Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          /Y1u2FnO/RtVHn7JYoN7is0cWoO2Cu7quNUZqxThJB8=
Subject key identifier:   FA:B5:7B:EC:6E:AB:C3:D3:E7:84:77:F0:53:E8:D9:C7:29:9F:6C:95
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       012DF59D4AC3A5FAA81DEB0ECE19B9A90CFAB258
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2d:f5:9d:4a:c3:a5:fa:a8:1d:eb:0e:ce:19:b9:a9:0c:fa:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=FAB57BEC6EABC3D3E78477F053E8D9C7299F6C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:a0:b6:f1:a3:ad:70:cd:e0:c1:72:4d:64:
                    c0:b6:a3:8f:95:b9:ca:dd:8e:0e:cd:c4:58:a0:40:
                    20:52:5d:07:2b:ae:0c:08:3b:54:bb:89:ad:30:97:
                    88:ad:c8:79:ae:b8:f9:5e:13:f4:07:73:c9:5b:99:
                    27:d6:67:4a:d2:d7:89:37:63:c8:28:a2:e6:bc:2b:
                    ac:2d:2f:47:ab:18:55:5b:7f:57:92:d7:da:be:70:
                    1b:88:00:fb:0c:ab:b1:ca:fa:d2:c1:3d:11:c4:9e:
                    6b:7f:f1:3b:50:fd:65:06:d6:5e:2c:bc:75:8d:a4:
                    24:5d:b3:bc:f2:25:92:eb:d5:9d:b6:8d:a2:3c:1d:
                    a0:fb:97:de:46:bb:af:27:16:96:8d:af:36:42:39:
                    82:be:ee:0e:8e:9d:17:07:1d:5e:e6:48:55:f4:4f:
                    a3:b6:e4:21:11:76:6f:5e:6e:05:4e:4d:75:37:79:
                    23:94:a9:4c:e8:29:e5:49:4a:b5:64:c0:c3:51:dc:
                    9a:23:03:e5:6d:2c:4c:be:e9:2f:54:fe:a8:49:f9:
                    d7:3a:a8:c8:71:8e:20:bd:f4:1e:d3:5f:ed:a0:5c:
                    d8:5b:c7:76:18:36:06:97:53:07:b7:2e:24:a7:ea:
                    24:e5:03:9c:e7:fc:48:b7:0c:a4:4c:eb:d9:18:79:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:7B:EC:6E:AB:C3:D3:E7:84:77:F0:53:E8:D9:C7:29:9F:6C:95
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:7d:51:4e:1f:30:38:d3:8d:d4:4b:57:b3:82:e3:44:59:
         0c:3e:1d:8b:e4:c4:75:d1:5b:09:17:c5:89:ff:6b:e8:d2:56:
         7a:f7:72:62:2a:8e:ca:c2:66:09:69:62:7a:35:81:c5:4a:54:
         84:95:0e:0b:06:58:c6:40:73:14:b5:dd:bb:2d:fa:74:f3:e2:
         6a:5b:22:70:12:c4:c4:7f:dc:8a:2b:78:32:45:14:78:c1:89:
         7e:36:bb:06:af:5b:14:8b:fc:60:0a:24:15:5c:6a:ec:32:fc:
         d9:05:ba:67:59:e4:1c:42:e0:ce:6c:6f:29:33:bb:fe:fe:1b:
         c1:3c:4f:95:5b:4e:0c:60:28:1f:2a:97:26:48:69:82:3a:c7:
         13:23:50:bc:eb:29:fb:7d:bf:ca:9c:4a:e8:57:54:cc:e8:9f:
         87:54:c7:b0:f7:20:54:77:24:d0:6d:71:ee:47:11:2e:6c:ac:
         c2:ed:01:5c:e7:3f:f6:af:37:2e:11:bd:72:09:43:42:cf:7e:
         8e:ef:59:3a:a4:36:38:ca:c4:14:0c:00:64:78:b4:0a:b9:f6:
         95:fe:7c:ac:ed:e9:d5:d7:a2:98:39:1b:14:c6:6e:55:81:98:
         43:b6:b2:68:5e:c7:e8:b0:08:29:6b:d5:d4:a9:f3:d1:16:6b:
         f3:7f:2c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org