Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          srxLckYPV5HNDE2GPQXTNoH6zyQk6gGfPCPpEifUgTU=
Subject key identifier:   EA:57:26:14:88:C1:6F:E8:65:6C:69:A5:1F:23:E8:E0:6C:5D:CE:88
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       7ADFC0F6FF9BECFBDD23D04DAA940B266A212A13
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:df:c0:f6:ff:9b:ec:fb:dd:23:d0:4d:aa:94:0b:26:6a:21:2a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=EA57261488C16FE8656C69A51F23E8E06C5DCE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:cc:c4:bd:c0:9d:e0:20:72:b8:cb:f8:20:
                    89:5e:b6:8b:4e:3d:63:b7:6f:34:42:ff:06:84:27:
                    09:f2:ec:7a:d2:b4:2f:07:62:40:24:a9:00:9d:2e:
                    78:6c:91:3c:ab:7b:c9:a0:8e:76:4d:ed:52:0d:4a:
                    10:e5:cd:13:37:9f:38:67:d9:ae:4c:16:68:26:a9:
                    11:da:48:3a:10:7b:f3:a2:11:11:a3:b1:b8:65:43:
                    3a:2c:00:e9:33:f5:d5:8f:0a:f1:f9:30:52:87:e2:
                    f5:ed:21:21:3d:a8:17:5e:42:ff:82:0c:1a:e6:fc:
                    39:38:39:dc:04:89:9b:73:3b:9c:01:12:6a:9b:f9:
                    2e:3f:81:2f:dd:eb:88:10:ff:be:9b:55:e8:df:ec:
                    f6:77:ef:bc:82:7f:65:26:ae:7a:2d:9d:52:2d:95:
                    80:9b:74:bc:b1:a8:c3:f1:33:82:5c:fc:95:43:66:
                    56:37:4c:6f:76:b3:09:64:c6:fd:3d:25:d8:40:d7:
                    1a:d2:92:52:23:d5:53:a7:fe:d4:c9:36:65:6a:c8:
                    0c:6e:d3:fc:47:0c:37:3e:fd:ca:bf:0f:23:27:8d:
                    4c:9f:9f:a7:da:95:cd:38:8b:79:94:f0:a2:a7:78:
                    99:eb:5b:6f:f9:4f:a2:ee:86:4a:09:a3:28:77:39:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:26:14:88:C1:6F:E8:65:6C:69:A5:1F:23:E8:E0:6C:5D:CE:88
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:4e:06:34:66:eb:9f:cf:98:31:d3:68:88:58:27:af:f5:
         bb:50:54:9e:59:db:f5:71:33:9a:9a:2b:ec:e1:8a:ca:3c:3c:
         24:73:89:b1:59:15:ec:c8:b1:02:d2:ca:a6:72:4f:a4:e2:47:
         04:f8:61:71:91:c3:88:07:71:65:f8:66:ed:27:38:a9:37:6a:
         ab:b1:d1:fa:d7:f7:c7:51:ee:60:6e:0e:22:21:9e:7a:74:67:
         fd:78:d6:c7:06:4e:37:0d:f4:eb:0b:ac:78:57:e3:c4:bd:2f:
         bf:b9:d5:a0:a3:3c:33:6a:65:51:41:49:36:b7:57:28:5d:60:
         56:00:b1:22:da:8c:c4:61:48:4a:a7:a6:e0:48:68:af:ff:66:
         09:ba:80:9f:f2:1e:42:42:66:16:5e:ca:a2:10:9c:94:45:8c:
         a2:73:5e:a3:cd:c1:39:d0:4c:a6:dd:10:93:95:22:bf:69:fb:
         2a:bb:23:81:48:ae:33:fa:72:ef:45:2f:8c:c2:84:18:fe:00:
         87:a8:27:a4:24:a1:7b:68:ea:dd:31:25:5e:5d:32:c8:bd:62:
         a2:7a:c2:92:7d:87:94:3b:f4:6c:d7:64:c5:06:5f:75:0c:5c:
         75:4f:6f:da:f9:e3:f5:83:e0:10:ae:9e:a9:d4:71:0e:21:10:
         5b:9b:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:17 2024 by rpki-client on console-fra.rpki-client.org