Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          hVeFCVRFUNskmpwfYzCMoH7bVyBRwjECgxS8b9ZpFcc=
Subject key identifier:   7D:5C:9A:DC:DB:E8:9E:15:38:9F:18:F0:89:68:2C:F3:81:B6:E7:43
Certificate issuer:       /CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
Certificate serial:       14498663EBE2508A45AEA332B9706E186A319A2A
Authority key identifier: DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 Jan 2023 17:36:25 +0000
ROA not before:           Tue 31 Jan 2023 17:31:25 +0000
ROA not after:            Tue 30 Jan 2024 17:36:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:49:86:63:eb:e2:50:8a:45:ae:a3:32:b9:70:6e:18:6a:31:9a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
        Validity
            Not Before: Jan 31 17:31:25 2023 GMT
            Not After : Jan 30 17:36:25 2024 GMT
        Subject: CN=7D5C9ADCDBE89E15389F18F089682CF381B6E743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:22:3c:1f:fb:fc:ff:ce:a4:b6:c4:93:e4:
                    23:b4:a0:98:5b:53:7e:ae:73:7a:6a:5e:bc:ae:c3:
                    24:1f:f3:fd:98:bc:dd:a3:92:56:a5:ff:1f:5c:77:
                    3f:ab:f6:bb:de:99:a1:ed:a9:84:3b:ec:f5:fc:0d:
                    1e:2e:73:f8:f7:7c:20:fd:14:2a:65:b3:a2:72:95:
                    2a:e6:c6:2e:3f:55:fd:ae:7c:e5:d9:3d:dc:6e:ff:
                    d2:6f:f7:10:69:e7:93:d7:e8:ff:50:c6:26:45:4f:
                    63:d2:6b:2e:0a:1e:05:10:62:98:3a:93:91:5b:a9:
                    ad:c4:f9:2d:72:24:c4:77:ea:fc:ac:42:1a:50:7e:
                    c8:2b:bd:99:de:bf:aa:50:ba:05:89:d6:82:50:90:
                    e2:90:39:97:51:64:a7:30:e3:6a:27:39:c1:d3:3c:
                    81:db:0b:87:6a:da:b2:2c:85:b2:9b:2f:e7:bf:f7:
                    f1:39:5b:9e:6d:95:a5:36:98:97:86:ce:6b:00:2d:
                    b6:7e:a8:af:e7:8d:5e:4d:0b:ac:4e:3b:c6:e6:a9:
                    b4:82:3a:ab:ac:4d:6f:a2:01:67:43:f4:6e:b4:2f:
                    9b:4b:2f:cc:30:7c:93:15:69:e0:be:6d:e3:f9:aa:
                    e9:f6:1d:5f:46:03:af:db:78:93:92:28:bf:d0:e4:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:9A:DC:DB:E8:9E:15:38:9F:18:F0:89:68:2C:F3:81:B6:E7:43
            X509v3 Authority Key Identifier:
                keyid:DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:dc:a6:b0:e7:5b:cb:d8:ad:04:69:4b:09:a4:07:be:c1:d9:
         d7:1a:2b:ef:88:3f:c7:03:4f:b7:c7:b6:87:fa:c6:fe:e7:ae:
         08:16:fd:d1:44:22:49:d9:d4:94:77:c9:9c:d9:cf:1a:a8:35:
         83:03:cb:d7:76:2f:1f:46:5a:cf:94:4e:2c:24:3c:97:2b:f8:
         c3:1a:64:24:33:30:62:83:84:7f:a7:27:fc:e9:77:e2:f2:b3:
         98:79:60:74:30:29:bf:c3:be:30:8a:73:6e:a2:b5:00:06:04:
         1a:65:54:6f:9b:f1:0a:8a:72:f5:07:f7:d5:4f:0e:f3:bd:a9:
         ae:73:38:c4:c7:5a:60:41:ae:07:f3:63:ac:52:14:be:ee:75:
         1d:c1:2b:a1:57:5a:9b:1f:16:ee:6d:1b:da:a2:95:6a:68:ef:
         b4:85:f2:77:1f:02:c5:04:eb:89:00:44:89:94:b3:4e:99:c6:
         ec:0f:7e:d3:39:d0:42:ac:eb:6e:96:1a:ac:5d:22:41:45:88:
         da:ea:0d:41:db:c0:20:df:a4:59:be:55:ea:36:76:82:83:7a:
         a1:0e:0a:7f:6b:c5:c4:9a:0e:c6:15:f2:f2:33:13:e8:ad:9f:
         14:fc:b2:eb:6a:64:ab:5d:3b:c0:8b:23:3c:96:f4:6e:fb:ea:
         0b:d7:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:30:16 2025 by rpki-client