Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          6uazyycCO8wMBa83jSJE29H+sdI5ZNI5uKN5aW2w5ss=
Subject key identifier:   30:59:9B:9A:EE:BE:03:98:7A:ED:48:7D:7C:36:0D:F7:F9:06:A8:B9
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       69D26C6227CFF4761644E9A39F7C4EEFCF9AACBF
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:51:15 +0000
ROA not before:           Wed 01 Jun 2022 18:46:15 +0000
ROA not after:            Wed 31 May 2023 18:51:15 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d2:6c:62:27:cf:f4:76:16:44:e9:a3:9f:7c:4e:ef:cf:9a:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:46:15 2022 GMT
            Not After : May 31 18:51:15 2023 GMT
        Subject: CN=30599B9AEEBE03987AED487D7C360DF7F906A8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:44:e6:40:b5:4e:5f:07:ec:fc:a5:fb:e7:8f:
                    04:86:9a:60:1e:96:39:b6:9d:c7:50:c7:df:a8:3d:
                    a1:e4:a4:63:b0:c9:53:26:a9:d3:1c:f7:80:57:db:
                    41:f5:ea:66:ac:15:2e:30:d4:f5:ad:b0:0a:6c:17:
                    57:58:38:9e:e3:9f:a9:b3:82:e2:2c:bd:49:04:69:
                    7f:63:7d:f3:b8:64:f2:2a:1e:18:92:3b:46:2c:2f:
                    ed:0b:91:36:9f:00:01:a4:c6:fc:ea:89:cf:bd:74:
                    17:e1:cd:ea:0a:45:ce:b4:b6:9b:c8:21:2e:2d:e6:
                    c4:db:3d:e9:4b:eb:16:e6:67:bd:8d:f9:a8:96:70:
                    d2:2f:00:53:c0:70:30:bd:a6:a6:09:6e:d7:ba:59:
                    88:72:a3:29:8b:b8:50:6e:3f:b9:3e:9d:65:b5:a4:
                    ee:01:4d:9d:4a:48:e6:76:ae:75:3e:b7:03:37:37:
                    67:e8:b7:d1:5c:9d:b4:d3:bb:19:16:48:57:66:2c:
                    00:12:6c:ab:e5:5d:7b:85:4b:97:9c:1e:b2:56:ac:
                    f1:6a:6e:58:89:bf:7e:49:1b:0e:fb:c2:2f:d4:49:
                    de:b6:0f:9a:aa:8f:da:74:48:0e:00:42:82:f8:9c:
                    1a:c2:2d:e4:ce:9a:46:83:37:a1:91:79:53:70:55:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:59:9B:9A:EE:BE:03:98:7A:ED:48:7D:7C:36:0D:F7:F9:06:A8:B9
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:0e:54:ca:a4:34:ac:d4:3b:cb:1b:71:23:83:63:17:f1:
         0d:94:2f:7f:eb:02:69:83:30:f9:6b:b0:d8:97:e8:0e:7a:bd:
         2a:41:37:97:83:1c:d1:e5:45:71:e4:3b:ff:08:31:92:7e:cb:
         cb:b6:2a:62:af:90:d8:64:7f:76:27:33:06:50:b4:50:78:5d:
         7d:38:e5:97:fd:0c:16:be:a1:9e:4a:eb:38:15:1c:4f:fa:fe:
         53:8a:bd:5f:e2:d6:49:9a:82:2f:c2:2c:b9:9b:e2:b6:76:09:
         26:ca:29:c5:f7:72:96:c6:c5:01:a5:6b:54:b1:17:2f:d5:38:
         45:f4:51:39:b0:0e:11:6f:5c:c1:f1:56:a4:4a:26:5b:10:09:
         f4:2f:b8:81:87:de:30:af:d8:cb:42:00:ea:fa:67:6e:af:b3:
         22:8c:da:af:20:e9:0f:2e:5f:e1:21:22:18:e1:42:b1:25:f2:
         ce:55:c9:d4:d4:93:7b:0d:88:85:d5:75:42:a4:b0:2d:4e:57:
         01:2a:5e:26:dd:c3:ee:08:9d:d3:d4:46:37:df:69:a6:77:f6:
         67:be:83:2d:6b:37:a2:81:6b:37:99:a5:90:34:ad:e2:3f:94:
         1f:68:8f:3c:65:0f:68:e5:56:fc:a0:4d:8d:04:7c:da:c2:3d:
         f8:e3:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org