Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          I/8cTU4Upq7cVijlOO0sWeleEzVZtxZFdEprALNOoB4=
Subject key identifier:   20:03:61:90:86:9D:97:9D:7E:C5:0F:66:B1:8E:27:41:B1:FA:0D:93
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       446A07AA0EC641A9DEDD46F8977EC1C675445E95
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:18 +0000
ROA not before:           Fri 09 Feb 2024 22:30:18 +0000
ROA not after:            Fri 07 Feb 2025 22:35:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6a:07:aa:0e:c6:41:a9:de:dd:46:f8:97:7e:c1:c6:75:44:5e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:18 2024 GMT
            Not After : Feb  7 22:35:18 2025 GMT
        Subject: CN=20036190869D979D7EC50F66B18E2741B1FA0D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5b:7b:2b:5d:d2:28:95:0d:ea:d3:31:c4:e4:
                    4d:0f:6f:18:15:2a:26:1f:7c:a6:dd:25:f4:52:03:
                    a1:3f:fc:2d:bc:76:11:72:9c:29:53:64:0f:f1:cf:
                    85:0a:23:0e:10:86:b5:74:de:a8:6f:55:ea:66:4c:
                    43:ff:ff:1a:f9:05:97:23:56:d3:9e:6a:4b:8e:32:
                    3a:c9:5e:c1:91:14:90:4d:ed:09:53:f7:37:26:9b:
                    17:f6:5a:4a:4a:a4:71:13:10:9c:69:8b:75:3a:7d:
                    ea:19:f3:90:53:46:c7:46:13:cd:c0:1e:2b:b5:ac:
                    1f:0a:7b:01:39:e2:3d:d2:d2:0e:87:a7:c8:c0:8c:
                    87:97:c6:24:48:7e:aa:5c:97:53:ed:74:2f:9d:d0:
                    3f:b7:f9:99:a6:d9:dd:3f:10:b5:4d:5f:60:85:57:
                    94:9a:22:0f:99:a1:15:0f:56:4d:c9:f6:3a:40:68:
                    d8:b6:a9:d4:a1:57:26:2c:28:bc:e6:37:58:1d:4f:
                    20:01:d3:4f:81:79:44:75:e9:af:5f:6f:41:c3:c9:
                    fb:41:89:06:55:72:fc:39:29:d3:26:3b:ad:0e:08:
                    d3:8c:99:fd:3a:b8:f4:5e:f2:9f:66:db:74:25:2f:
                    b9:70:0d:2e:2c:2f:40:39:ca:e6:ce:e8:dd:d6:1e:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:03:61:90:86:9D:97:9D:7E:C5:0F:66:B1:8E:27:41:B1:FA:0D:93
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:92:7d:a0:99:4b:1c:1f:29:22:a4:4b:7b:a9:4d:d7:7e:
         3a:6d:fc:4d:5a:48:71:f2:17:94:86:f8:fe:7e:9a:d2:5c:e0:
         f4:16:d9:53:88:77:bd:23:6b:52:53:3f:04:a3:6c:ab:bc:0d:
         43:6c:ab:60:51:86:12:c5:77:2a:32:4a:e1:99:5a:59:b2:a1:
         a1:50:81:3e:c1:38:d0:59:c0:c1:86:5a:59:19:4f:34:a9:84:
         38:25:59:00:89:dd:5a:e8:2d:4a:60:d0:6e:3c:eb:38:2f:a5:
         3b:25:8b:a4:73:66:6d:6a:c5:b1:da:2a:1c:c1:63:43:69:77:
         1b:17:54:7e:30:5d:25:cd:bd:73:c6:54:50:7b:78:21:90:c2:
         56:d9:c2:b5:17:0c:d3:56:a1:54:cb:06:2b:f5:2d:8a:06:21:
         85:9b:8b:04:06:96:bd:d8:e9:9e:ea:f6:80:cd:6d:36:b0:d5:
         da:c0:ef:12:6c:87:78:33:48:02:b6:cb:6b:dc:97:08:9a:bd:
         1c:7f:29:fb:f5:77:19:f0:74:b4:e0:9e:27:92:6f:e2:8b:5b:
         be:7f:1b:6a:d2:bc:54:11:c9:b8:dd:58:ad:b7:52:bd:fe:6c:
         ff:11:f2:3a:16:2a:ec:9d:a4:8f:b5:44:d9:6b:82:8a:6b:7b:
         0b:be:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org