Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          BQD80HsgiGM02UrnB6Mt1NLtbMgyiB/7Y+gGE1Meoqs=
Subject key identifier:   B4:E8:4E:59:36:C7:F6:DD:2E:77:C8:EF:DA:0B:38:0B:EA:5C:E5:28
Certificate issuer:       /CN=15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54
Certificate serial:       6A43EAA320DEC9F1DD4736834ED4B91D68063BFC
Authority key identifier: 6F:DC:71:8F:6B:86:5C:FC:57:06:DD:F9:87:36:EE:18:A6:F4:16:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Wed 06 Dec 2023 15:22:27 +0000
ROA not before:           Wed 06 Dec 2023 15:17:27 +0000
ROA not after:            Wed 20 Dec 2023 15:22:27 +0000
asID:                     16787
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:43:ea:a3:20:de:c9:f1:dd:47:36:83:4e:d4:b9:1d:68:06:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54
        Validity
            Not Before: Dec  6 15:17:27 2023 GMT
            Not After : Dec 20 15:22:27 2023 GMT
        Subject: CN=B4E84E5936C7F6DD2E77C8EFDA0B380BEA5CE528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:f8:09:61:04:41:ff:d0:73:1a:13:21:94:
                    ea:b5:63:31:50:40:4c:8a:0c:4f:b7:dd:23:8b:20:
                    bc:d1:e5:0c:84:a5:d5:60:9d:61:be:df:ba:60:53:
                    67:27:bc:24:ae:21:ab:84:12:de:7b:39:d9:82:c6:
                    24:86:c8:f4:8e:bc:bd:a9:e3:a0:65:ab:06:ad:1b:
                    fc:d4:ad:85:1b:bf:40:3e:74:76:b2:74:72:7a:db:
                    f1:89:78:73:2a:91:04:0d:60:a9:a8:1e:86:2a:5d:
                    db:79:15:60:49:57:bc:b8:a6:9f:f6:de:ee:50:9a:
                    16:60:44:51:de:8b:3c:3b:b5:29:50:e5:91:f3:0e:
                    33:d8:c8:6e:29:6a:2a:2e:79:c2:0e:9b:18:4f:80:
                    4f:75:4b:a2:b0:5e:3b:6e:90:17:bb:2e:a6:83:53:
                    1b:fb:14:9a:a4:42:d2:ce:f9:e5:1a:14:3a:44:07:
                    cc:4f:6c:14:a8:7f:57:96:31:86:f3:44:a7:09:df:
                    6e:e3:6b:22:ee:1c:1c:ec:c2:b0:da:9a:86:2f:56:
                    bd:6f:6f:15:8f:b7:06:75:c2:8c:36:47:a5:08:9a:
                    67:32:9d:37:b8:4e:69:60:68:4d:51:f8:67:7d:4e:
                    10:1d:ed:66:cc:d2:77:0c:0a:79:4a:22:13:d0:b8:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E8:4E:59:36:C7:F6:DD:2E:77:C8:EF:DA:0B:38:0B:EA:5C:E5:28
            X509v3 Authority Key Identifier:
                keyid:6F:DC:71:8F:6B:86:5C:FC:57:06:DD:F9:87:36:EE:18:A6:F4:16:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/6FDC718F6B865CFC5706DDF98736EE18A6F41608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e914e3b998c2de039b5639bf4f8f1ee0aea8f54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/1/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:73:bf:57:59:81:06:d8:7b:54:e0:b9:13:e6:17:80:a1:02:
         66:40:1a:30:a4:38:ee:35:8b:82:69:cd:5a:b7:85:65:48:4d:
         78:ac:be:e5:b3:e7:b9:51:e3:7b:91:58:a0:c4:8a:01:c1:19:
         a8:ed:31:27:ec:f5:da:07:48:eb:3a:09:18:1c:ac:ac:a0:7a:
         71:fd:8e:b1:7c:a8:5e:28:bc:51:cb:6e:c3:6f:72:9e:86:3b:
         60:00:e8:14:7c:29:82:95:e8:c1:f4:8a:5b:8a:91:aa:23:5d:
         ac:a0:0b:59:71:55:cf:bb:2a:86:2d:eb:fd:98:b6:8c:ce:02:
         96:f1:6b:84:7e:1d:bd:c4:c0:18:e9:25:1b:06:0c:1c:56:21:
         61:9e:79:4d:d6:33:84:91:02:70:57:ad:dd:35:12:fe:98:21:
         2c:c5:80:b7:ac:8f:bf:e7:c5:91:09:11:5c:a6:7b:54:9f:08:
         d2:e0:13:7e:40:4f:a3:c7:e5:82:6f:11:b2:c6:d3:d7:83:c7:
         37:64:ba:e5:c4:0f:a3:ba:9d:32:56:7f:c2:e2:ba:54:4a:a1:
         38:cf:cb:7d:83:c5:cd:8e:d2:63:8d:cd:e1:61:83:31:07:ab:
         47:14:6c:22:0f:88:e2:de:75:63:24:a3:b5:06:a3:74:3a:a6:
         ba:31:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org