Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          QMTUIU/ywvUKJ/9vkH+uzkmRbU7HkH3Kbs0ur94JpcY=
Subject key identifier:   05:01:08:9F:F3:9C:42:4B:16:C3:7B:16:F3:5B:EE:6F:C7:F4:DD:08
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       1EDC4FB76CAD034715DE5DE5F3CE8CAC56210E58
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:03 +0000
ROA not before:           Fri 09 Feb 2024 22:30:03 +0000
ROA not after:            Fri 07 Feb 2025 22:35:03 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dc:4f:b7:6c:ad:03:47:15:de:5d:e5:f3:ce:8c:ac:56:21:0e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:03 2024 GMT
            Not After : Feb  7 22:35:03 2025 GMT
        Subject: CN=0501089FF39C424B16C37B16F35BEE6FC7F4DD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:8f:a3:52:c4:cf:2c:b9:b2:4e:b6:44:55:
                    88:4d:86:be:30:73:17:10:df:55:a3:27:e9:12:08:
                    3d:b9:15:9d:83:b1:15:63:c2:d2:8b:6a:d0:90:f6:
                    18:2a:ff:95:4f:11:9c:ee:43:6f:63:80:8c:50:09:
                    a7:a3:3f:86:be:84:1c:54:33:f1:61:bd:c9:f7:02:
                    1a:9f:41:f8:64:d6:68:c2:79:54:89:86:fc:cf:8f:
                    90:0c:64:bc:c1:2b:13:1e:0c:03:e8:35:ce:7a:8d:
                    c1:d5:85:7b:9d:2b:71:85:fb:d0:51:de:4f:b9:71:
                    22:c9:98:37:d7:4a:a2:63:11:ea:64:18:3f:71:42:
                    d2:10:91:e2:75:74:5c:7c:a8:3c:16:cd:63:52:a8:
                    7d:d1:00:e9:88:48:49:d7:08:f1:ef:b7:cd:3c:4a:
                    b9:46:23:c4:6c:5e:6a:9d:f0:ed:c4:47:f3:c0:6d:
                    d5:c0:4b:58:b7:14:4f:39:93:b5:1d:44:a5:28:55:
                    fe:76:76:86:c4:ca:c0:07:70:2b:1f:8d:9e:24:70:
                    60:42:c3:bc:a1:33:e1:4d:55:45:e1:0f:91:93:84:
                    c4:3e:ce:31:e5:25:db:d2:9c:5d:ad:a0:4f:3a:0f:
                    3c:1e:9f:04:e7:38:e8:15:91:5d:41:a5:20:da:64:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:08:9F:F3:9C:42:4B:16:C3:7B:16:F3:5B:EE:6F:C7:F4:DD:08
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:1b:c7:7b:76:b4:c0:49:e0:20:52:44:5b:89:1e:1e:a5:
         37:0a:47:5c:34:74:4d:2c:8f:c9:3d:fc:11:ba:01:5d:38:8a:
         e2:62:a8:71:90:b5:74:62:9d:ec:09:dd:69:84:8a:11:7d:c5:
         d7:20:4b:cd:95:5f:71:e5:0d:e7:32:3e:15:2a:14:e5:c2:7e:
         90:74:a6:ad:6e:91:65:da:ab:5b:47:e7:2b:da:b7:5a:21:20:
         b6:f6:9d:48:4f:2b:ec:9a:8e:0b:53:e6:8f:e9:ec:80:16:63:
         55:fd:5f:6b:8f:c5:2c:a0:05:06:b1:f4:94:11:78:75:f2:c0:
         6d:b7:44:bc:cb:00:cf:71:6f:0c:16:c0:96:4d:bb:11:13:d5:
         ef:f7:0c:41:5f:1e:a8:b4:b9:21:76:9e:48:40:2b:45:78:43:
         6c:6f:43:38:f5:fb:b5:c7:87:36:dc:54:f6:97:ff:a8:4c:8a:
         c8:4b:f9:45:46:8b:1f:3e:09:14:b9:ad:23:02:25:31:8d:ee:
         65:74:df:1b:49:9f:d8:7a:fb:c7:32:96:ce:26:11:ba:81:4c:
         22:ca:dc:50:95:4b:dc:72:63:af:23:a3:41:d0:8a:bd:d1:d6:
         15:e2:29:ac:8d:67:66:c2:e4:ee:f5:c9:a4:be:a5:ce:58:02:
         38:10:91:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org