Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          V2o0+SzGdv1XkEbAlrfaLM8TtITobRjeXf0Y0Srgnnk=
Subject key identifier:   9D:06:A1:DA:0E:4D:6D:F1:BB:D1:10:00:6E:E6:56:50:2B:92:4B:AA
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       285CF28510B5BF9DFFB41BD896692A5D07EA66D5
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:f2:85:10:b5:bf:9d:ff:b4:1b:d8:96:69:2a:5d:07:ea:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=9D06A1DA0E4D6DF1BBD110006EE656502B924BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:43:e7:4a:5b:44:3a:08:ea:74:a2:d0:66:
                    25:61:78:ef:31:bf:0f:c3:5b:a2:b7:7b:48:ff:30:
                    17:5b:5a:2a:6c:8c:c5:b7:ee:04:bb:42:ac:21:c3:
                    98:93:87:50:69:f7:18:d5:67:3c:50:f2:c4:f4:8e:
                    a3:9b:27:d9:12:dc:28:95:54:95:76:5a:08:dd:1d:
                    09:88:55:45:46:b8:5a:b1:da:b2:fd:0f:92:14:0f:
                    93:63:53:1a:21:f9:bc:f5:41:8d:a1:ca:b7:c0:3d:
                    05:9b:ff:33:da:88:67:aa:7d:cf:ce:8c:2a:8c:07:
                    18:83:98:11:6d:c0:0a:e7:6b:bf:44:f1:f6:c0:a5:
                    a3:41:6d:ab:f6:d6:c6:8d:95:4b:59:35:05:0e:28:
                    dc:56:74:31:db:2c:85:da:7b:9a:86:06:af:f1:39:
                    4f:05:6a:cd:08:04:70:ae:ad:49:3f:35:40:1d:ed:
                    b0:08:32:8b:f8:20:77:89:d5:3b:df:25:91:c5:6e:
                    6b:e5:f2:f6:63:cf:14:2c:2d:e5:3f:4f:c5:18:99:
                    3a:e3:27:57:5b:46:37:d3:8c:a9:67:af:13:cb:5f:
                    f2:bd:3c:bc:1e:a4:9a:d5:b3:be:f9:f5:c1:16:5f:
                    bb:02:19:ba:26:15:bf:61:50:28:70:38:65:83:1c:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:A1:DA:0E:4D:6D:F1:BB:D1:10:00:6E:E6:56:50:2B:92:4B:AA
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:f8:11:53:69:7c:6e:f7:8b:5f:3e:05:22:57:0c:8a:9e:
         21:ec:ef:b2:a3:b6:bd:68:ae:1b:19:21:a0:e3:14:13:3c:cd:
         47:8b:4a:bd:79:1a:72:89:76:ae:93:0e:eb:6f:0f:6a:8b:3a:
         02:d8:05:ff:11:a3:8e:2c:61:af:c5:b0:64:6d:e9:2d:6d:77:
         b1:17:22:cd:09:1c:bc:fa:d8:f2:32:55:96:ee:50:21:a0:3d:
         16:9c:bb:d2:2e:36:c6:1c:86:6c:ab:31:e6:ec:96:c3:4b:a1:
         a0:6e:c1:78:08:56:9e:28:ab:a6:7e:68:8c:bd:26:ed:5b:9b:
         89:b6:27:c4:52:d1:04:e8:f0:59:15:71:e3:06:05:22:39:82:
         d4:55:b3:f8:4f:b1:6f:b0:05:d3:b4:b9:e4:10:c4:e8:27:26:
         e5:70:66:bf:c4:1d:7d:bd:50:7a:47:4a:d1:1f:4a:3c:98:a7:
         b1:e7:15:17:52:6d:b2:24:32:85:1c:db:9b:1d:ec:3c:7d:ab:
         10:83:40:13:63:8f:50:88:42:11:6d:2b:49:c3:c8:93:a8:10:
         36:08:f6:0d:be:15:c3:bb:cf:fe:28:9b:e4:57:d6:33:e5:3b:
         cd:f8:20:2b:c2:46:4d:bd:02:a1:c1:48:83:0e:50:41:e1:0e:
         0a:91:13:66
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUKFzyhRC1v53/tBvYlmkqXQfqZtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjM0OGNmMGMzZDI5NTI4MGJiZTVjMjZi
NGU3YjZkZTI3MTU5MTQxY2IwHhcNMjQwODAyMjAwNDU3WhcNMjUwODAxMjAwOTU3
WjAzMTEwLwYDVQQDEyg5RDA2QTFEQTBFNEQ2REYxQkJEMTEwMDA2RUU2NTY1MDJC
OTI0QkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznlD50pbRDoI
6nSi0GYlYXjvMb8Pw1uit3tI/zAXW1oqbIzFt+4Eu0KsIcOYk4dQafcY1Wc8UPLE
9I6jmyfZEtwolVSVdloI3R0JiFVFRrhasdqy/Q+SFA+TY1MaIfm89UGNocq3wD0F
m/8z2ohnqn3PzowqjAcYg5gRbcAK52u/RPH2wKWjQW2r9tbGjZVLWTUFDijcVnQx
2yyF2nuahgav8TlPBWrNCARwrq1JPzVAHe2wCDKL+CB3idU73yWRxW5r5fL2Y88U
LC3lP0/FGJk64ydXW0Y304ypZ68Ty1/yvTy8HqSa1bO++fXBFl+7Ahm6JhW/YVAo
cDhlgxzTzQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFJ0GodoOTW3xu9EQAG7mVlAr
kkuqMB8GA1UdIwQYMBaAFKXFvzsjS/OEZYWK7W44kQ4cDqcQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTBjNjQ3YWMwMTkxMTRiM2JhZDc1NmYxLzIv
QTVDNUJGM0IyMzRCRjM4NDY1ODU4QUVENkUzODkxMEUxQzBFQTcxMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzEzMDhmYjc3LTc0MDMtNGQyYy1hNWEzLTgwMTA2NDNiNGNjOC9mY2Iy
MGY1OTY2MzQ4Y2YwYzNkMjk1MjgwYmJlNWMyNmI0ZTdiNmRlMjcxNTkxNDFjYi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwYzY0N2FjMDE5MTE0
YjNiYWQ3NTZmMS8yLzMyMzYzMDMyM2E2NjYzMzM2MjNhNjQzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Ow0AMA0G
CSqGSIb3DQEBCwUAA4IBAQAYm/gRU2l8bveLXz4FIlcMip4h7O+yo7a9aK4bGSGg
4xQTPM1Hi0q9eRpyiXaukw7rbw9qizoC2AX/EaOOLGGvxbBkbektbXexFyLNCRy8
+tjyMlWW7lAhoD0WnLvSLjbGHIZsqzHm7JbDS6GgbsF4CFaeKKumfmiMvSbtW5uJ
tifEUtEE6PBZFXHjBgUiOYLUVbP4T7FvsAXTtLnkEMToJyblcGa/xB19vVB6R0rR
H0o8mKex5xUXUm2yJDKFHNubHew8fasQg0ATY49QiEIRbStJw8iTqBA2CPYNvhXD
u8/+KJvkV9Yz5TvN+CArwkZNvQKhwUiDDlBB4Q4KkRNm
-----END CERTIFICATE-----
Generated at Thu Aug 22 20:43:18 2024 by rpki-client on console-fra.rpki-client.org