Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          fwBA08OU4btU9P8QUj8DV11txPOlyFUwpTb2pmC7LFU=
Subject key identifier:   EF:09:0E:9A:73:B3:10:90:6F:52:7C:82:03:35:DB:90:E9:FA:89:56
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       621CD4D5C0079D4BD0A389CA55CBE7919D27B6B4
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:51:40 +0000
ROA not before:           Wed 01 Jun 2022 18:46:40 +0000
ROA not after:            Wed 31 May 2023 18:51:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1c:d4:d5:c0:07:9d:4b:d0:a3:89:ca:55:cb:e7:91:9d:27:b6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:46:40 2022 GMT
            Not After : May 31 18:51:40 2023 GMT
        Subject: CN=EF090E9A73B310906F527C820335DB90E9FA8956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:9a:bc:32:83:5e:88:2a:14:3e:a3:c7:86:
                    61:12:a6:bd:b2:7a:5c:a8:b7:67:7b:08:81:b3:d1:
                    9f:be:14:0b:31:4e:14:fa:a3:28:0e:72:28:83:31:
                    8e:28:e0:9d:e2:bf:ba:fc:08:74:6e:aa:8c:0e:fb:
                    f5:39:84:b9:b0:5f:30:a6:7d:28:6d:55:f7:f5:2b:
                    40:b1:44:3f:77:04:a4:d8:ad:d9:86:30:b2:46:50:
                    39:40:c7:1c:b9:1e:cd:0c:6b:25:fc:90:8c:43:0b:
                    52:40:b1:a0:bc:90:cd:78:9f:2c:02:67:3f:08:3c:
                    b3:5b:e6:0b:e0:3d:63:cf:a5:3b:91:3e:42:dd:6f:
                    60:94:de:f7:e8:85:11:1d:d6:4e:13:9d:b9:78:87:
                    82:37:b3:70:80:9c:84:0b:dc:93:38:23:7b:37:6d:
                    e4:45:d2:94:95:fa:20:e9:12:44:08:ee:e4:67:49:
                    4d:3e:8d:05:51:c8:a4:14:a6:56:43:8c:c8:79:98:
                    10:7a:b2:3e:4d:ad:6c:48:23:3d:a3:aa:4f:89:c9:
                    53:2a:48:1d:e5:b4:be:0b:6d:53:d1:cf:aa:ea:60:
                    9c:ec:b6:d4:3e:cd:d2:3d:79:e4:9c:2b:c0:f6:9b:
                    eb:d3:25:70:46:18:f8:80:9d:3e:ad:01:64:b0:17:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:09:0E:9A:73:B3:10:90:6F:52:7C:82:03:35:DB:90:E9:FA:89:56
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:cb:9b:1e:f1:75:8b:a4:e7:c7:d3:71:f8:49:d3:30:31:
         3f:f1:c5:aa:1e:47:85:5c:d6:2e:ca:2f:a7:17:1c:7a:25:c9:
         e6:09:36:38:04:7e:4b:e1:b0:3f:b0:a9:b9:ee:20:31:bd:2a:
         0e:fb:5f:40:11:e1:fb:5c:1a:12:60:d7:6a:f2:31:67:d3:74:
         66:38:8a:16:22:f9:8e:98:0c:5b:f9:8c:52:ba:72:bc:de:77:
         21:b1:b7:76:f9:db:5c:98:62:1e:95:36:16:f8:b8:80:f8:ad:
         49:80:b8:1a:ec:73:4c:bf:2a:dd:5e:cc:67:fe:53:ee:6a:36:
         4a:03:13:00:e2:c9:40:4f:c2:6c:2a:cc:bc:20:a8:6b:bc:9b:
         cd:ae:f1:6c:23:c7:fa:63:31:22:f5:ae:a8:52:5b:13:8f:05:
         9f:e2:0d:10:04:52:f8:b3:12:84:3b:ee:a9:04:c1:82:6f:78:
         fe:01:bd:aa:97:76:1b:4e:f8:9c:b9:a1:3a:af:5b:e2:88:b1:
         b5:6c:7a:78:1a:d8:d6:39:3a:20:8c:b5:b2:33:08:f7:be:eb:
         2e:bb:20:66:93:c9:4d:1a:15:6b:f2:12:7f:cc:c9:26:9d:4b:
         d8:ef:77:0f:ed:9e:fb:88:bf:a2:bf:41:5e:aa:5d:3e:b2:87:
         55:f7:d3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org