Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          HNjJiOU0Qo8ftymvsDAKlI1KJJUvQ6BpaOJ7USthSMk=
Subject key identifier:   6A:CD:DE:7F:3B:E1:37:47:6A:CB:EE:89:EC:B0:17:1E:4A:F4:05:9B
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       0382BA9966FD998EC6BF951EB7D0678B752A8B4E
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:82:ba:99:66:fd:99:8e:c6:bf:95:1e:b7:d0:67:8b:75:2a:8b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=6ACDDE7F3BE137476ACBEE89ECB0171E4AF4059B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:1b:61:1e:d2:28:4f:f9:08:d9:89:ee:75:
                    1f:e6:75:ac:0c:80:04:d6:e5:74:a9:a4:75:3c:43:
                    b8:14:f4:89:d1:9d:92:14:a1:04:86:69:36:88:af:
                    2d:d1:b8:7d:39:8a:45:bf:4b:e7:84:7d:80:fa:15:
                    66:f7:06:3d:a2:6a:85:53:b1:f7:77:2c:84:76:15:
                    41:03:1b:bb:a0:4f:50:ef:b4:de:e9:d7:a1:f4:f6:
                    45:c0:2d:29:1c:bf:24:6c:13:01:8b:69:46:f1:cc:
                    45:8d:79:aa:73:a0:ef:2d:b8:f3:86:8c:3a:28:bc:
                    f8:3e:8a:3e:d9:77:49:cb:77:52:f0:2e:5e:cd:d2:
                    a0:af:98:44:c5:67:fc:fd:02:b1:b3:72:23:38:22:
                    3f:7b:be:1c:64:62:6c:a5:0d:6f:f1:71:a4:33:04:
                    a8:be:8e:6d:3d:3f:df:2f:d0:4f:93:2b:2e:b6:10:
                    14:31:46:da:07:12:42:9b:b5:c2:59:16:b8:63:9e:
                    4f:08:e4:26:af:99:5a:17:5f:bc:42:4b:ca:47:74:
                    f0:8a:e0:f6:96:65:d0:8c:ef:a0:d9:b0:5a:7f:20:
                    06:73:50:9e:8f:64:52:ff:85:ef:02:22:c2:18:2c:
                    8a:c9:b5:1a:45:86:da:0a:75:4d:16:c3:bc:ff:66:
                    cc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:DE:7F:3B:E1:37:47:6A:CB:EE:89:EC:B0:17:1E:4A:F4:05:9B
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:33:7e:22:a6:3f:a5:3c:bb:e2:34:64:d2:d7:40:9b:00:
         ea:39:c8:1a:aa:fb:1b:18:88:29:16:a5:18:cf:fe:48:d4:ed:
         36:f9:d0:78:f9:c7:87:80:21:12:81:df:ce:39:21:7c:dd:b2:
         0d:86:bf:c1:64:78:b2:f0:91:c1:50:b5:f2:a3:3b:6c:7e:b2:
         38:13:38:22:0a:de:f8:0b:f5:c3:7c:e6:b1:ac:4e:c7:6f:50:
         6d:01:91:42:39:ea:a5:12:c8:84:89:6f:71:cf:26:68:68:6e:
         28:e6:cb:e5:f3:99:bb:21:db:5c:ff:57:98:fd:e4:dc:0b:6c:
         5d:58:08:b8:df:3a:e7:ac:a1:13:4a:eb:ea:cd:65:c7:23:fd:
         1b:5b:07:ad:fa:a9:65:9b:9e:6c:56:f2:7d:8e:1d:17:4d:e6:
         ad:57:07:40:30:81:c8:3f:88:10:c4:54:80:ea:14:7b:a7:ce:
         1b:33:aa:2d:8d:85:05:4c:85:3c:7e:79:b5:9d:5c:ad:0c:f3:
         4c:f5:99:1c:2a:ee:f6:30:ab:80:a8:21:09:8b:88:c0:03:db:
         d4:d3:5a:52:a5:43:13:7b:a7:ae:f7:4f:ce:f9:80:ba:42:df:
         69:68:b2:53:52:f2:52:0e:8c:86:37:e9:30:f7:dc:35:f2:c1:
         b1:03:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org