Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          BnIWA+PWmlCHNdcTelzqxROtYXbUtGm9SrrkeLcVWQI=
Subject key identifier:   8A:D7:F9:96:F2:2C:1B:3D:41:1D:62:39:76:32:9B:EA:A0:F1:5C:83
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       1931CA86D9576FDA315D67CA13A0D5D487487013
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:31:ca:86:d9:57:6f:da:31:5d:67:ca:13:a0:d5:d4:87:48:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=8AD7F996F22C1B3D411D623976329BEAA0F15C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:34:de:58:40:88:1d:6e:a3:5a:48:e6:dd:
                    0d:40:4d:34:0f:0d:dd:d5:05:d5:5c:92:81:4b:44:
                    24:30:40:3a:f6:31:7e:2a:5b:96:83:eb:f7:d8:47:
                    a5:a5:64:54:87:4f:eb:04:60:59:20:a7:34:1e:b3:
                    5a:4f:92:ce:66:c4:84:c9:be:13:04:df:07:c3:8e:
                    53:5c:73:ae:15:cb:65:63:62:7c:53:2d:b9:42:35:
                    11:cf:aa:4b:de:94:b4:b8:e7:b6:4b:3d:36:d9:92:
                    d4:8d:91:42:9c:4c:77:d5:a5:d5:59:4f:0b:fe:df:
                    81:fb:27:a1:79:38:11:25:84:66:ba:ea:cc:05:de:
                    87:82:2c:ca:20:9f:83:2c:d3:24:08:fd:13:86:2f:
                    d1:1c:8c:ec:17:64:95:f2:4a:c3:c5:cf:86:06:7e:
                    9b:29:7d:76:f3:02:95:ca:6d:74:61:82:52:89:58:
                    62:ab:c7:55:1b:0b:f0:f3:74:5b:07:33:ef:85:e3:
                    ed:9e:f6:37:e3:03:94:d9:7c:ad:76:7d:76:9e:5b:
                    37:23:e4:a0:62:d0:a1:d5:bf:86:a6:ac:b1:dd:a9:
                    98:bb:12:89:a7:25:30:4d:48:08:29:06:f1:74:54:
                    cb:80:e5:3f:4e:4b:47:45:9f:b6:27:1b:db:ec:a7:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:F9:96:F2:2C:1B:3D:41:1D:62:39:76:32:9B:EA:A0:F1:5C:83
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:df:35:1f:48:d1:bb:2f:ae:bf:73:7c:46:c5:10:95:67:
         ef:34:7f:a7:ab:e6:f9:6f:e9:fd:25:5c:55:5e:88:9e:19:da:
         60:60:29:41:a6:db:af:16:1a:00:83:61:89:b8:6a:7d:5a:a5:
         07:6b:b0:a4:2a:08:4f:f6:2b:b1:01:b2:71:14:bd:8b:aa:a8:
         98:92:70:0d:6a:c2:b0:4a:79:e0:7a:b2:9c:24:ad:f3:f3:3f:
         0d:ac:11:84:57:37:db:f7:2b:5e:ab:a2:25:81:2a:f7:62:dc:
         c7:f1:4a:9f:e9:fe:ae:23:52:e5:4f:91:5f:42:77:40:1a:be:
         b6:e7:fc:34:26:57:39:da:32:24:51:21:44:04:f1:00:6e:65:
         24:bd:9f:4c:e7:12:e0:11:e8:e7:90:83:b7:67:02:7a:d6:1e:
         29:00:27:20:ff:6d:91:b6:47:16:48:42:44:83:4d:60:f7:81:
         52:e7:5d:52:c1:ba:d6:de:9d:2e:9b:ba:26:db:ba:28:88:b7:
         a7:c8:fe:39:cc:d4:bb:a0:e9:bf:78:ac:7c:e1:c2:68:fb:75:
         8d:b6:81:bf:b4:67:2d:8d:27:44:cf:64:40:0d:70:ac:49:f7:
         f8:28:e4:bc:bf:5f:8a:e7:0d:5c:39:e9:52:f9:3a:05:e4:a3:
         ff:ce:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org