Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          H9HxTfNSTt+CC0GZxNOlUaBdI1gGsVjpEHC4Cgsu5/0=
Subject key identifier:   6F:B5:BE:4C:64:96:33:50:1A:0C:63:9E:78:30:47:37:E0:83:2E:F8
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       0EB33A76DBC9F435DE4553539E3FA3723687893E
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:24:34 +0000
ROA not before:           Tue 14 Feb 2023 14:19:34 +0000
ROA not after:            Tue 13 Feb 2024 14:24:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b3:3a:76:db:c9:f4:35:de:45:53:53:9e:3f:a3:72:36:87:89:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:19:34 2023 GMT
            Not After : Feb 13 14:24:34 2024 GMT
        Subject: CN=6FB5BE4C649633501A0C639E78304737E0832EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:41:1b:08:7f:7e:8f:d9:7c:59:18:6f:f3:
                    84:91:42:12:1b:4b:af:30:6e:16:76:f4:aa:73:a3:
                    3a:f0:33:ec:c8:82:91:7a:ff:00:5e:a3:63:cf:6a:
                    d8:9a:11:17:55:63:a2:e1:59:bf:d1:c8:d6:b6:c4:
                    76:b7:bb:c0:e5:8c:c7:c8:69:3a:ac:55:39:2e:1e:
                    1e:2d:f4:1d:f7:bc:21:2c:6c:8d:5e:c3:85:c8:95:
                    1e:2d:1d:d4:c5:22:90:ad:8d:d3:1c:f4:71:04:f3:
                    89:39:5f:b7:ab:ae:6f:05:8d:5e:6b:7c:d5:48:f0:
                    75:a6:00:58:3c:e4:b9:32:ce:67:5e:51:c2:8b:3c:
                    f9:12:cd:0f:0f:e2:66:af:2c:0f:1a:f4:1d:5b:67:
                    22:94:54:43:ec:6b:4d:69:94:8d:34:ab:0a:07:76:
                    44:13:e4:8b:4b:0b:7a:d1:31:be:de:1d:68:dc:f4:
                    77:34:1a:ad:80:ae:d9:dd:2b:80:89:53:c4:5d:f3:
                    60:68:d2:26:9f:8a:fc:fd:b0:42:31:8e:b0:23:df:
                    c3:2e:1b:79:ea:41:94:6a:c0:72:04:51:32:50:53:
                    23:d5:38:51:43:e7:10:de:e9:9f:3e:e1:15:03:62:
                    14:1a:1e:2d:4b:c3:b0:fb:5d:e9:33:34:b5:31:97:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B5:BE:4C:64:96:33:50:1A:0C:63:9E:78:30:47:37:E0:83:2E:F8
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:81:99:81:9f:74:38:ac:95:6d:0c:45:66:c0:73:7c:8f:d3:
         4f:be:cd:ee:52:34:28:cd:07:23:ce:f3:c1:00:72:7a:b7:9d:
         34:31:9f:82:b9:af:1c:69:c1:30:65:d4:c7:db:f5:57:83:f6:
         d0:2b:c5:4b:81:8e:68:3a:06:38:a8:42:33:62:af:02:d0:44:
         33:7c:49:2d:79:ed:25:18:b6:9b:e8:c9:72:52:2e:e6:ea:62:
         91:50:82:99:5f:22:13:8f:08:cc:b6:45:e0:e6:75:2a:df:61:
         b5:12:0f:08:76:07:ca:0d:11:51:55:6e:45:96:46:d2:9e:ff:
         e2:95:b3:bb:39:24:f3:57:7a:f0:af:a4:46:c0:4c:98:a9:c3:
         d3:74:e4:0d:22:1d:b1:5a:d0:8f:c9:40:76:e1:fe:0a:40:63:
         40:40:f2:4a:ab:7d:58:d1:6d:49:fa:58:41:03:3f:73:20:11:
         63:fa:b9:8e:d6:44:52:d8:5d:28:fb:4b:33:a5:06:27:d2:6b:
         f2:31:36:9f:67:66:60:52:70:0d:3a:fe:ab:c8:58:4c:5c:3c:
         2f:de:24:0d:d4:aa:5f:67:ab:b5:ec:fa:87:08:d6:19:50:3d:
         70:06:ec:92:34:39:80:d8:53:d5:66:f3:f7:01:91:c4:20:f8:
         30:0c:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:39:03 2025 by rpki-client