176DD0380554AC1E49979D084B9B3BF7C8B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:99:d5:a5:22:0c:88:37:58:96:4d:79:bd:
                    44:09:7d:4b:2b:42:57:d6:51:a0:f0:2f:79:39:9a:
                    51:f0:f8:bc:9c:7f:27:a0:b2:8d:74:5a:5b:dc:ae:
                    ee:42:6e:c7:fc:cf:31:4f:27:c4:18:a1:9e:d8:12:
                    76:ca:db:dc:75:b0:89:a9:8f:d8:77:25:15:2d:bd:
                    4f:f1:6e:34:8e:da:a1:07:a6:0e:4a:75:82:ab:83:
                    f6:04:0d:98:c0:dd:9a:65:7f:05:5d:4c:c7:37:c7:
                    2c:6c:e0:fa:a0:ee:cb:d5:9c:b5:6b:8c:ec:95:e7:
                    9c:d9:ca:71:f0:81:ba:c0:be:cc:b7:e0:f1:e5:a7:
                    c8:4b:15:da:64:33:68:06:be:93:12:ed:4d:5a:ad:
                    1c:b2:ad:92:47:b0:cd:be:ad:d6:24:ee:34:10:88:
                    1b:8e:89:45:95:d0:24:1c:c3:1b:1c:8b:74:38:9c:
                    51:01:91:81:94:ce:ef:1f:28:78:a2:99:c4:a5:51:
                    7e:14:b8:82:fc:25:f0:ff:06:1a:db:39:b3:bb:d1:
                    7d:58:f4:01:bb:0e:15:15:da:48:ad:1b:b6:1f:a7:
                    d8:f1:9c:40:65:3f:be:7b:d2:6a:21:2e:b6:c5:cc:
                    58:f1:b3:52:18:2f:60:5e:f5:1b:b2:41:70:84:63:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:76:DD:03:80:55:4A:C1:E4:99:79:D0:84:B9:B3:BF:7C:8B:8D
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         af:64:ba:af:30:62:b1:70:8c:58:07:6f:28:4e:49:f7:16:50:
         08:c7:f3:f0:e8:a9:c2:83:af:1f:61:a1:73:cc:f0:c4:95:6d:
         ae:ce:e0:33:48:e4:f3:73:42:fc:19:28:e4:bc:54:8a:75:b0:
         12:85:5f:62:90:d9:37:15:25:7d:6f:d5:59:66:40:75:2f:7d:
         1b:09:e9:2a:7c:11:47:ae:61:93:74:34:e6:9e:7e:52:23:73:
         1c:5a:1f:01:09:af:ba:2f:11:3a:0d:3e:51:ea:44:62:fc:56:
         87:f0:6e:b1:af:c6:30:2d:c0:8d:ba:fe:4d:65:22:e3:79:db:
         b0:76:6d:64:22:e6:03:8c:33:69:2a:6a:8e:84:70:cc:76:d6:
         91:d5:e6:fa:2d:c2:83:9a:4f:a5:df:83:d8:47:78:2d:7f:a8:
         db:cc:62:dc:66:5c:5b:29:06:2a:7d:23:96:cb:89:1c:27:f3:
         fc:81:37:cf:1f:e3:be:73:4f:75:87:ed:b4:2a:e0:3b:19:12:
         ee:b3:4c:be:e1:d2:db:a6:6f:69:9a:9f:c3:60:d8:10:c7:db:
         7f:31:e3:54:de:65:bf:bf:a2:bb:ff:fb:03:6a:58:10:ae:97:
         db:80:a3:c6:eb:af:f5:78:63:48:3e:00:6f:4c:fd:ad:3c:fd:
         f8:15:6d:b3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUKW4bPaahJvTFbPImLO/lHKq1oJwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQxNTllOGEzMmI1ZmQ2N2FmOGEwNzQw
OTE2YjA1NjIxODYyMGI4ZjMwHhcNMjMwMjEwMjAxMjM0WhcNMjQwMjA5MjAxNzM0
WjAzMTEwLwYDVQQDEyhEREUxNzZERDAzODA1NTRBQzFFNDk5NzlEMDg0QjlCM0JG
N0M4QjhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2uZ1aUiDIg3
WJZNeb1ECX1LK0JX1lGg8C95OZpR8Pi8nH8noLKNdFpb3K7uQm7H/M8xTyfEGKGe
2BJ2ytvcdbCJqY/YdyUVLb1P8W40jtqhB6YOSnWCq4P2BA2YwN2aZX8FXUzHN8cs
bOD6oO7L1Zy1a4zsleec2cpx8IG6wL7Mt+Dx5afISxXaZDNoBr6TEu1NWq0csq2S
R7DNvq3WJO40EIgbjolFldAkHMMbHIt0OJxRAZGBlM7vHyh4opnEpVF+FLiC/CXw
/wYa2zmzu9F9WPQBuw4VFdpIrRu2H6fY8ZxAZT++e9JqIS62xcxY8bNSGC9gXvUb
skFwhGMVrQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFN3hdt0DgFVKweSZedCEubO/
fIuNMB8GA1UdIwQYMBaAFKaBdHIydMjaSFkTEsvDafu3OQprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODYwNDQ2ZTQwMTg2M2NmOTQ5NTM1NzIwLzAv
QTY4MTc0NzIzMjc0QzhEQTQ4NTkxMzEyQ0JDMzY5RkJCNzM5MEE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzQ0ZTAzYzYxLTZlMzktNDlhNS1iYjIyLTc3Y2M1YjBhYjA2Zi9mY2Iy
MGY1OTY2NDE1OWU4YTMyYjVmZDY3YWY4YTA3NDA5MTZiMDU2MjE4NjIwYjhmMy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2MDQ0NmU0MDE4NjNj
Zjk0OTUzNTcyMC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC/DsAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvZLqvMGKxcIxYB28oTkn3FlAIx/Pw6KnCg68fYaFzzPDElW2uzuAz
SOTzc0L8GSjkvFSKdbAShV9ikNk3FSV9b9VZZkB1L30bCekqfBFHrmGTdDTmnn5S
I3McWh8BCa+6LxE6DT5R6kRi/FaH8G6xr8YwLcCNuv5NZSLjeduwdm1kIuYDjDNp
KmqOhHDMdtaR1eb6LcKDmk+l34PYR3gtf6jbzGLcZlxbKQYqfSOWy4kcJ/P8gTfP
H+O+c091h+20KuA7GRLus0y+4dLbpm9pmp/DYNgQx9t/MeNU3mW/v6K7//sDalgQ
rpfbgKPG66/1eGNIPgBvTP2tPP34FW2z
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:41:54 2025 by rpki-client