Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          BOkigu2HZtG5Wi6rY/HEwBL1tZburGxfqeH/kkGiuX8=
Subject key identifier:   36:B1:14:7B:7A:AA:49:48:F0:51:3A:30:51:D4:4E:91:35:AA:3C:91
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       77DF704B7E62A16D45249B1E8D85E7DB487A0CA6
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:df:70:4b:7e:62:a1:6d:45:24:9b:1e:8d:85:e7:db:48:7a:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=36B1147B7AAA4948F0513A3051D44E9135AA3C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ec:d3:37:03:c6:99:ae:fc:37:8c:15:2a:ad:
                    ca:7b:3b:1c:ee:85:96:45:14:e8:c6:39:5a:1a:2b:
                    cc:4c:7d:3f:3d:de:66:06:a5:b0:68:f6:df:0b:ab:
                    2a:e7:c3:39:d1:6a:05:75:bb:47:5b:95:b8:8b:2a:
                    59:68:ed:c5:b2:33:17:f2:9a:da:62:55:c7:c3:b2:
                    93:92:79:90:3f:c3:1b:d5:a2:af:44:01:86:c9:d2:
                    0c:2e:de:f4:bf:fd:ec:88:a6:d0:65:c9:35:45:6a:
                    cd:09:04:bf:a4:db:0e:53:f3:40:f0:ac:0c:8f:fb:
                    56:41:e5:3f:b1:d5:55:53:cc:22:b9:34:09:88:24:
                    ce:fc:d2:7f:41:c8:97:18:ef:39:2d:28:42:d8:b9:
                    e3:d8:d2:15:02:55:1e:77:21:25:e9:7a:91:71:96:
                    5b:fc:63:26:6b:03:29:d9:48:52:95:ab:eb:8d:a8:
                    b5:8a:2d:dd:c8:9a:6e:97:f5:66:54:b6:28:9a:d0:
                    9d:f2:42:e7:fd:c5:38:a1:24:dd:78:d4:a9:04:d1:
                    f9:0e:a2:35:f4:f2:5a:8a:f6:a3:55:72:8b:7c:82:
                    c0:d7:35:ec:ef:74:7a:0e:9d:e7:66:a1:2c:42:cc:
                    2c:e5:8e:b9:05:21:b5:66:ec:1d:b0:96:d9:4c:12:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B1:14:7B:7A:AA:49:48:F0:51:3A:30:51:D4:4E:91:35:AA:3C:91
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:2a:7b:a3:cf:a8:ba:1a:5f:29:9d:e3:14:b8:d0:37:ac:
         49:94:b5:f5:de:04:ce:d7:87:ae:67:a0:38:19:98:1a:75:5d:
         3f:ff:9e:18:13:8e:f8:34:3a:cc:cd:d7:54:23:cd:9e:1e:ed:
         35:93:0b:b8:96:ad:3c:a2:e8:dc:71:8b:35:ea:c6:72:9c:77:
         a3:2b:1c:06:da:c0:2f:bc:4e:84:2b:15:b2:93:af:8e:2b:4e:
         6e:22:c4:ff:8c:01:10:10:02:3d:c4:a9:8d:02:2f:86:01:61:
         f6:1e:da:02:65:74:53:8d:da:c3:80:28:e8:22:2b:75:cb:86:
         64:fa:55:43:da:c3:4f:03:99:40:1b:30:98:19:f3:67:ff:20:
         e7:5b:84:f9:da:ab:54:23:80:88:7e:36:08:75:3e:4e:a9:77:
         0d:ec:43:b9:7b:c4:ed:12:30:77:7c:8a:1d:fe:33:50:32:a2:
         af:1f:30:57:3c:40:e6:3d:95:51:ce:f9:97:96:24:70:c6:c8:
         e7:05:9e:36:06:87:cd:ad:3e:e5:f0:52:7c:42:e7:38:27:af:
         bc:5b:a1:2e:68:a7:44:1c:5a:e2:fe:a0:e1:09:34:e7:84:a2:
         fa:ae:7c:5b:44:4a:5c:a3:3e:2e:f7:96:64:74:fa:1a:21:72:
         8b:41:c3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org