Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          PArXF6k9Oa8XKDcFhB/mxXSwSj75KJOFLamYUsUOi4U=
Subject key identifier:   F7:64:47:FA:DC:03:C7:28:07:07:0E:C9:D7:CC:E8:F1:2A:82:AF:A1
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       6E00564E5D741A66DC8604DCD8C9E94E540AA6EA
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:00:56:4e:5d:74:1a:66:dc:86:04:dc:d8:c9:e9:4e:54:0a:a6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=F76447FADC03C72807070EC9D7CCE8F12A82AFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:98:4c:51:ce:1a:63:48:9c:0b:c0:30:7a:
                    32:94:f6:7e:38:74:0f:e9:31:98:62:b0:2a:7e:11:
                    27:de:6f:05:15:cb:37:c0:a3:7a:3b:17:24:88:22:
                    45:65:8b:97:a2:79:18:2b:bf:aa:67:7b:d5:d3:94:
                    ab:0c:91:35:04:31:3f:c5:fa:d9:f8:92:30:20:2d:
                    02:5e:1e:88:d7:61:7f:ad:38:8a:9d:b7:c3:ef:1f:
                    f2:d6:1a:95:c0:17:6b:22:34:85:2b:28:7e:a0:5c:
                    17:8e:14:87:49:7f:bc:48:04:05:dd:f7:22:ee:a1:
                    9f:0d:b3:8f:41:b5:eb:c3:27:f5:b5:9d:fb:d9:b5:
                    85:2b:54:b7:32:4a:d3:5c:9c:9c:b1:16:eb:d4:f7:
                    02:a5:48:d6:de:48:23:3e:73:88:4c:5b:a7:1e:b0:
                    f6:7e:2e:08:6f:f0:5a:a4:2a:50:d2:3a:5f:8d:94:
                    a0:de:70:95:c7:09:dc:17:96:08:6d:44:46:4a:94:
                    05:3b:ac:5f:36:51:ad:be:ab:88:4c:02:06:fa:68:
                    84:bb:ca:93:c7:c2:05:e8:36:9f:5d:1f:c3:f4:bd:
                    af:9c:af:b5:26:3c:dc:8d:53:dd:2f:5c:d7:04:85:
                    6e:29:8f:65:25:68:cc:f6:e6:24:48:81:67:fd:b1:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:47:FA:DC:03:C7:28:07:07:0E:C9:D7:CC:E8:F1:2A:82:AF:A1
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:e1:d6:d0:17:98:4f:22:b5:4d:62:5b:8f:58:9e:83:6f:
         4f:55:c7:cc:37:29:4f:07:84:4d:fa:f1:2b:a8:07:36:fd:d4:
         9c:9d:1e:c7:15:3c:61:14:58:b6:92:aa:00:d6:97:1e:6b:74:
         d5:71:9a:2e:b5:32:71:49:0d:be:9d:5a:b8:3b:9d:fe:25:29:
         02:37:52:41:f2:14:ee:ae:99:b4:2d:81:ea:23:d2:5c:bf:5a:
         f3:1e:38:02:a4:46:c5:41:d3:7c:95:0b:77:8d:8e:82:4b:b7:
         13:c2:32:ec:49:c7:95:7e:34:65:d3:7e:80:e1:1b:ed:c4:85:
         2b:fb:78:e5:29:30:4d:f0:be:03:e3:26:09:6b:d3:11:28:05:
         21:cc:e3:e8:41:91:b7:4d:67:35:de:fb:06:46:05:a6:db:d2:
         14:b4:3e:8b:25:6d:25:bd:e1:52:bb:88:4e:8f:0f:80:43:9a:
         70:69:7a:33:04:f2:66:7d:f0:6d:f3:69:70:06:58:c7:83:a1:
         36:26:5f:e9:09:5f:92:86:34:61:c7:b3:34:0b:1e:4e:cf:00:
         24:c6:f3:b6:fe:8f:71:04:1b:00:48:1a:8c:b7:73:a6:eb:97:
         62:d0:cc:d1:7c:1b:44:37:1f:c8:0d:23:2c:b3:c0:37:e0:75:
         d1:1c:93:e3
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbgBWTl10GmbchgTc2MnpTlQKpuowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmZmNjJkNWEyMGI3ZGM2NjM3MzhhMDcx
Zjc1N2QwM2JiYWRjZmQzMWEwHhcNMjQwMjA5MjIzMDE5WhcNMjUwMjA3MjIzNTE5
WjAzMTEwLwYDVQQDEyhGNzY0NDdGQURDMDNDNzI4MDcwNzBFQzlEN0NDRThGMTJB
ODJBRkExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJOYTFHOGmNI
nAvAMHoylPZ+OHQP6TGYYrAqfhEn3m8FFcs3wKN6OxckiCJFZYuXonkYK7+qZ3vV
05SrDJE1BDE/xfrZ+JIwIC0CXh6I12F/rTiKnbfD7x/y1hqVwBdrIjSFKyh+oFwX
jhSHSX+8SAQF3fci7qGfDbOPQbXrwyf1tZ372bWFK1S3MkrTXJycsRbr1PcCpUjW
3kgjPnOITFunHrD2fi4Ib/BapCpQ0jpfjZSg3nCVxwncF5YIbURGSpQFO6xfNlGt
vquITAIG+miEu8qTx8IF6DafXR/D9L2vnK+1JjzcjVPdL1zXBIVuKY9lJWjM9uYk
SIFn/bFgBwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFPdkR/rcA8coBwcOydfM6PEq
gq+hMB8GA1UdIwQYMBaAFP0fzXySKbC+dA9b2rX05rHWBqTiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkOTAwMTc0YjkyNWM0LzAv
RkQxRkNEN0M5MjI5QjBCRTc0MEY1QkRBQjVGNEU2QjFENjA2QTRFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzlkMTRmMzE2LTkyMmQtNDk3ZC1iZTU0LWZhODBmY2ZiOWUxNi9mY2Iy
MGY1OTY2ZmY2MmQ1YTIwYjdkYzY2MzczOGEwNzFmNzU3ZDAzYmJhZGNmZDMxYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZDkw
MDE3NGI5MjVjNC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzgzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwgAMA0G
CSqGSIb3DQEBCwUAA4IBAQAFLOHW0BeYTyK1TWJbj1ieg29PVcfMNylPB4RN+vEr
qAc2/dScnR7HFTxhFFi2kqoA1pcea3TVcZoutTJxSQ2+nVq4O53+JSkCN1JB8hTu
rpm0LYHqI9Jcv1rzHjgCpEbFQdN8lQt3jY6CS7cTwjLsSceVfjRl036A4RvtxIUr
+3jlKTBN8L4D4yYJa9MRKAUhzOPoQZG3TWc13vsGRgWm29IUtD6LJW0lveFSu4hO
jw+AQ5pwaXozBPJmffBt82lwBljHg6E2Jl/pCV+ShjRhx7M0Cx5OzwAkxvO2/o9x
BBsASBqMt3Om65di0MzRfBtENx/IDSMss8A34HXRHJPj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org