Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          ytDRZqG40gHPw3hwfpxE32lX2aAkfSVXG0jRiJhQ8sc=
Subject key identifier:   1B:87:D0:92:01:A5:54:34:70:3C:12:74:48:FC:38:0F:34:57:8C:77
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       77B73C6BEAF70A905BA71318B3C59B468257E502
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:20 +0000
ROA not before:           Fri 09 Feb 2024 22:30:20 +0000
ROA not after:            Fri 07 Feb 2025 22:35:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:3c:6b:ea:f7:0a:90:5b:a7:13:18:b3:c5:9b:46:82:57:e5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:20 2024 GMT
            Not After : Feb  7 22:35:20 2025 GMT
        Subject: CN=1B87D09201A55434703C127448FC380F34578C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:92:19:f3:e7:86:63:7e:aa:15:dd:64:f1:
                    f3:17:5a:e9:4d:ea:f6:ff:91:4e:1f:6f:3d:d4:d5:
                    cf:7a:60:c5:be:f0:f1:9d:e9:24:ed:ce:38:43:74:
                    0e:6f:2c:b2:97:9d:b4:79:b4:43:df:d9:4c:fa:ff:
                    6b:db:9f:d9:14:48:15:cc:b4:1d:16:af:2f:4a:46:
                    37:dd:df:12:4f:9d:e3:de:33:8f:b9:fe:2b:78:5d:
                    5b:e4:c9:38:35:fe:a7:c9:5f:57:59:28:80:a1:2a:
                    1e:ab:b6:67:cc:f4:19:2d:86:7e:ac:c8:95:ae:3c:
                    5c:3e:03:dc:6f:23:35:75:c0:e2:5e:90:39:04:ea:
                    2e:8f:ab:13:06:99:e4:f5:52:ba:42:0d:b3:31:69:
                    1a:ce:05:18:24:6f:ec:dc:ee:4a:61:6b:1b:22:05:
                    9f:cb:ce:7f:b3:d8:07:ff:9a:68:75:7a:5f:87:6e:
                    27:29:e5:6b:cd:d7:36:fd:27:e1:a7:5f:08:dc:39:
                    a8:90:b2:70:b0:1b:fd:c4:ae:59:4f:4a:46:92:ac:
                    85:73:32:d7:81:f1:44:b0:e2:af:38:26:b5:f8:eb:
                    fb:64:57:da:9e:96:14:5d:c7:fb:ae:e9:c2:9b:1b:
                    99:84:ef:95:c0:86:7b:4d:a5:d0:99:74:98:9c:e5:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:87:D0:92:01:A5:54:34:70:3C:12:74:48:FC:38:0F:34:57:8C:77
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:b6:f7:e1:a9:c3:87:6a:2c:93:c3:39:93:ab:5d:92:3a:
         40:a4:88:d7:86:69:91:5d:d1:59:79:f1:c3:bd:fe:d6:23:1b:
         73:86:15:9b:42:bf:c2:7d:74:07:52:fb:26:cc:27:ee:bc:3f:
         4b:36:75:fd:f8:cc:09:bc:3d:cd:e1:bd:60:57:6b:82:14:fd:
         dd:86:a5:07:06:bf:c6:bf:12:1f:d4:4d:ce:1e:71:5b:ec:82:
         ee:60:dc:83:01:b9:1c:4f:a4:af:d9:67:f4:5e:b0:be:a3:e9:
         97:69:d3:41:f7:79:0e:c1:f7:b7:ca:50:50:60:83:0e:38:0d:
         18:aa:ca:f8:d8:18:40:64:06:5b:d3:5e:86:7f:21:82:5f:d8:
         7c:35:90:2c:8d:8a:17:98:7e:f5:62:aa:76:af:61:a1:23:dd:
         39:91:09:c5:cc:82:ad:e5:07:dc:36:b9:cf:6c:16:8f:5f:7b:
         c8:92:5c:95:83:af:07:93:cb:70:cc:d8:76:c1:d8:42:e0:59:
         fc:21:a5:b8:43:0b:e3:b9:22:71:81:51:64:ab:d2:fb:d6:b2:
         d0:9d:b7:a4:c8:44:b5:32:2e:1c:82:be:fd:c0:f4:32:0e:29:
         1f:f8:47:03:de:54:2b:a3:33:70:da:a6:3d:6c:f8:c6:36:57:
         63:8a:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org