Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          hcxo6BC6zrxtb7X1ymY/+h93fsv+hcZbTCH3X8OkNqg=
Subject key identifier:   3F:A9:4A:0D:F8:F0:E5:23:FF:55:00:30:E8:A9:86:83:7D:CB:C9:57
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       0BB9ABE948EA5FE9CA32C3ECFFE07E0B14ABDFEE
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:34:59 +0000
ROA not before:           Fri 09 Feb 2024 22:29:59 +0000
ROA not after:            Fri 07 Feb 2025 22:34:59 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b9:ab:e9:48:ea:5f:e9:ca:32:c3:ec:ff:e0:7e:0b:14:ab:df:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:29:59 2024 GMT
            Not After : Feb  7 22:34:59 2025 GMT
        Subject: CN=3FA94A0DF8F0E523FF550030E8A986837DCBC957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:62:d1:04:87:c1:bb:73:1c:7c:dd:6d:29:
                    cb:2c:9f:63:cd:b1:87:eb:71:e0:69:26:5e:a8:99:
                    30:25:5a:73:d5:ed:fd:bb:3b:e8:96:40:07:ae:ca:
                    a3:fa:89:71:38:99:a7:b6:be:6a:9c:b2:d4:b0:f4:
                    fc:a2:79:8e:7a:fa:ec:e0:8b:1f:29:2a:1f:64:b4:
                    00:70:c3:b9:9c:e7:78:74:36:1a:e6:17:4b:88:b7:
                    c5:c4:52:c9:63:52:9f:32:1c:07:9a:68:50:5a:16:
                    87:15:5b:f8:3a:63:03:c1:c1:be:b0:85:2f:9d:c8:
                    b1:9e:96:ec:43:fe:01:c3:0e:fb:b1:52:8d:2b:9c:
                    c4:56:0f:95:92:d4:28:58:6c:df:98:e1:41:ff:5d:
                    58:af:97:0a:dd:78:16:04:f7:14:87:1a:8d:ca:ce:
                    04:8f:89:73:ee:a2:af:28:bb:57:b4:45:19:6f:b7:
                    2a:9e:9a:c2:22:ca:77:fb:46:73:98:6c:f7:71:9c:
                    8e:2a:e8:bd:c2:6c:9d:bf:9a:8e:51:7a:e5:ef:aa:
                    c1:1a:3f:b6:b2:8b:43:48:2e:45:ac:28:27:96:d9:
                    1f:b6:96:82:76:b3:80:27:86:4c:96:3d:1f:41:67:
                    a7:7a:64:d6:92:c0:9a:7e:5f:bd:e0:a2:38:ad:d7:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A9:4A:0D:F8:F0:E5:23:FF:55:00:30:E8:A9:86:83:7D:CB:C9:57
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:38:c5:1e:08:36:9c:e0:c8:4b:99:fa:90:fb:1a:f6:e6:
         af:e8:5a:d6:e0:1a:02:85:10:d9:1d:4e:df:b9:8d:62:d4:a7:
         1a:d4:e4:ae:eb:b8:d3:6a:f1:d0:81:e1:5b:11:a0:7a:84:83:
         b9:3d:60:a8:e0:3c:ae:e7:62:fb:82:9f:6e:bc:a8:93:ff:20:
         77:cc:05:0d:d6:e2:55:5b:d3:3c:3e:0a:20:f8:4b:4b:c6:e4:
         d9:2a:a2:5a:d8:d9:c1:bb:4f:b9:1f:4b:62:1c:0a:fa:52:28:
         98:81:2c:e3:4d:47:60:23:af:05:33:da:a0:16:fc:00:ff:f6:
         60:b8:3b:0e:09:e5:97:b7:82:2f:42:0f:ea:de:0e:cd:ab:de:
         e1:30:b3:a4:18:29:0d:6f:62:af:ef:a7:bd:af:f6:9e:56:5d:
         35:d9:57:2e:ab:77:1a:9e:b1:da:c8:fd:b4:aa:d5:cc:fc:62:
         fe:23:55:a0:a9:b6:a0:7e:fa:74:97:3c:30:7e:5a:67:79:da:
         03:40:2b:50:5b:ff:69:84:6b:77:79:de:6c:05:35:42:06:86:
         e0:c1:b7:95:d0:6c:bf:9d:8d:3c:32:2b:80:ad:8e:e1:c6:2d:
         83:e8:38:d3:89:d1:80:12:73:ad:8c:1a:db:ca:71:37:91:93:
         20:05:e9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org