Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666136653a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          aSlJ+G5Jv0uXlTKhKk4agbw4JVdA7k4v1q34foaLu70=
Subject key identifier:   87:79:7A:9F:18:CF:90:5B:E0:B8:56:4E:B1:59:73:CF:A1:40:E0:30
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       5FB8E7699C6713F4ADD0713805A8DB55B711DADB
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f34382d3438203d3e203135333533.roa
Signing time:             Wed 20 Sep 2023 18:55:10 +0000
ROA not before:           Wed 20 Sep 2023 18:50:10 +0000
ROA not after:            Wed 18 Sep 2024 18:55:10 +0000
asID:                     15353
IP address blocks:        2602:fa6e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b8:e7:69:9c:67:13:f4:ad:d0:71:38:05:a8:db:55:b7:11:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Sep 20 18:50:10 2023 GMT
            Not After : Sep 18 18:55:10 2024 GMT
        Subject: CN=87797A9F18CF905BE0B8564EB15973CFA140E030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:a6:62:cf:d2:2b:d2:b0:7d:1e:c4:1f:90:
                    f1:6e:db:4b:7c:81:98:88:33:0d:72:00:88:46:d9:
                    49:21:c3:5e:a1:c8:94:e4:a4:97:1b:24:de:c0:65:
                    dc:75:d4:fd:03:53:52:aa:5f:af:16:be:d9:4f:4b:
                    96:be:98:e2:7b:32:40:2c:b5:a5:7c:45:7f:42:a1:
                    13:96:af:16:3c:9c:0d:8d:f2:de:81:75:84:f6:21:
                    f9:07:e8:67:5d:65:62:12:3f:08:2a:ca:15:dd:05:
                    15:df:be:ed:ca:77:45:d1:74:ee:66:58:cf:d9:c3:
                    59:0c:c7:24:b0:85:35:2e:ee:39:c9:d4:8e:cb:7c:
                    9d:77:48:53:a1:68:ff:ab:ec:7b:64:be:a7:82:b2:
                    de:eb:bc:93:83:7e:95:e4:a6:4d:cd:2c:f3:c7:30:
                    6d:06:04:7f:cc:d1:dd:ba:76:37:11:d0:b2:4e:29:
                    94:4e:66:45:07:57:f3:e3:71:dc:15:f4:fb:73:c7:
                    6f:62:85:72:38:38:9f:8c:0f:eb:11:a9:ef:49:46:
                    ea:9d:24:7e:62:f1:2f:b7:8b:97:97:5f:2c:39:79:
                    3c:b2:aa:a8:bd:7b:3d:3e:a5:81:8f:78:cc:45:2c:
                    2b:ec:ef:05:7b:2b:58:c7:ad:ec:91:39:72:bb:f9:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:79:7A:9F:18:CF:90:5B:E0:B8:56:4E:B1:59:73:CF:A1:40:E0:30
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:b2:15:6e:4a:25:15:9b:a9:ce:49:eb:84:2f:d0:1e:99:
         60:24:a9:2c:c8:31:69:2f:d7:f9:97:a0:c9:eb:5a:e0:90:8a:
         da:42:76:b1:c4:49:05:3b:49:57:f2:2e:ee:e3:9d:ef:03:0f:
         0d:2c:87:5b:12:f8:70:e4:00:18:93:9c:b8:8c:01:22:8e:5b:
         6e:10:91:e1:8b:40:f4:10:36:4e:fa:d2:10:97:ab:09:0a:75:
         96:ed:61:84:ff:60:99:df:cd:e6:1d:00:1c:a3:3e:5c:bb:e7:
         3d:f0:ab:f9:a6:70:1d:5d:42:b8:4a:ee:78:14:6e:60:86:08:
         0e:5d:ed:20:17:42:0e:a5:26:14:a5:bd:5b:04:eb:0a:f0:eb:
         79:52:e2:99:4b:9a:ec:ef:2b:11:f2:ef:35:75:ed:9b:1d:68:
         de:e0:46:e2:ca:5c:9e:ad:07:3a:6c:36:e2:b6:88:e0:9f:dc:
         5f:40:72:57:43:36:67:f2:18:4a:8f:a3:52:51:38:f0:71:bc:
         b8:df:2a:5c:a5:49:bb:d7:bd:b3:32:ea:eb:d8:58:e6:05:64:
         bf:56:1a:1d:b8:5c:d5:f2:1f:e9:10:f5:33:61:4c:a7:9f:f8:
         ee:7c:84:8c:e7:29:23:a1:87:31:ba:56:b1:25:5f:8a:9e:b3:
         40:04:48:52
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUX7jnaZxnE/St0HE4BajbVbcR2tswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTczMDM3NGVjZTU2ZDRlMDE0NmYwYWIw
ZmY4YTI5MTAxYzlmMjEzNjgwHhcNMjMwOTIwMTg1MDEwWhcNMjQwOTE4MTg1NTEw
WjAzMTEwLwYDVQQDEyg4Nzc5N0E5RjE4Q0Y5MDVCRTBCODU2NEVCMTU5NzNDRkEx
NDBFMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZmmYs/SK9Kw
fR7EH5DxbttLfIGYiDMNcgCIRtlJIcNeociU5KSXGyTewGXcddT9A1NSql+vFr7Z
T0uWvpjiezJALLWlfEV/QqETlq8WPJwNjfLegXWE9iH5B+hnXWViEj8IKsoV3QUV
377tyndF0XTuZljP2cNZDMcksIU1Lu45ydSOy3ydd0hToWj/q+x7ZL6ngrLe67yT
g36V5KZNzSzzxzBtBgR/zNHdunY3EdCyTimUTmZFB1fz43HcFfT7c8dvYoVyODif
jA/rEanvSUbqnSR+YvEvt4uXl18sOXk8sqqovXs9PqWBj3jMRSwr7O8FeytYx63s
kTlyu/mZFQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFId5ep8Yz5Bb4LhWTrFZc8+h
QOAwMB8GA1UdIwQYMBaAFBMGWLPsSG14FhGlfr2npPJEfj5wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5MmI2OWM3NjkwMjkzLzAv
MTMwNjU4QjNFQzQ4NkQ3ODE2MTFBNTdFQkRBN0E0RjI0NDdFM0U3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzgyOWZiODcyLTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC80Mzcy
OTk5NzE1NzMwMzc0ZWNlNTZkNGUwMTQ2ZjBhYjBmZjhhMjkxMDFjOWYyMTM2OC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5MjdiMWQ4MDE4OTJi
NjljNzY5MDI5My8wLzMyMzYzMDMyM2E2NjYxMzY2NTNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMxMzUzMzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpuAAAwDQYJKoZIhvcNAQEL
BQADggEBAGuYshVuSiUVm6nOSeuEL9AemWAkqSzIMWkv1/mXoMnrWuCQitpCdrHE
SQU7SVfyLu7jne8DDw0sh1sS+HDkABiTnLiMASKOW24QkeGLQPQQNk760hCXqwkK
dZbtYYT/YJnfzeYdAByjPly75z3wq/mmcB1dQrhK7ngUbmCGCA5d7SAXQg6lJhSl
vVsE6wrw63lS4plLmuzvKxHy7zV17ZsdaN7gRuLKXJ6tBzpsNuK2iOCf3F9AcldD
NmfyGEqPo1JROPBxvLjfKlylSbvXvbMy6uvYWOYFZL9WGh24XNXyH+kQ9TNhTKef
+O58hIznKSOhhzG6VrElX4qes0AESFI=
-----END CERTIFICATE-----