Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          LniFOq52TRNBkO487VSFpBEcHbSD3NakMX4N8LpYwNY=
Subject key identifier:   4E:28:86:E7:D2:F9:8A:5D:25:BE:9A:33:49:3D:7E:96:65:81:11:5D
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       522BE79023FBD776E2E82537A5C3B21D325B98F1
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2b:e7:90:23:fb:d7:76:e2:e8:25:37:a5:c3:b2:1d:32:5b:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=4E2886E7D2F98A5D25BE9A33493D7E966581115D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:ee:24:68:9f:b2:2f:dc:45:eb:05:ed:91:
                    08:e2:ac:e3:8a:b4:ee:79:8c:42:b4:5f:c2:a2:78:
                    18:9c:3f:82:a6:61:6d:ff:0e:91:ac:46:be:f7:80:
                    b7:23:4d:c1:96:c7:a4:2e:22:6d:2e:a9:d3:49:a7:
                    81:c2:32:39:68:33:2e:42:50:38:fa:ba:b3:8b:37:
                    d8:b2:a9:c1:31:36:3a:1d:4c:a1:df:81:80:24:26:
                    01:2b:09:2e:04:63:9b:9a:48:d5:2c:16:68:53:80:
                    33:02:74:1a:0e:24:fb:e6:48:08:9a:b4:b1:e0:36:
                    f7:51:84:d0:a5:e7:77:90:fd:cc:bd:92:5f:56:19:
                    86:f4:1b:f4:cd:01:f7:69:a7:d6:1f:9b:02:f4:89:
                    0a:3a:8a:a1:0a:ed:d0:24:b3:bf:fa:06:00:41:79:
                    2d:9a:86:3d:c7:6d:0f:07:8e:f9:de:53:15:a1:20:
                    4d:e4:cf:ac:c4:b7:44:91:53:8b:ae:e6:4d:d2:fd:
                    95:06:06:66:07:8c:5a:2e:dd:63:f2:fe:5f:7f:78:
                    ef:8e:4a:95:4b:89:fe:90:b6:62:9f:43:5f:d4:ab:
                    04:dd:79:03:46:62:96:b6:36:3b:f2:f4:fe:b6:bf:
                    6c:67:de:86:8f:52:c4:2b:0e:f8:0e:43:7a:50:dd:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:86:E7:D2:F9:8A:5D:25:BE:9A:33:49:3D:7E:96:65:81:11:5D
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:ed:3e:62:7a:09:75:8c:2c:6b:c7:83:78:3c:cd:4d:e4:
         3f:ed:0d:16:de:8b:48:75:0a:02:d1:62:e9:b0:06:23:95:10:
         95:9e:81:b4:7f:28:d1:e8:1c:e1:26:49:3e:db:bb:f1:ba:69:
         70:5e:b7:13:8b:3b:f2:70:08:2b:76:af:95:db:06:e8:f2:e8:
         bf:3a:d8:f5:59:27:80:da:75:19:c6:82:ea:6e:36:bd:e7:c6:
         39:a8:b7:b0:52:c4:31:81:93:69:30:ba:84:b1:20:9f:06:6b:
         77:14:5f:e4:6a:ec:6e:9d:ad:e2:76:71:6c:b2:04:b5:f6:25:
         5b:74:7d:16:cc:c5:94:a9:bd:b0:21:8e:8a:5e:05:1b:66:9b:
         3a:7d:62:b3:c0:3e:d3:ca:68:5f:ff:f2:95:d1:b0:aa:6e:3f:
         05:c9:40:9e:b8:06:b0:ad:4a:69:91:0b:ec:0b:c9:68:fe:b4:
         69:b9:53:58:1a:75:6b:f5:c1:1d:c5:11:14:02:4e:ac:d6:bf:
         2a:39:5e:99:03:2d:b0:fd:2e:93:84:2f:d5:cd:0b:db:87:9f:
         4e:34:e9:9a:e5:65:97:56:98:73:0a:26:43:c6:e2:a0:6b:21:
         11:b6:8a:33:89:dd:c7:1a:6e:47:d3:ff:c2:7c:7a:b0:c4:a2:
         b2:98:cf:55
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUUivnkCP713bi6CU3pcOyHTJbmPEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjM0OGNmMGMzZDI5NTI4MGJiZTVjMjZi
NGU3YjZkZTI3MTU5MTQxY2IwHhcNMjQwODAyMjAwNDU3WhcNMjUwODAxMjAwOTU3
WjAzMTEwLwYDVQQDEyg0RTI4ODZFN0QyRjk4QTVEMjVCRTlBMzM0OTNEN0U5NjY1
ODExMTVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11zuJGifsi/c
ResF7ZEI4qzjirTueYxCtF/CongYnD+CpmFt/w6RrEa+94C3I03BlsekLiJtLqnT
SaeBwjI5aDMuQlA4+rqzizfYsqnBMTY6HUyh34GAJCYBKwkuBGObmkjVLBZoU4Az
AnQaDiT75kgImrSx4Db3UYTQped3kP3MvZJfVhmG9Bv0zQH3aafWH5sC9IkKOoqh
Cu3QJLO/+gYAQXktmoY9x20PB4753lMVoSBN5M+sxLdEkVOLruZN0v2VBgZmB4xa
Lt1j8v5ff3jvjkqVS4n+kLZin0Nf1KsE3XkDRmKWtjY78vT+tr9sZ96Gj1LEKw74
DkN6UN1rowIDAQABo4ICvTCCArkwHQYDVR0OBBYEFE4ohufS+YpdJb6aM0k9fpZl
gRFdMB8GA1UdIwQYMBaAFKXFvzsjS/OEZYWK7W44kQ4cDqcQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTBjNjQ3YWMwMTkxMTRiM2JhZDc1NmYxLzIv
QTVDNUJGM0IyMzRCRjM4NDY1ODU4QUVENkUzODkxMEUxQzBFQTcxMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzEzMDhmYjc3LTc0MDMtNGQyYy1hNWEzLTgwMTA2NDNiNGNjOC9mY2Iy
MGY1OTY2MzQ4Y2YwYzNkMjk1MjgwYmJlNWMyNmI0ZTdiNmRlMjcxNTkxNDFjYi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwYzY0N2FjMDE5MTE0
YjNiYWQ3NTZmMS8yLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzkzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwkAMA0G
CSqGSIb3DQEBCwUAA4IBAQBcI+0+YnoJdYwsa8eDeDzNTeQ/7Q0W3otIdQoC0WLp
sAYjlRCVnoG0fyjR6BzhJkk+27vxumlwXrcTizvycAgrdq+V2wbo8ui/Otj1WSeA
2nUZxoLqbja958Y5qLewUsQxgZNpMLqEsSCfBmt3FF/kauxuna3idnFssgS19iVb
dH0WzMWUqb2wIY6KXgUbZps6fWKzwD7Tymhf//KV0bCqbj8FyUCeuAawrUppkQvs
C8lo/rRpuVNYGnVr9cEdxREUAk6s1r8qOV6ZAy2w/S6ThC/VzQvbh59ONOma5WWX
VphzCiZDxuKgayERtoozid3HGm5H0//CfHqwxKKymM9V
-----END CERTIFICATE-----
Generated at Thu Aug 22 22:43:21 2024 by rpki-client on console-ams.rpki-client.org