Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          1b6W8LGDwN96AReaEvXMPZQl4Vm0mtT4lLZjBCEJQe4=
Subject key identifier:   40:1F:78:9B:A0:5B:6C:1B:52:A3:75:9A:C1:43:7E:E6:88:4E:13:4A
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       44040795F15FFB919768885C61EA8D805162FDB0
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:58:56 +0000
ROA not before:           Wed 01 Jun 2022 18:53:56 +0000
ROA not after:            Wed 31 May 2023 18:58:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:04:07:95:f1:5f:fb:91:97:68:88:5c:61:ea:8d:80:51:62:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:53:56 2022 GMT
            Not After : May 31 18:58:56 2023 GMT
        Subject: CN=401F789BA05B6C1B52A3759AC1437EE6884E134A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:4e:c3:30:1a:d4:3e:14:45:89:64:cf:ff:
                    58:12:9c:b2:d1:fe:3d:d6:50:3e:78:89:98:5a:4d:
                    77:06:42:f6:0b:14:21:c3:32:b4:63:bf:54:87:18:
                    62:54:67:28:77:b6:d2:55:6d:69:0c:b8:a0:f0:cc:
                    45:78:d0:17:e3:55:f8:e1:7d:e8:86:55:00:6a:ae:
                    d1:47:8a:ee:63:f5:cf:46:9f:61:05:a7:88:db:e7:
                    c2:13:9a:32:00:6b:0a:34:8e:5f:02:02:c5:3c:c8:
                    f8:1f:57:c9:e6:3d:dc:71:33:37:c8:bb:e1:be:60:
                    12:e6:8a:df:82:f1:2d:27:d5:06:0f:cb:1f:5f:ce:
                    ed:1d:3d:94:63:3d:d4:05:00:23:34:2c:0e:f2:53:
                    ae:1c:b8:c2:dd:94:2e:f0:da:f4:24:df:b1:5b:ca:
                    3f:a9:f8:d3:e3:dd:5f:6b:b0:b5:3b:93:32:5f:af:
                    1d:ea:4e:75:11:c3:0d:62:6a:c0:11:a8:42:25:2e:
                    98:0c:6f:1e:b6:af:26:06:51:90:90:7a:37:92:30:
                    9d:58:fc:47:89:fa:09:ce:bf:d0:45:49:5e:bf:4d:
                    19:b9:88:fe:94:97:37:bd:86:be:9b:41:eb:09:e5:
                    af:1d:72:50:77:df:de:45:fb:60:b6:40:6a:2a:2b:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1F:78:9B:A0:5B:6C:1B:52:A3:75:9A:C1:43:7E:E6:88:4E:13:4A
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:49:6d:f6:f1:4c:87:a1:f5:e1:9b:34:3e:13:bc:52:84:
         4b:27:66:a0:fa:05:60:0c:4c:db:85:22:78:fc:e2:40:8e:18:
         af:43:91:65:54:2d:6c:c0:66:8f:6d:ad:77:a4:22:b5:a4:87:
         d9:c8:66:dd:3f:bf:54:c0:91:f4:d2:05:c7:b1:31:79:38:01:
         e8:35:15:ff:19:f2:f2:09:37:f1:3d:e4:de:d1:ba:c0:d1:ea:
         8a:5d:88:08:10:39:4d:45:39:55:df:15:87:94:6c:cb:6e:b5:
         87:a1:0a:0d:24:b5:d7:8c:76:e2:b0:af:d0:e4:7f:24:bf:db:
         52:64:4b:9b:26:11:8d:3a:fe:7e:34:e8:28:4b:ee:5a:22:eb:
         f5:78:74:32:96:ff:a6:78:b5:7e:ad:e6:ab:59:d6:81:ca:50:
         af:00:d6:a2:52:1d:0c:2d:be:df:fe:85:22:e1:b2:77:4b:96:
         2a:68:0e:85:35:ec:ed:ce:c7:ab:15:ac:6d:97:9f:23:c5:1d:
         69:ca:4d:0d:43:b3:c3:12:99:24:36:13:48:66:58:a6:3d:56:
         d5:cb:51:ac:a3:88:e5:8b:ef:15:6e:67:46:7e:e8:05:a4:a8:
         a7:4e:f5:fa:2d:ec:56:c6:37:ed:dd:5e:13:c3:0b:24:5d:f6:
         98:f9:31:ce
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIURAQHlfFf+5GXaIhcYeqNgFFi/bAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQ5ZjZmOTk3NjI2Njk5MjJkM2E5MWM1
YTE1ZTMxZDA4YjM1MmZiNjQwHhcNMjIwNjAxMTg1MzU2WhcNMjMwNTMxMTg1ODU2
WjAzMTEwLwYDVQQDEyg0MDFGNzg5QkEwNUI2QzFCNTJBMzc1OUFDMTQzN0VFNjg4
NEUxMzRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE1OwzAa1D4U
RYlkz/9YEpyy0f491lA+eImYWk13BkL2CxQhwzK0Y79UhxhiVGcod7bSVW1pDLig
8MxFeNAX41X44X3ohlUAaq7RR4ruY/XPRp9hBaeI2+fCE5oyAGsKNI5fAgLFPMj4
H1fJ5j3ccTM3yLvhvmAS5orfgvEtJ9UGD8sfX87tHT2UYz3UBQAjNCwO8lOuHLjC
3ZQu8Nr0JN+xW8o/qfjT491fa7C1O5MyX68d6k51EcMNYmrAEahCJS6YDG8etq8m
BlGQkHo3kjCdWPxHifoJzr/QRUlev00ZuYj+lJc3vYa+m0HrCeWvHXJQd9/eRftg
tkBqKiu3DwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEAfeJugW2wbUqN1msFDfuaI
ThNKMB8GA1UdIwQYMBaAFPSk+w+9MpzfxWVGSWbPExlGnjO1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMjA5ODVlZWIxN2NhLzAv
RjRBNEZCMEZCRDMyOUNERkM1NjU0NjQ5NjZDRjEzMTk0NjlFMzNCNS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M4ZDQyMWFjLTMxMDMtNDdhMS05MWFjLWVkNGUyODdiYzNjOC9mY2Iy
MGY1OTY2NDlmNmY5OTc2MjY2OTkyMmQzYTkxYzVhMTVlMzFkMDhiMzUyZmI2NC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTIw
OTg1ZWViMTdjYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzkzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwkAMA0G
CSqGSIb3DQEBCwUAA4IBAQBaBUlt9vFMh6H14Zs0PhO8UoRLJ2ag+gVgDEzbhSJ4
/OJAjhivQ5FlVC1swGaPba13pCK1pIfZyGbdP79UwJH00gXHsTF5OAHoNRX/GfLy
CTfxPeTe0brA0eqKXYgIEDlNRTlV3xWHlGzLbrWHoQoNJLXXjHbisK/Q5H8kv9tS
ZEubJhGNOv5+NOgoS+5aIuv1eHQylv+meLV+rearWdaBylCvANaiUh0MLb7f/oUi
4bJ3S5YqaA6FNeztzserFaxtl58jxR1pyk0NQ7PDEpkkNhNIZlimPVbVy1Gso4jl
i+8VbmdGfugFpKinTvX6LexWxjft3V4TwwskXfaY+THO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org