Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          +pIWsjQwFjI8iSjna2MNEcHKZ4cALoWqzz3mBH8AHKs=
Subject key identifier:   B2:52:1B:F0:0D:AE:72:2A:A6:8B:AA:15:4C:04:0A:4B:2B:50:FE:3E
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       6AF80069D0D17808F9532DD6044FA1C5C6A2EE9D
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:54 +0000
ROA not before:           Wed 01 Jun 2022 18:54:54 +0000
ROA not after:            Wed 31 May 2023 18:59:54 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:00:69:d0:d1:78:08:f9:53:2d:d6:04:4f:a1:c5:c6:a2:ee:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:54 2022 GMT
            Not After : May 31 18:59:54 2023 GMT
        Subject: CN=B2521BF00DAE722AA68BAA154C040A4B2B50FE3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:26:27:0a:45:e2:6e:fa:b6:30:e6:62:94:
                    21:a8:33:58:3e:06:0f:b2:43:08:98:1b:92:62:64:
                    d0:65:6b:59:9b:84:60:2e:dc:15:04:85:74:57:7d:
                    12:e3:3c:2c:88:23:ed:fa:f2:3a:b1:64:08:f3:ee:
                    7d:ae:b6:14:27:41:53:3f:96:59:dd:98:9e:4f:59:
                    df:e9:51:b8:93:55:cd:7a:af:e4:11:7b:cd:c0:6b:
                    ff:ab:70:e2:eb:fa:cb:50:f4:e3:43:1a:a6:b4:b0:
                    b0:76:5d:a0:33:2c:57:73:bc:52:f8:d8:47:ef:92:
                    d2:51:25:dc:5b:c4:03:a0:91:2e:e8:bf:69:b0:3e:
                    87:56:94:da:74:7f:80:ca:6e:5a:00:d5:c8:cf:7a:
                    99:a8:ef:5f:93:09:ba:f3:19:fa:19:ae:54:9b:05:
                    8d:ff:6d:3b:b6:a2:e5:88:95:1a:0b:b1:7d:9a:ba:
                    0f:b8:1d:82:fb:1c:43:f6:f7:34:b0:f2:e7:a1:3b:
                    76:c0:8a:b7:63:5f:43:4b:24:65:db:7f:8d:05:91:
                    41:bc:4e:53:f3:39:7c:1a:74:9b:16:14:45:2d:f7:
                    af:e9:79:01:ec:78:33:e6:fd:ff:be:ac:71:81:11:
                    43:af:c0:4f:ce:6e:0d:1e:af:a1:cb:d2:03:91:11:
                    1b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:1B:F0:0D:AE:72:2A:A6:8B:AA:15:4C:04:0A:4B:2B:50:FE:3E
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:da:e3:52:39:b3:25:31:a8:69:9f:f5:21:48:7e:22:d9:
         4a:bb:1d:9f:f5:5b:28:10:9d:1b:0f:84:c4:63:74:8c:24:42:
         37:75:52:72:d0:df:ec:48:44:6f:af:53:80:38:9f:a0:bd:e4:
         1f:e0:7f:7e:65:82:6c:c2:3c:a4:8c:35:c0:a7:db:db:bd:ef:
         c7:ab:d4:c5:f1:07:27:42:ab:49:d1:d3:a9:13:c2:5c:00:2b:
         e6:e5:2f:cd:da:36:ef:fc:56:6e:26:f4:c7:c3:e7:a1:bf:f7:
         1f:25:f7:2b:13:df:6b:96:d2:1c:bb:02:34:3e:b9:25:0a:56:
         b4:f8:00:7a:2e:11:67:68:74:67:b5:b4:f8:eb:08:47:dd:70:
         93:70:8e:25:6c:72:5b:bb:01:6d:5f:02:98:ef:6c:5c:31:d3:
         c7:54:16:8e:e6:41:f8:48:4a:ef:cb:94:07:85:fe:12:40:dc:
         52:40:47:da:5a:0b:1e:65:d7:58:23:70:87:99:f1:04:dd:47:
         22:39:4c:e1:86:ae:19:21:f9:90:9e:40:16:15:c2:8d:0d:8b:
         b1:11:77:19:cc:fd:e4:a0:f0:eb:85:1f:68:dd:b3:90:89:17:
         9c:bd:e6:19:3e:34:52:3d:73:64:38:02:31:47:39:b3:a2:c9:
         d9:8c:dc:f9
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUavgAadDReAj5Uy3WBE+hxcai7p0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQ5ZjZmOTk3NjI2Njk5MjJkM2E5MWM1
YTE1ZTMxZDA4YjM1MmZiNjQwHhcNMjIwNjAxMTg1NDU0WhcNMjMwNTMxMTg1OTU0
WjAzMTEwLwYDVQQDEyhCMjUyMUJGMDBEQUU3MjJBQTY4QkFBMTU0QzA0MEE0QjJC
NTBGRTNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z8mJwpF4m76
tjDmYpQhqDNYPgYPskMImBuSYmTQZWtZm4RgLtwVBIV0V30S4zwsiCPt+vI6sWQI
8+59rrYUJ0FTP5ZZ3ZieT1nf6VG4k1XNeq/kEXvNwGv/q3Di6/rLUPTjQxqmtLCw
dl2gMyxXc7xS+NhH75LSUSXcW8QDoJEu6L9psD6HVpTadH+Aym5aANXIz3qZqO9f
kwm68xn6Ga5UmwWN/207tqLliJUaC7F9mroPuB2C+xxD9vc0sPLnoTt2wIq3Y19D
SyRl23+NBZFBvE5T8zl8GnSbFhRFLfev6XkB7Hgz5v3/vqxxgRFDr8BPzm4NHq+h
y9IDkREbXQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLJSG/ANrnIqpouqFUwECksr
UP4+MB8GA1UdIwQYMBaAFPSk+w+9MpzfxWVGSWbPExlGnjO1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMjA5ODVlZWIxN2NhLzAv
RjRBNEZCMEZCRDMyOUNERkM1NjU0NjQ5NjZDRjEzMTk0NjlFMzNCNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M4ZDQyMWFjLTMxMDMtNDdhMS05MWFjLWVkNGUyODdiYzNjOC9mY2Iy
MGY1OTY2NDlmNmY5OTc2MjY2OTkyMmQzYTkxYzVhMTVlMzFkMDhiMzUyZmI2NC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTIw
OTg1ZWViMTdjYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzEzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwEAMA0G
CSqGSIb3DQEBCwUAA4IBAQB+rtrjUjmzJTGoaZ/1IUh+ItlKux2f9VsoEJ0bD4TE
Y3SMJEI3dVJy0N/sSERvr1OAOJ+gveQf4H9+ZYJswjykjDXAp9vbve/Hq9TF8Qcn
QqtJ0dOpE8JcACvm5S/N2jbv/FZuJvTHw+ehv/cfJfcrE99rltIcuwI0PrklCla0
+AB6LhFnaHRntbT46whH3XCTcI4lbHJbuwFtXwKY72xcMdPHVBaO5kH4SErvy5QH
hf4SQNxSQEfaWgseZddYI3CHmfEE3UciOUzhhq4ZIfmQnkAWFcKNDYuxEXcZzP3k
oPDrhR9o3bOQiRecveYZPjRSPXNkOAIxRzmzosnZjNz5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org