Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3831303a3a2f34342d3438203d3e203434363538.roa
File:                     323630323a666139623a3831303a3a2f34342d3438203d3e203434363538.roa (raw, json)
Hash identifier:          AEoIcAW4pm9eR9H4zcNvpzSbsl2lFYCQXt4XnkQ7sK0=
Subject key identifier:   3E:37:B1:BF:BA:C0:ED:53:2E:01:16:63:C8:14:6A:B0:E7:A7:8A:DB
Certificate issuer:       /CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
Certificate serial:       755C1BB03608E66C2BC0948E146A6F90B875CA84
Authority key identifier: D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3831303a3a2f34342d3438203d3e203434363538.roa
Signing time:             Tue 02 Jan 2024 17:28:55 +0000
ROA not before:           Tue 02 Jan 2024 17:23:55 +0000
ROA not after:            Tue 31 Dec 2024 17:28:55 +0000
asID:                     44658
IP address blocks:        2602:fa9b:810::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5c:1b:b0:36:08:e6:6c:2b:c0:94:8e:14:6a:6f:90:b8:75:ca:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
        Validity
            Not Before: Jan  2 17:23:55 2024 GMT
            Not After : Dec 31 17:28:55 2024 GMT
        Subject: CN=3E37B1BFBAC0ED532E011663C8146AB0E7A78ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:31:2a:7a:37:79:93:f0:53:1a:27:a2:05:38:
                    12:6d:d1:12:35:a7:3d:36:0a:06:12:62:ef:93:f3:
                    46:d6:d5:28:1e:75:e9:a1:15:b4:87:6d:ed:0e:e5:
                    27:34:1c:ff:f9:50:68:97:88:6f:2d:42:6b:35:a1:
                    1d:e6:6a:7c:de:ec:fd:e3:04:13:4d:bd:f6:27:d2:
                    45:c8:8e:d6:21:67:11:fe:c2:cd:7d:5d:3d:84:8e:
                    a3:38:27:32:b0:82:57:95:b7:57:f4:a6:49:24:0e:
                    6c:c1:37:49:f5:30:40:12:61:1d:9e:bf:fe:1c:d9:
                    0d:2a:0b:4a:87:44:e1:8c:e7:45:16:a9:7d:83:4d:
                    c0:43:89:c2:61:17:75:27:34:71:b9:10:d3:c1:96:
                    8a:99:15:c0:68:d5:51:f8:11:75:93:64:71:0a:14:
                    b6:0a:6d:39:9a:37:81:b2:31:9f:d9:33:f1:85:31:
                    87:f1:a9:5e:21:c4:48:d9:9e:0b:b0:a0:02:e7:dd:
                    72:9a:88:03:c5:5c:4a:82:d2:4e:68:0b:45:5d:31:
                    89:e4:23:00:b2:8d:b4:b6:e3:94:2c:fb:3d:25:99:
                    a5:36:de:7f:17:33:90:b9:a8:1a:1d:e0:e7:5e:6d:
                    c1:40:e8:50:28:1f:d9:82:87:8f:6e:08:b9:fc:7c:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:37:B1:BF:BA:C0:ED:53:2E:01:16:63:C8:14:6A:B0:E7:A7:8A:DB
            X509v3 Authority Key Identifier:
                keyid:D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3831303a3a2f34342d3438203d3e203434363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:810::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:2a:0c:aa:0f:16:be:45:df:29:94:86:7e:13:e9:2e:f5:
         59:cc:4f:9c:b1:64:b8:49:88:17:a8:bb:39:ea:a0:4c:f5:61:
         3b:b1:e5:a2:f5:7f:c7:ca:a1:24:66:55:c3:0a:fe:fe:03:e2:
         f1:93:e6:b1:a1:72:07:50:d1:4a:b6:d5:ee:97:94:f1:37:c7:
         b2:52:58:c1:98:b4:a8:54:69:bb:5b:f5:45:4a:51:53:38:7d:
         7c:7d:95:5e:aa:77:6c:96:4e:d1:04:d4:3f:5e:87:2e:6c:4b:
         14:0e:94:10:d3:60:62:f3:dc:90:17:d2:a5:b4:34:4e:09:40:
         1d:da:68:17:ca:81:bc:da:a4:7a:d6:dd:9c:32:ec:bd:f9:2b:
         50:31:10:6c:0d:12:ae:d3:02:98:5b:08:d9:d4:16:20:a2:d5:
         27:03:54:a8:ed:4e:38:56:3b:8b:d1:1a:f1:4a:cd:1c:b7:be:
         55:a1:45:3d:2f:30:e6:31:59:85:73:6a:14:90:0e:2e:1c:d6:
         9f:8b:44:89:f7:45:7b:04:1e:03:47:84:63:2d:da:19:db:00:
         ef:19:9f:18:47:61:af:81:85:5a:c6:48:2e:7f:ac:87:8e:19:
         bc:65:fb:1e:83:98:94:5a:e1:f8:bd:cc:25:03:fb:5c:88:f4:
         de:e2:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org