Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          grCqzk3CM6qHxaPNmjZNuL2s9amdE22zr3XjFqGqUoQ=
Subject key identifier:   D1:45:50:3B:C3:98:3C:C5:6C:53:83:D6:D5:C3:6C:DD:43:6C:91:92
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       7C9E0B6F7328BADF98B21D5630469D4D24CBAF60
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     152368
IP address blocks:        2602:fac2:8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9e:0b:6f:73:28:ba:df:98:b2:1d:56:30:46:9d:4d:24:cb:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=D145503BC3983CC56C5383D6D5C36CDD436C9192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:1c:b6:e4:d2:d9:33:c5:66:3d:6a:de:9a:
                    84:b5:c3:0e:10:22:86:7f:be:87:b7:b5:c2:ea:27:
                    43:9e:19:ff:83:a2:bc:1d:0e:f5:de:5f:40:16:95:
                    a6:d1:c5:4d:fc:d3:8a:ed:d5:c2:03:96:09:d6:5d:
                    dd:04:22:22:57:f2:2f:83:01:66:5c:37:6c:65:60:
                    bd:9d:bf:da:9c:c4:32:20:c7:05:fc:43:d6:85:ad:
                    d4:e7:ee:ab:ba:8c:fb:42:26:a4:5c:0a:1e:97:80:
                    fe:34:fc:9b:6d:41:1a:92:c9:2a:7d:35:21:48:9a:
                    b6:8b:3a:5b:bb:92:59:74:94:32:d1:0f:92:80:dd:
                    0c:54:e3:f8:bd:4b:cb:7e:fe:d3:17:a5:7a:5e:4c:
                    2b:0a:f0:ed:f1:2a:af:d3:6b:77:5d:7c:53:6d:aa:
                    17:ad:e1:47:ce:e0:e9:cd:ae:50:c0:4e:53:64:da:
                    a0:d3:14:17:5d:a0:ae:54:b2:fe:26:97:4a:33:9b:
                    34:ee:2f:60:ee:5f:85:27:cc:de:1b:e5:f4:12:95:
                    94:4b:df:bc:da:5b:0a:30:58:3c:be:81:5a:d8:9e:
                    67:29:0d:2b:9d:9d:64:55:4f:3c:3d:0f:76:1e:9b:
                    6f:0c:9c:4b:fd:6c:5e:9f:76:96:ae:9b:1e:11:68:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:50:3B:C3:98:3C:C5:6C:53:83:D6:D5:C3:6C:DD:43:6C:91:92
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:0a:d9:3f:70:cd:4c:10:7b:bc:3a:26:f4:4d:a5:45:ad:
         d9:52:c3:0a:3f:31:04:17:ff:0e:0c:f2:67:d9:08:ab:06:f4:
         f5:e7:25:a7:70:64:d2:98:51:d5:d6:ff:ed:7b:70:eb:6e:db:
         79:db:fa:19:ea:08:51:86:07:21:40:7e:dc:b9:7f:fd:ac:e6:
         1c:dc:96:29:ee:bb:68:2a:91:f8:69:5b:3c:25:03:88:15:14:
         cc:38:f9:4f:a9:83:3b:91:d5:73:93:6e:9f:51:60:6a:80:0a:
         3a:ff:fd:19:2c:1b:e5:43:ea:a0:b4:be:c4:f9:7a:c3:e8:95:
         7b:03:10:21:be:b4:6c:ec:2d:54:85:59:22:28:b8:f3:83:d7:
         c4:fb:99:ca:df:94:4c:c5:80:48:3d:4d:2f:e0:4e:4b:15:18:
         b5:4c:dc:2c:45:a3:d1:ec:7f:d1:29:0f:b7:1b:be:bd:d3:34:
         93:32:80:be:cb:15:01:95:0e:ee:ff:af:75:f5:a9:80:f7:89:
         6d:c1:0a:0f:7a:bf:9f:0f:27:83:00:ac:f1:f5:f3:c8:7e:b7:
         4d:6a:b7:66:e2:b8:57:5c:dd:96:7c:f8:d6:48:0a:d7:6e:2f:
         e9:26:5a:5e:fc:72:c3:22:7c:ea:b9:da:a6:4d:4c:8c:4d:67:
         18:ba:2b:9f
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUfJ4Lb3Mout+Ysh1WMEadTSTLr2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYTE0OGNjMDUyMmViNzI3YTRhYTVjYzg3
ZDNkMDE0OWM3ZjA3MzQ1MmYwHhcNMjUwMzI4MDAxMjE5WhcNMjYwMzI3MDAxNzE5
WjAzMTEwLwYDVQQDEyhEMTQ1NTAzQkMzOTgzQ0M1NkM1MzgzRDZENUMzNkNERDQz
NkM5MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9MctuTS2TPF
Zj1q3pqEtcMOECKGf76Ht7XC6idDnhn/g6K8HQ713l9AFpWm0cVN/NOK7dXCA5YJ
1l3dBCIiV/IvgwFmXDdsZWC9nb/anMQyIMcF/EPWha3U5+6ruoz7QiakXAoel4D+
NPybbUEakskqfTUhSJq2izpbu5JZdJQy0Q+SgN0MVOP4vUvLfv7TF6V6XkwrCvDt
8Sqv02t3XXxTbaoXreFHzuDpza5QwE5TZNqg0xQXXaCuVLL+JpdKM5s07i9g7l+F
J8zeG+X0EpWUS9+82lsKMFg8voFa2J5nKQ0rnZ1kVU88PQ92HptvDJxL/Wxen3aW
rpseEWi31wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFNFFUDvDmDzFbFOD1tXDbN1D
bJGSMB8GA1UdIwQYMBaAFOJxrlUmi4jB6XKn7oWxRZ2N0hAsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
RTI3MUFFNTUyNjhCODhDMUU5NzJBN0VFODVCMTQ1OUQ4REQyMTAyQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhMTQ4Y2MwNTIyZWI3MjdhNGFhNWNjODdkM2QwMTQ5YzdmMDczNDUyZi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzYzMDMyM2E2NjYxNjMzMjNhMzgzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvrCAAgwDQYJKoZI
hvcNAQELBQADggEBACz5Ctk/cM1MEHu8Oib0TaVFrdlSwwo/MQQX/w4M8mfZCKsG
9PXnJadwZNKYUdXW/+17cOtu23nb+hnqCFGGByFAfty5f/2s5hzclinuu2gqkfhp
WzwlA4gVFMw4+U+pgzuR1XOTbp9RYGqACjr//RksG+VD6qC0vsT5esPolXsDECG+
tGzsLVSFWSIouPOD18T7mcrflEzFgEg9TS/gTksVGLVM3CxFo9Hsf9EpD7cbvr3T
NJMygL7LFQGVDu7/r3X1qYD3iW3BCg96v58PJ4MArPH188h+t01qt2biuFdc3ZZ8
+NZICtduL+kmWl78csMifOq52qZNTIxNZxi6K58=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:46:49 2025 by rpki-client