Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          x5w8yVwND60HkD2WqSg6zIk7tCgDYmpTBD45EldZkuA=
Subject key identifier:   46:F1:CC:CB:88:CB:E4:90:F2:85:63:FA:87:73:72:89:D3:55:7D:8D
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       7C20189F9A05563614C943D6CBFFD17514198CAB
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:58 +0000
ROA not before:           Fri 02 Aug 2024 20:04:58 +0000
ROA not after:            Fri 01 Aug 2025 20:09:58 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:20:18:9f:9a:05:56:36:14:c9:43:d6:cb:ff:d1:75:14:19:8c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:58 2024 GMT
            Not After : Aug  1 20:09:58 2025 GMT
        Subject: CN=46F1CCCB88CBE490F28563FA87737289D3557D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:87:df:3d:58:b0:c8:51:f5:12:54:0a:6e:
                    2e:d8:99:ed:e0:52:e1:40:b5:67:c7:37:cf:18:03:
                    ae:26:6c:62:5a:77:51:57:fc:df:eb:c8:07:e5:c7:
                    9f:e5:fa:ff:9c:22:81:21:a4:c1:fe:a0:0d:34:96:
                    d4:f1:b4:7d:36:8e:33:ee:f0:57:c0:b2:e6:4e:0b:
                    a0:d0:76:4f:09:93:b5:1b:35:24:bf:40:c8:59:0f:
                    4b:61:35:40:62:f7:cb:90:b4:13:d6:d8:e3:03:ee:
                    41:55:d1:a0:23:c8:8a:67:ea:c3:c6:c6:08:82:09:
                    d1:48:c6:d0:19:18:0f:e0:6a:77:fb:e8:79:24:de:
                    44:a5:8f:c5:e2:92:7c:fb:24:fb:13:3a:8b:f6:f8:
                    34:82:36:ad:0e:f2:9e:e0:da:59:c7:3d:bb:3c:87:
                    a0:70:c2:ed:09:02:56:ae:92:9b:20:11:9a:20:b4:
                    b0:c4:7d:31:9b:87:91:c3:f7:4b:86:1a:fa:8e:bc:
                    a1:60:a8:5f:7d:2e:c5:08:fb:d3:f1:a9:49:dd:f2:
                    6f:34:58:2a:dd:9f:3a:a8:99:56:dc:01:eb:51:51:
                    b4:d4:20:f9:93:56:5e:fb:52:46:b4:57:0a:c5:95:
                    b3:68:fd:5a:03:e2:e5:cf:5b:0d:e0:a0:15:9c:0f:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F1:CC:CB:88:CB:E4:90:F2:85:63:FA:87:73:72:89:D3:55:7D:8D
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:48:77:a9:d3:70:66:10:e1:65:a6:82:05:54:ac:ad:43:6d:
         56:a9:96:a0:1c:78:17:09:45:a3:f6:ae:d5:33:56:73:1a:74:
         81:d9:8f:30:4e:00:81:9d:10:fd:76:33:aa:3b:62:62:89:e0:
         3c:01:d1:e5:26:94:29:ae:72:41:1f:e7:97:f8:e4:ed:ae:57:
         bd:07:5c:57:82:b4:43:43:c8:76:d2:eb:42:41:1d:2b:74:55:
         d1:bf:42:eb:a1:49:9d:b9:06:a8:35:4a:04:6e:54:00:04:00:
         be:ca:ef:fe:a8:c9:19:4a:78:1c:18:93:23:d0:b1:e5:fc:c8:
         5a:58:05:ae:b1:1b:fe:a0:68:be:cc:0d:b1:bc:ac:51:47:54:
         1a:84:ff:9e:dd:d2:b7:62:79:03:4c:37:dc:14:43:ac:d0:e7:
         6d:67:3a:fa:ba:e6:ec:1e:a2:1d:32:fc:fe:4e:94:ad:b7:99:
         fc:3f:04:16:72:97:ae:e1:8c:a5:30:33:d1:71:ac:ca:97:73:
         22:6d:0c:62:55:63:36:fc:8d:3d:3d:a7:15:14:04:05:19:09:
         d8:54:fd:f8:5f:01:9c:66:95:8f:de:2b:62:d9:3d:88:9c:61:
         0a:68:83:fa:1a:35:29:c4:a8:ae:5a:68:7b:0c:3b:27:6d:00:
         1f:33:f0:62
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUfCAYn5oFVjYUyUPWy//RdRQZjKswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjM0OGNmMGMzZDI5NTI4MGJiZTVjMjZi
NGU3YjZkZTI3MTU5MTQxY2IwHhcNMjQwODAyMjAwNDU4WhcNMjUwODAxMjAwOTU4
WjAzMTEwLwYDVQQDEyg0NkYxQ0NDQjg4Q0JFNDkwRjI4NTYzRkE4NzczNzI4OUQz
NTU3RDhEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08CH3z1YsMhR
9RJUCm4u2Jnt4FLhQLVnxzfPGAOuJmxiWndRV/zf68gH5cef5fr/nCKBIaTB/qAN
NJbU8bR9No4z7vBXwLLmTgug0HZPCZO1GzUkv0DIWQ9LYTVAYvfLkLQT1tjjA+5B
VdGgI8iKZ+rDxsYIggnRSMbQGRgP4Gp3++h5JN5EpY/F4pJ8+yT7EzqL9vg0gjat
DvKe4NpZxz27PIegcMLtCQJWrpKbIBGaILSwxH0xm4eRw/dLhhr6jryhYKhffS7F
CPvT8alJ3fJvNFgq3Z86qJlW3AHrUVG01CD5k1Ze+1JGtFcKxZWzaP1aA+Llz1sN
4KAVnA+i+QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEbxzMuIy+SQ8oVj+odzconT
VX2NMB8GA1UdIwQYMBaAFKXFvzsjS/OEZYWK7W44kQ4cDqcQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTBjNjQ3YWMwMTkxMTRiM2JhZDc1NmYxLzIv
QTVDNUJGM0IyMzRCRjM4NDY1ODU4QUVENkUzODkxMEUxQzBFQTcxMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzEzMDhmYjc3LTc0MDMtNGQyYy1hNWEzLTgwMTA2NDNiNGNjOC9mY2Iy
MGY1OTY2MzQ4Y2YwYzNkMjk1MjgwYmJlNWMyNmI0ZTdiNmRlMjcxNTkxNDFjYi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwYzY0N2FjMDE5MTE0
YjNiYWQ3NTZmMS8yLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzUzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAQSHep03BmEOFlpoIFVKytQ21WqZagHHgXCUWj9q7V
M1ZzGnSB2Y8wTgCBnRD9djOqO2JiieA8AdHlJpQprnJBH+eX+OTtrle9B1xXgrRD
Q8h20utCQR0rdFXRv0LroUmduQaoNUoEblQABAC+yu/+qMkZSngcGJMj0LHl/Mha
WAWusRv+oGi+zA2xvKxRR1QahP+e3dK3YnkDTDfcFEOs0OdtZzr6uubsHqIdMvz+
TpStt5n8PwQWcpeu4YylMDPRcazKl3MibQxiVWM2/I09PacVFAQFGQnYVP34XwGc
ZpWP3iti2T2InGEKaIP6GjUpxKiuWmh7DDsnbQAfM/Bi
-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:17 2024 by rpki-client on console-fra.rpki-client.org