Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          tXSK0NPPPy3j4Bn6s3GxATKvpUdTSo0F7HM2XMjU/JM=
Subject key identifier:   07:2A:E0:36:0E:8D:9B:42:F5:49:E4:52:3B:30:D9:EB:B5:59:1C:23
Certificate issuer:       /CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
Certificate serial:       2A1C6211A82B7FAD3E2422E8B390507446CF36F3
Authority key identifier: 37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 24 Feb 2023 15:16:40 +0000
ROA not before:           Fri 24 Feb 2023 15:11:40 +0000
ROA not after:            Fri 23 Feb 2024 15:16:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:62:11:a8:2b:7f:ad:3e:24:22:e8:b3:90:50:74:46:cf:36:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b
        Validity
            Not Before: Feb 24 15:11:40 2023 GMT
            Not After : Feb 23 15:16:40 2024 GMT
        Subject: CN=072AE0360E8D9B42F549E4523B30D9EBB5591C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:e8:6e:82:cb:13:8f:ec:f4:2f:40:a3:99:
                    23:72:24:84:53:ad:85:19:6e:ca:d4:d4:d8:59:00:
                    5c:2c:f2:78:2a:b2:63:69:f9:fa:f4:f9:ad:e2:38:
                    8c:35:cc:dd:74:23:66:01:97:f8:db:ee:3b:33:c2:
                    b1:41:60:18:23:84:0d:12:82:21:0f:b2:ad:bb:05:
                    b5:ed:d7:04:b0:f6:be:2d:2a:94:f7:46:63:4f:88:
                    83:bb:71:50:ca:87:0e:0f:7c:88:33:38:fd:59:7c:
                    20:f9:c6:34:6e:e0:77:02:91:b9:5f:1a:e1:72:23:
                    96:83:f0:ed:8c:c8:9d:fd:8b:ba:79:c1:79:fb:a3:
                    48:f7:ee:e8:d6:4d:29:12:76:80:8a:2b:e2:b9:59:
                    6f:76:1b:24:14:33:4b:5b:31:4f:6a:0c:09:92:20:
                    17:ec:f1:b0:c0:38:e6:6b:dd:dd:e6:75:bb:ef:0c:
                    3a:38:d7:17:85:14:e7:92:fc:89:44:21:c3:59:1d:
                    64:0f:9e:7e:c5:c7:93:11:3e:4e:6a:60:1e:2f:0b:
                    34:6d:13:ff:46:5c:71:f4:e1:c2:ec:87:b5:d3:b2:
                    89:93:4e:80:07:89:c8:73:a8:29:b4:e3:d2:c3:bd:
                    80:3d:f4:72:0f:1e:fc:77:8d:82:7b:c8:ec:23:d1:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:E0:36:0E:8D:9B:42:F5:49:E4:52:3B:30:D9:EB:B5:59:1C:23
            X509v3 Authority Key Identifier:
                keyid:37:BD:1F:12:1A:C0:CB:33:16:CF:F1:03:14:AC:8A:28:9E:31:E5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/37BD1F121AC0CB3316CFF10314AC8A289E31E53D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cf82a88-daad-4851-a26a-7cc5a47f0a27/fcb20f59662c535b1b185319af3e357fd6cac70c45b3ef257b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e4018683fdcdad0fb1/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:92:f2:3f:b4:bf:76:b6:47:19:2d:34:ae:69:31:31:40:
         93:09:e9:3b:6f:35:5f:44:f6:34:9f:9b:68:c3:5b:fa:14:3d:
         47:4c:b2:2b:14:67:6f:f8:86:9b:32:1f:13:bf:1b:08:6b:3d:
         c0:75:47:39:46:6f:da:39:20:53:3b:12:03:4e:fb:bd:a5:f4:
         ab:64:62:0c:10:b7:83:4c:bb:26:c5:0a:9f:fb:4b:48:86:01:
         17:b6:95:0d:ff:f7:d2:40:d3:6d:61:9f:af:39:cb:a6:6c:06:
         53:5a:57:ae:43:89:44:d0:31:b4:e2:07:e8:9c:06:9f:2a:08:
         2f:19:5a:63:a0:bc:63:f1:fc:d3:f1:ee:9d:de:7e:64:ce:b3:
         98:37:a6:a1:ea:a4:65:45:a9:d1:c5:33:50:8f:0b:b7:db:82:
         6e:a5:ee:ca:15:5b:b3:1f:33:44:a9:e0:9f:5c:a3:4e:3d:a9:
         64:4e:a8:ae:a0:07:c0:ba:44:a8:86:4a:fe:bf:04:20:da:8d:
         a6:2d:31:ce:7b:e0:53:1c:30:86:87:03:40:0c:dc:af:a2:c6:
         3c:f7:cc:db:3d:2a:8f:40:00:72:b0:bb:6f:8e:cb:78:74:8c:
         92:c8:1f:76:94:9d:7d:97:c8:1e:c5:32:ea:43:f4:b3:e0:c9:
         41:39:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:17 2025 by rpki-client