Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          9t3qKGUZucWBtCzHxIs621pXpaHejLct1J8gtC9mcRM=
Subject key identifier:   81:03:C4:3E:B4:CC:2E:31:D7:63:3F:98:70:70:BA:40:91:28:A1:0F
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       5773DC06CC478563A420B19056F2CD69A4D010F0
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:26 +0000
ROA not before:           Wed 01 Jun 2022 18:54:26 +0000
ROA not after:            Wed 31 May 2023 18:59:26 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:73:dc:06:cc:47:85:63:a4:20:b1:90:56:f2:cd:69:a4:d0:10:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:26 2022 GMT
            Not After : May 31 18:59:26 2023 GMT
        Subject: CN=8103C43EB4CC2E31D7633F987070BA409128A10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:f1:28:c9:94:16:f3:50:04:d7:4b:a6:45:
                    c1:a4:07:59:8b:e6:86:84:37:a9:f8:ea:0e:ba:ae:
                    25:20:e0:ba:f4:3f:4d:b3:26:bb:11:4d:9e:fe:f1:
                    e7:5b:0b:98:c2:04:3b:86:61:b1:97:a4:2d:f1:5b:
                    6f:ed:4d:3e:ad:fd:d0:49:dd:99:53:5e:b8:5e:a7:
                    73:62:02:99:79:4f:27:de:36:b9:21:c3:a2:63:71:
                    bb:43:0e:86:54:c2:a5:62:bf:5e:66:cb:ee:4a:4f:
                    d1:aa:36:37:d3:8d:f3:c1:d0:bc:26:c9:14:7d:f7:
                    87:9a:6b:8f:61:60:e8:e5:9d:9b:c3:77:35:6f:77:
                    1a:85:03:54:0b:d7:56:c2:3b:1f:0d:95:5d:6b:48:
                    54:5b:7c:2d:57:7d:35:9a:5a:31:31:40:5c:4b:ac:
                    87:45:e4:3b:f9:3f:e4:dd:93:72:96:ef:0b:a6:41:
                    a2:09:2d:57:45:0e:ff:f7:af:e6:a5:12:79:a7:99:
                    3f:66:2f:b5:89:f8:50:5e:f1:77:ec:34:99:c2:64:
                    22:b5:b8:ed:3a:55:41:b5:9c:16:f5:bc:ba:66:d0:
                    d2:5e:11:17:5f:8d:55:93:6d:5f:1c:cb:e2:11:68:
                    61:e5:03:49:66:23:a1:9a:04:de:56:66:a2:5f:54:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:03:C4:3E:B4:CC:2E:31:D7:63:3F:98:70:70:BA:40:91:28:A1:0F
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:95:19:1b:bb:72:31:49:27:95:9c:75:d4:95:8d:a4:b6:25:
         d9:9a:88:54:76:21:5d:55:57:56:56:11:3b:08:28:54:40:4d:
         2b:3d:77:d1:ba:5c:9d:5b:28:ed:76:aa:1e:91:e0:b5:0a:83:
         20:2c:d7:1b:8c:28:09:71:ef:c3:8a:74:7c:75:bc:db:af:70:
         17:8a:b9:11:10:2f:88:ba:ca:2c:e1:6d:f0:46:51:20:d8:99:
         a4:b2:bf:2c:1a:cb:8c:78:67:72:35:e9:02:bf:ac:c1:d4:2a:
         1b:48:3e:05:2d:bb:82:36:18:28:ab:52:b0:4c:b4:01:9f:5b:
         37:28:31:a6:32:40:a7:09:d1:fe:91:f0:f7:1f:f0:cc:ce:03:
         b8:59:45:f3:93:06:e0:5b:0d:c5:a9:db:b8:64:f9:50:ed:94:
         36:8f:5f:c3:3c:ab:32:36:e1:53:34:d5:c3:3b:e3:d1:f8:6f:
         97:ca:77:de:c3:be:ad:94:73:08:eb:c7:e1:34:88:d3:e7:8b:
         9c:af:cf:00:e4:7a:3f:0a:4a:3f:ae:67:74:8a:d9:e8:1b:0a:
         2b:bf:ed:16:5a:1a:8c:69:71:89:62:2b:5c:6a:c1:24:6b:50:
         1c:cf:8d:a2:bc:76:c6:e0:31:85:12:24:c9:69:45:a0:09:a2:
         7c:9c:3c:b5
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUV3PcBsxHhWOkILGQVvLNaaTQEPAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQ5ZjZmOTk3NjI2Njk5MjJkM2E5MWM1
YTE1ZTMxZDA4YjM1MmZiNjQwHhcNMjIwNjAxMTg1NDI2WhcNMjMwNTMxMTg1OTI2
WjAzMTEwLwYDVQQDEyg4MTAzQzQzRUI0Q0MyRTMxRDc2MzNGOTg3MDcwQkE0MDkx
MjhBMTBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHxKMmUFvNQ
BNdLpkXBpAdZi+aGhDep+OoOuq4lIOC69D9Nsya7EU2e/vHnWwuYwgQ7hmGxl6Qt
8Vtv7U0+rf3QSd2ZU164XqdzYgKZeU8n3ja5IcOiY3G7Qw6GVMKlYr9eZsvuSk/R
qjY3043zwdC8JskUffeHmmuPYWDo5Z2bw3c1b3cahQNUC9dWwjsfDZVda0hUW3wt
V301mloxMUBcS6yHReQ7+T/k3ZNylu8LpkGiCS1XRQ7/96/mpRJ5p5k/Zi+1ifhQ
XvF37DSZwmQitbjtOlVBtZwW9by6ZtDSXhEXX41Vk21fHMviEWhh5QNJZiOhmgTe
VmaiX1QebQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIEDxD60zC4x12M/mHBwukCR
KKEPMB8GA1UdIwQYMBaAFPSk+w+9MpzfxWVGSWbPExlGnjO1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMjA5ODVlZWIxN2NhLzAv
RjRBNEZCMEZCRDMyOUNERkM1NjU0NjQ5NjZDRjEzMTk0NjlFMzNCNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M4ZDQyMWFjLTMxMDMtNDdhMS05MWFjLWVkNGUyODdiYzNjOC9mY2Iy
MGY1OTY2NDlmNmY5OTc2MjY2OTkyMmQzYTkxYzVhMTVlMzFkMDhiMzUyZmI2NC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTIw
OTg1ZWViMTdjYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzczMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwcAMA0G
CSqGSIb3DQEBCwUAA4IBAQAClRkbu3IxSSeVnHXUlY2ktiXZmohUdiFdVVdWVhE7
CChUQE0rPXfRulydWyjtdqoekeC1CoMgLNcbjCgJce/DinR8dbzbr3AXirkREC+I
usos4W3wRlEg2Jmksr8sGsuMeGdyNekCv6zB1CobSD4FLbuCNhgoq1KwTLQBn1s3
KDGmMkCnCdH+kfD3H/DMzgO4WUXzkwbgWw3Fqdu4ZPlQ7ZQ2j1/DPKsyNuFTNNXD
O+PR+G+Xynfew76tlHMI68fhNIjT54ucr88A5Ho/Cko/rmd0itnoGworv+0WWhqM
aXGJYitcasEka1Acz42ivHbG4DGFEiTJaUWgCaJ8nDy1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org