Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          qdcBZ+gjHc/krIkex8AByLDLsMIl7bksjWEn5Lousak=
Subject key identifier:   1A:FC:73:6C:4E:29:B2:69:75:C5:09:0C:6E:53:71:08:7F:A2:89:EA
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       0B74382940DD38FC780B442C2EB877639E8BF752
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:38 +0000
ROA not before:           Mon 05 Jun 2023 18:28:38 +0000
ROA not after:            Mon 03 Jun 2024 18:33:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:38:29:40:dd:38:fc:78:0b:44:2c:2e:b8:77:63:9e:8b:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:38 2023 GMT
            Not After : Jun  3 18:33:38 2024 GMT
        Subject: CN=1AFC736C4E29B26975C5090C6E5371087FA289EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:52:b7:d8:12:13:9b:13:38:4a:22:24:3e:
                    fb:f0:8b:d0:cf:75:d5:ff:d3:35:d3:6e:c2:53:2c:
                    ae:a9:de:57:c4:11:8a:b8:bf:dc:68:8d:ef:ce:35:
                    cd:16:6f:c3:c6:2f:af:21:0a:c6:7e:37:63:42:8f:
                    e7:c1:10:44:b9:81:1d:81:3a:5e:b5:a6:42:4a:66:
                    a6:4f:8e:f7:90:ed:3e:a5:a8:ff:01:b7:fa:2e:51:
                    1f:3b:04:67:eb:68:14:63:7f:1d:66:63:11:b7:f2:
                    72:a6:57:27:76:d4:6f:eb:9b:e1:38:76:4a:3a:eb:
                    f7:e4:3c:90:4b:d8:89:b8:ac:5b:e0:03:55:d1:cd:
                    63:71:b0:26:57:6b:14:35:61:16:9c:f4:6f:ee:f4:
                    08:8a:5f:95:21:37:7c:cc:4c:95:64:a4:93:2a:6c:
                    60:ef:aa:6d:8b:87:ef:90:47:0e:09:66:74:f7:1b:
                    04:94:f7:98:92:53:50:fc:cf:f5:1a:8a:3c:8a:4e:
                    cd:a2:71:44:ae:3b:5c:c6:df:d0:e8:37:b3:09:ce:
                    40:e4:c2:3c:dc:ec:91:a1:ee:a3:ec:65:52:51:61:
                    0e:90:20:c9:2c:db:aa:65:52:21:ad:b0:81:ed:32:
                    38:2d:40:72:e6:2e:5e:0c:01:6c:fe:5b:0c:8e:db:
                    bd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FC:73:6C:4E:29:B2:69:75:C5:09:0C:6E:53:71:08:7F:A2:89:EA
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:2e:27:59:4c:e1:61:ba:95:81:c7:05:0e:85:54:b2:9e:
         de:13:15:8b:00:5a:6a:b6:5b:eb:ac:91:1f:5e:68:49:b4:63:
         60:a4:6a:b8:16:eb:d8:fb:7e:55:76:7c:1f:1e:98:8d:59:7b:
         3c:82:10:6c:0b:d7:01:49:15:f0:26:28:63:45:44:c8:49:7e:
         65:d0:dc:56:43:69:3e:5b:8d:7e:75:1b:d7:ef:1b:e6:b1:ab:
         44:14:45:17:89:3a:ba:17:24:7f:37:07:e3:13:31:67:7b:d8:
         85:f4:9f:34:1a:4c:ff:29:89:5d:6e:9b:34:f5:4b:15:2e:c4:
         5d:7f:1d:b5:65:a7:76:44:34:f0:5c:dd:c0:4f:3a:0e:ba:1e:
         45:b2:7a:96:ec:21:09:27:90:ef:f9:fd:a6:c0:0e:20:8d:2a:
         75:06:b2:77:dc:48:be:6e:f3:22:70:bc:6f:aa:13:f9:39:01:
         49:8a:53:11:74:cd:b8:63:43:27:74:af:0f:5c:eb:36:66:f1:
         21:4a:71:47:e7:e8:ab:23:5c:4b:d7:51:f2:6e:9d:f9:bf:c0:
         33:e4:3c:ab:d1:f7:04:0b:43:45:78:6e:93:b9:6c:d3:75:e5:
         20:ff:65:8c:95:a2:28:e9:2f:3f:ad:42:3a:1f:48:1b:40:d2:
         2a:e4:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:06 2024 by rpki-client on console-fra.rpki-client.org