Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa
File:                     323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa (raw, json)
Hash identifier:          lkwAobIBChBhcXSDV/THwuPTp8AyJ/yJf74c3MPHPo8=
Subject key identifier:   38:79:B2:C3:49:6C:00:27:71:C3:B1:65:07:BC:0A:2F:36:FB:90:2F
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       7C81CBBFCCF598771BA22CB9F30F44C348311852
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa
Signing time:             Tue 25 Jul 2023 21:33:50 +0000
ROA not before:           Tue 25 Jul 2023 21:28:50 +0000
ROA not after:            Tue 23 Jul 2024 21:33:50 +0000
asID:                     57782
IP address blocks:        2602:fb5b:ac::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:81:cb:bf:cc:f5:98:77:1b:a2:2c:b9:f3:0f:44:c3:48:31:18:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 21:28:50 2023 GMT
            Not After : Jul 23 21:33:50 2024 GMT
        Subject: CN=3879B2C3496C002771C3B16507BC0A2F36FB902F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:b2:11:c4:14:7d:5f:29:64:51:a2:99:74:
                    3c:dd:6a:bd:ab:04:75:d9:27:52:7a:b6:a6:82:e6:
                    2e:fb:cd:d7:57:2c:58:a5:d9:18:1f:bb:e4:39:e5:
                    26:65:d5:9e:fe:b1:47:e7:5c:f6:78:45:d2:03:ff:
                    04:56:a4:eb:dd:db:af:74:19:19:fb:6f:a4:69:e7:
                    c8:3d:f5:56:25:84:1b:e3:41:28:58:72:6a:4b:63:
                    1f:81:0f:5a:6e:0f:40:50:f3:4d:7b:c2:82:ad:00:
                    1f:25:b3:b0:95:5a:df:67:06:18:31:67:50:7f:b0:
                    aa:ac:da:aa:1c:5e:85:63:95:9a:20:af:31:5e:2a:
                    5a:de:ef:bf:0e:03:3a:61:5e:e0:9b:04:3a:67:41:
                    d1:63:e1:c5:fc:1e:2b:0d:01:39:93:c8:8f:95:9f:
                    cb:2b:d3:1c:70:e7:f3:b0:c5:2a:f2:ad:dc:b1:24:
                    cd:92:05:e0:c5:cd:98:1b:fa:b2:27:be:65:ac:1d:
                    dd:ad:dc:02:07:7b:76:e0:79:a5:a2:f1:43:05:58:
                    4f:af:70:81:f5:bb:ab:44:5b:c9:44:ba:43:1e:17:
                    61:63:15:66:37:ca:66:50:ef:fc:ea:92:b0:e0:3a:
                    3c:02:43:6c:1e:1e:91:aa:69:ba:64:c1:1c:b6:c1:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:B2:C3:49:6C:00:27:71:C3:B1:65:07:BC:0A:2F:36:FB:90:2F
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/323630323a666235623a61633a3a2f34382d3438203d3e203537373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:08:e3:97:05:b1:f8:21:0a:73:f1:95:eb:ac:73:22:27:
         9a:0a:05:d5:47:fd:e3:40:55:be:3e:98:8a:0c:7d:87:a1:9d:
         89:e4:77:d4:b0:9f:f6:83:f6:13:34:cd:07:ee:d1:b4:f2:a4:
         05:e6:0f:0d:ad:e9:a0:10:8a:99:71:8f:cb:ed:47:c1:5e:26:
         a4:44:ad:ed:08:0e:00:ec:e8:80:3e:7a:33:10:3f:d3:99:c0:
         b4:67:3e:f6:27:9c:50:ab:19:ac:b5:ba:ee:3d:5c:6a:7e:65:
         1c:ee:d1:d5:b1:b4:8c:da:c3:9c:1c:fa:f1:ac:1a:80:4d:04:
         6d:a6:f9:82:be:6b:3d:85:7a:e6:b1:45:6b:c8:f4:16:95:24:
         71:de:70:8a:6e:a9:99:b6:b9:1c:58:48:50:cc:ee:80:01:58:
         8d:df:91:18:1a:aa:ee:f0:c2:27:95:f3:4a:18:73:41:07:5a:
         03:74:08:b9:09:78:55:ce:a1:e5:38:20:cf:cf:12:05:4b:c0:
         bb:89:2c:9f:89:a7:c8:25:c4:b4:97:49:e3:a9:99:6a:a2:07:
         4c:31:a1:fb:78:82:2a:72:96:a3:3b:64:1d:d3:06:dd:40:24:
         93:83:ba:a6:6d:0d:4b:cf:3f:c8:97:57:0c:3e:2f:5d:76:cf:
         80:e2:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:59 2025 by rpki-client