Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          p6BXY4HpqLhcDfGnSTNla6TsAg1FhkK7oIEzvxRiIDo=
Subject key identifier:   3D:1D:0E:18:A0:A7:BD:1D:64:34:05:D6:B8:CD:80:38:95:BD:88:D2
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       35F4747EA5D12D6AE2455F418B26105C310CAF87
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f4:74:7e:a5:d1:2d:6a:e2:45:5f:41:8b:26:10:5c:31:0c:af:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=3D1D0E18A0A7BD1D643405D6B8CD803895BD88D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:4b:a1:93:70:ef:e3:91:3e:a8:01:89:d7:
                    a2:f6:46:41:82:69:b9:92:3d:f9:17:3b:69:0a:3c:
                    85:79:e6:b0:5a:b5:5f:e2:cd:50:67:b6:f4:64:3f:
                    79:ae:4e:e4:a6:bf:8c:7c:76:6a:27:64:a3:10:0a:
                    b3:a3:59:02:25:d9:86:53:3d:16:9d:1a:be:71:cd:
                    64:d0:bc:f5:9e:09:34:9b:b1:a2:0e:77:bf:10:56:
                    c7:8b:a9:ff:59:28:76:70:10:6d:92:00:a3:1a:bb:
                    eb:3a:bb:0c:0c:c5:e4:5e:4c:ed:20:b8:bc:dc:5d:
                    eb:06:c3:5e:94:e3:9f:82:9a:fb:dd:a7:82:7a:fb:
                    66:1e:53:b5:c5:76:f2:81:b2:90:c2:22:02:6a:c7:
                    66:6f:42:e2:29:14:97:37:43:0d:97:c1:24:2c:7a:
                    79:f6:10:99:be:11:97:80:eb:c5:be:1a:33:47:a7:
                    a7:d8:80:03:4a:e6:4a:58:69:ab:4e:6e:c3:f7:04:
                    97:97:f9:13:fc:56:1d:91:a1:ca:ad:42:e6:44:7e:
                    e5:52:44:55:ef:d5:03:42:7d:22:43:7b:20:58:1c:
                    1c:5a:c3:97:12:3d:a7:af:06:94:96:04:72:40:a5:
                    ca:e9:0c:22:fb:71:c2:81:d6:ab:28:89:ed:8d:13:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1D:0E:18:A0:A7:BD:1D:64:34:05:D6:B8:CD:80:38:95:BD:88:D2
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:c9:48:1d:1e:0a:e0:17:f3:be:2d:b0:1d:6f:a9:ef:6a:
         bb:13:f2:90:97:fe:f7:e3:ba:1f:47:26:bb:f0:92:3a:22:e2:
         ef:50:6b:7c:95:c0:15:1c:ad:43:90:00:89:ee:a8:5a:5b:27:
         95:7d:bb:7a:84:01:56:48:e4:a0:d1:1b:e7:95:6d:66:72:be:
         b1:13:a2:2d:08:4a:31:c1:46:49:e3:64:46:37:65:dc:8e:a0:
         6b:e7:32:0f:87:f6:0a:45:ac:c9:42:33:0a:9e:d5:b2:d6:41:
         a3:68:69:93:99:37:0a:43:a6:5b:d5:52:28:e1:54:57:98:f5:
         d8:55:26:f2:ea:53:e9:07:4f:d6:9c:8b:90:73:60:ae:54:b6:
         15:72:fa:ba:90:17:7c:20:11:88:e6:54:d1:72:c3:08:ce:54:
         45:b7:ce:29:71:b0:e8:83:6c:e0:ed:8e:68:7e:58:6f:5a:d4:
         d7:93:c3:ca:a8:95:b2:28:9a:f6:d1:d1:b6:62:25:fd:00:79:
         09:38:6f:4e:f2:58:8c:2f:cb:a3:cc:ef:a7:ea:b3:9a:6c:2a:
         68:87:21:ca:c6:1f:20:e6:70:4d:ff:53:56:20:14:8e:c2:a1:
         ae:15:8d:79:79:e1:8d:ef:0b:40:c3:36:23:23:a9:f6:59:b3:
         5f:e9:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org