Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          5B1/TAVtwyu8ZsXJXL0nliNX7aaRwkA1LefMusMSFmg=
Subject key identifier:   F4:31:A9:07:DC:18:E4:D6:4E:2C:F8:AF:2F:7C:5F:8B:52:31:85:F4
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       5A982B5609FD79E38E92C42897AEE1E7E0A350D3
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:98:2b:56:09:fd:79:e3:8e:92:c4:28:97:ae:e1:e7:e0:a3:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=F431A907DC18E4D64E2CF8AF2F7C5F8B523185F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:1e:3e:85:12:76:0d:49:c2:40:9e:a5:b2:
                    2a:7e:a2:fb:a7:fc:f7:54:6b:67:34:06:39:0a:45:
                    13:d6:e2:fc:95:70:9f:9a:51:15:4c:d2:ec:31:98:
                    01:cf:34:6d:b9:90:eb:17:bd:ac:7b:8e:e4:68:ce:
                    81:3d:be:b1:65:fc:f3:ba:88:47:b3:ed:72:73:e2:
                    46:12:ea:c7:52:86:f5:1d:05:24:4d:64:13:df:e7:
                    95:e4:5f:c6:5e:e6:a9:b8:67:07:1d:7d:52:e1:b8:
                    f4:d3:05:6a:07:ff:a5:fc:0a:46:0b:80:f1:db:81:
                    0a:3c:3a:7c:98:09:23:d0:e8:a5:fc:95:b0:e6:34:
                    68:70:f2:44:13:08:3e:5a:3f:12:87:b2:8b:eb:af:
                    5d:53:ad:c8:3a:73:3a:ca:66:bb:bd:5f:ff:94:9d:
                    38:99:d8:3a:9c:94:2e:26:54:d2:8c:cf:fb:58:c5:
                    f7:91:62:70:48:26:7d:15:65:94:e0:0f:b9:7e:ed:
                    4e:6d:7b:a1:b0:e0:d9:48:06:0d:9c:49:6c:8b:24:
                    5c:25:97:45:39:ce:ef:55:59:41:23:8b:e4:11:ff:
                    5a:c3:c6:0f:98:27:d5:c9:74:5c:03:21:32:1c:d4:
                    4b:63:3e:ec:1d:95:2d:87:d3:c3:69:c5:7f:a2:68:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:31:A9:07:DC:18:E4:D6:4E:2C:F8:AF:2F:7C:5F:8B:52:31:85:F4
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:f3:18:ae:f0:ed:60:b6:35:70:56:9c:80:ab:f9:f8:af:
         12:e6:52:b4:88:d8:5b:e7:30:54:e8:d9:2f:80:36:48:6d:69:
         bd:fc:ef:99:e0:72:99:e4:1a:f3:12:53:50:86:b3:64:f1:35:
         70:a1:6e:e6:30:57:0c:7f:2a:83:55:55:fd:3e:68:80:9b:b0:
         0b:a2:ad:65:fc:b4:a1:66:6d:a9:eb:e8:05:fc:95:7f:81:91:
         4a:51:c8:5d:ae:ef:e6:45:90:71:70:97:31:86:f1:57:12:bc:
         f9:bd:86:5d:89:37:69:8e:cc:b6:29:10:f1:ca:19:ab:05:72:
         82:68:55:7b:75:d4:fc:56:da:fa:80:3e:02:be:65:70:88:2e:
         2a:5e:87:cf:df:85:07:ff:09:fa:b3:22:54:7e:50:51:9f:31:
         d5:aa:0b:2a:7c:52:a2:f0:36:47:11:5a:4b:5b:eb:52:92:62:
         cb:c6:3c:92:5d:0c:5c:3f:cb:63:31:32:18:7d:e8:ab:6b:ea:
         be:7a:27:22:b5:60:a7:80:a8:a3:2e:92:d5:3b:e3:74:5e:0e:
         b9:d5:9c:ed:59:30:a4:6e:76:6c:4c:c7:3c:39:21:5c:ef:aa:
         40:73:4d:64:44:33:d3:24:82:13:b6:87:5b:67:c8:3d:ea:8a:
         88:e1:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org