Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          /uvtDqqFp72cPmvUDHe0Z45+gHAJGDPgePM8IbE+qaM=
Subject key identifier:   5B:63:38:24:7A:92:8A:A5:44:42:E6:AD:B5:7F:35:E3:25:5F:53:E4
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       746E0CB548251CCFA382D7C0820CBBC111B5B34D
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:18 +0000
ROA not before:           Fri 09 Feb 2024 22:30:18 +0000
ROA not after:            Fri 07 Feb 2025 22:35:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6e:0c:b5:48:25:1c:cf:a3:82:d7:c0:82:0c:bb:c1:11:b5:b3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:18 2024 GMT
            Not After : Feb  7 22:35:18 2025 GMT
        Subject: CN=5B6338247A928AA54442E6ADB57F35E3255F53E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:9d:15:2b:83:37:08:48:0c:da:3e:7d:3a:
                    2a:ef:7f:93:b7:15:e5:72:c8:1c:bc:52:5c:59:52:
                    cb:bc:df:fc:01:1d:87:aa:a9:46:c0:ae:ea:32:8e:
                    e1:f8:dd:6a:31:16:97:ff:bf:fe:5a:a0:50:ee:90:
                    1d:10:53:39:c3:fd:bf:e8:e3:fb:bd:8b:e2:10:9a:
                    96:9f:8d:14:dd:1d:31:2a:de:63:81:a6:fd:21:1b:
                    48:a3:11:a6:fa:79:d0:a3:1e:93:cf:1c:4a:d1:9c:
                    9e:bf:c3:e2:9f:31:aa:d1:00:47:f7:1c:d9:5f:6a:
                    48:15:65:76:11:14:9f:84:4b:7a:ae:51:8e:ee:61:
                    0b:87:31:f5:eb:17:1d:81:b2:6d:82:f2:86:cb:3c:
                    18:2d:a2:65:05:92:23:62:c7:3f:b6:da:19:71:1e:
                    06:4a:d3:ca:49:24:db:a1:78:e6:0c:49:de:d3:f2:
                    29:b8:2a:88:db:08:c1:d6:b7:97:27:59:dd:64:1a:
                    bc:c6:85:fc:8f:21:34:32:89:0b:14:23:35:eb:e8:
                    28:bb:dc:f6:61:87:6b:db:9c:05:08:7a:f5:6b:1f:
                    d9:f2:ac:ec:d2:97:1b:e8:cc:ee:81:b0:59:5a:2f:
                    d5:9e:77:62:ef:08:1b:0b:b6:8f:b1:a0:d1:78:2f:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:38:24:7A:92:8A:A5:44:42:E6:AD:B5:7F:35:E3:25:5F:53:E4
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:07:b4:55:e9:83:90:ac:95:5c:19:3f:4e:8e:b9:66:bf:
         20:f6:cc:90:9e:fa:51:93:8e:b5:b7:b5:3a:62:2f:01:8f:4b:
         5c:0f:31:e6:d9:ff:b9:6d:96:0e:db:58:91:5e:a8:be:96:34:
         4c:9f:27:76:89:74:c9:3e:19:36:9e:b8:48:5e:20:4f:04:fd:
         0d:e2:56:0a:87:db:e5:4a:b5:ca:40:85:73:d0:65:e5:5a:53:
         c3:ac:7b:1d:05:a2:55:0b:04:79:20:8d:39:73:06:d0:0d:32:
         09:3b:8c:29:0b:01:e8:5a:78:15:03:62:7c:55:5c:b9:51:5c:
         13:c0:c3:48:95:aa:fc:ee:9b:2b:2a:ad:9c:64:00:50:d3:c5:
         25:d0:76:a4:58:b0:43:cc:05:fb:0d:77:df:f2:b3:b1:32:29:
         fd:e5:87:da:d5:c1:19:16:de:0b:76:ef:ab:69:40:62:c0:af:
         af:59:67:a3:e0:72:09:b8:79:d6:de:a7:bb:8e:b3:76:a7:b5:
         93:ca:ea:ed:a3:dd:07:9c:b2:c0:63:b5:c7:bc:1a:79:58:91:
         a1:e3:8e:0a:2f:ec:1b:5b:47:d8:0a:90:30:7d:4d:15:1c:a2:
         a8:4c:70:1d:f9:5f:9d:95:e7:f4:a3:3c:06:dd:95:7a:26:49:
         c3:5a:f6:23
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUdG4MtUglHM+jgtfAggy7wRG1s00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmZmNjJkNWEyMGI3ZGM2NjM3MzhhMDcx
Zjc1N2QwM2JiYWRjZmQzMWEwHhcNMjQwMjA5MjIzMDE4WhcNMjUwMjA3MjIzNTE4
WjAzMTEwLwYDVQQDEyg1QjYzMzgyNDdBOTI4QUE1NDQ0MkU2QURCNTdGMzVFMzI1
NUY1M0U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQydFSuDNwhI
DNo+fToq73+TtxXlcsgcvFJcWVLLvN/8AR2HqqlGwK7qMo7h+N1qMRaX/7/+WqBQ
7pAdEFM5w/2/6OP7vYviEJqWn40U3R0xKt5jgab9IRtIoxGm+nnQox6TzxxK0Zye
v8PinzGq0QBH9xzZX2pIFWV2ERSfhEt6rlGO7mELhzH16xcdgbJtgvKGyzwYLaJl
BZIjYsc/ttoZcR4GStPKSSTboXjmDEne0/IpuCqI2wjB1reXJ1ndZBq8xoX8jyE0
MokLFCM16+gou9z2YYdr25wFCHr1ax/Z8qzs0pcb6MzugbBZWi/Vnndi7wgbC7aP
saDReC84gwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFFtjOCR6koqlRELmrbV/NeMl
X1PkMB8GA1UdIwQYMBaAFP0fzXySKbC+dA9b2rX05rHWBqTiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkOTAwMTc0YjkyNWM0LzAv
RkQxRkNEN0M5MjI5QjBCRTc0MEY1QkRBQjVGNEU2QjFENjA2QTRFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzlkMTRmMzE2LTkyMmQtNDk3ZC1iZTU0LWZhODBmY2ZiOWUxNi9mY2Iy
MGY1OTY2ZmY2MmQ1YTIwYjdkYzY2MzczOGEwNzFmNzU3ZDAzYmJhZGNmZDMxYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZDkw
MDE3NGI5MjVjNC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzczMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwcAMA0G
CSqGSIb3DQEBCwUAA4IBAQAKlge0VemDkKyVXBk/To65Zr8g9syQnvpRk461t7U6
Yi8Bj0tcDzHm2f+5bZYO21iRXqi+ljRMnyd2iXTJPhk2nrhIXiBPBP0N4lYKh9vl
SrXKQIVz0GXlWlPDrHsdBaJVCwR5II05cwbQDTIJO4wpCwHoWngVA2J8VVy5UVwT
wMNIlar87psrKq2cZABQ08Ul0HakWLBDzAX7DXff8rOxMin95Yfa1cEZFt4Ldu+r
aUBiwK+vWWej4HIJuHnW3qe7jrN2p7WTyurto90HnLLAY7XHvBp5WJGh444KL+wb
W0fYCpAwfU0VHKKoTHAd+V+dlef0ozwG3ZV6JknDWvYj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org