Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          EhlDY9/fo6AMatkQVAsgLj0sjKJjrSWW7qLRgSu3MSE=
Subject key identifier:   7A:11:14:5D:FE:1E:D1:9A:80:DD:B3:30:A2:41:A6:41:FB:F9:A4:44
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       62F0DB8E2EA80EB46E24D6D402056DC4FE2B9896
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:34 +0000
ROA not before:           Fri 18 Apr 2025 22:17:34 +0000
ROA not after:            Fri 17 Apr 2026 22:22:34 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:db:8e:2e:a8:0e:b4:6e:24:d6:d4:02:05:6d:c4:fe:2b:98:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:34 2025 GMT
            Not After : Apr 17 22:22:34 2026 GMT
        Subject: CN=7A11145DFE1ED19A80DDB330A241A641FBF9A444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:d0:28:84:35:fc:93:9c:38:e1:18:cd:e8:
                    c2:b6:e2:cd:44:f1:f7:eb:30:57:97:eb:7d:fd:e6:
                    62:1b:b9:e5:a8:37:6f:5f:5d:1e:54:67:83:4a:c6:
                    71:66:2c:fe:2b:45:3a:9e:3b:1a:d8:92:3b:d4:38:
                    0c:13:5c:40:79:13:be:6c:95:4f:15:b3:a5:3e:6e:
                    c1:80:86:0c:50:13:8b:90:90:19:01:7a:1b:98:72:
                    78:e6:17:10:3c:fc:f9:60:b5:b3:33:1b:53:23:b4:
                    63:08:9e:33:cb:66:52:0c:49:4d:6b:4f:0a:6c:87:
                    4b:36:90:b7:b3:7c:75:2e:f3:05:64:90:97:b7:ab:
                    a7:e8:71:ea:8b:90:39:c5:be:87:83:96:3d:a5:57:
                    de:54:e3:6d:10:6c:9b:6e:7c:ba:c4:15:90:ea:2e:
                    fc:ae:1d:36:ed:4a:f0:ee:eb:fc:17:c0:9c:59:a6:
                    ab:0d:8b:7f:f8:b3:50:6c:b9:8e:92:9c:09:46:c3:
                    1f:3f:c5:fd:0e:de:0d:e2:db:34:0a:ef:8a:c1:bb:
                    70:c0:d5:be:0e:e5:92:ec:1a:c1:0a:bb:00:0c:df:
                    75:36:59:14:f1:d1:8d:34:81:75:bd:18:20:73:0c:
                    1d:94:ce:52:62:57:5f:66:5b:9d:7e:03:da:42:d1:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:14:5D:FE:1E:D1:9A:80:DD:B3:30:A2:41:A6:41:FB:F9:A4:44
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:8b:49:6c:a3:c3:2f:a2:71:f7:d7:3f:e5:98:a5:b8:73:
         4e:1e:8a:87:19:a1:27:65:27:49:22:1f:e9:db:d6:66:8a:a4:
         a0:22:2c:0d:37:d4:27:42:68:b6:90:84:5d:53:77:87:c9:e5:
         3b:37:88:b2:4f:07:ef:17:75:fc:f4:a8:db:d3:15:5d:1d:52:
         43:f2:85:70:c4:88:4f:c7:b2:ba:04:7e:51:79:3e:20:23:a4:
         06:82:f9:79:96:7b:a5:f8:ef:44:04:c3:9e:97:78:9a:ed:68:
         b5:50:7a:b3:a3:25:bd:96:57:38:66:f4:45:51:91:0f:49:70:
         ba:2c:05:4b:b1:e0:92:9a:2c:b0:39:67:5f:73:e9:74:ee:66:
         6c:24:fd:19:f9:db:c9:e4:91:f9:bf:20:f0:35:d9:0f:6d:b6:
         05:68:24:19:39:1c:a2:50:a6:34:65:27:3b:d4:46:83:36:51:
         f7:65:7f:36:17:4d:52:fe:c2:34:e1:bd:3a:cb:fd:53:89:f8:
         7d:fe:78:3c:fd:3c:65:81:12:7c:62:63:70:2d:a1:e9:88:e9:
         d6:64:19:2c:3d:72:b6:4a:f3:66:b2:3a:7e:4d:f2:35:4c:49:
         6d:5c:56:0f:55:39:18:73:fd:db:d5:23:a0:cf:0e:91:de:ae:
         9b:e9:bb:fc
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYvDbji6oDrRuJNbUAgVtxP4rmJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjBjMmVmZmFiMDIyYjcyMDJjMTI0YWMw
MzY0YTNmMmY5MmYxZTdmYWEwHhcNMjUwNDE4MjIxNzM0WhcNMjYwNDE3MjIyMjM0
WjAzMTEwLwYDVQQDEyg3QTExMTQ1REZFMUVEMTlBODBEREIzMzBBMjQxQTY0MUZC
RjlBNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEDQKIQ1/JOc
OOEYzejCtuLNRPH36zBXl+t9/eZiG7nlqDdvX10eVGeDSsZxZiz+K0U6njsa2JI7
1DgME1xAeRO+bJVPFbOlPm7BgIYMUBOLkJAZAXobmHJ45hcQPPz5YLWzMxtTI7Rj
CJ4zy2ZSDElNa08KbIdLNpC3s3x1LvMFZJCXt6un6HHqi5A5xb6Hg5Y9pVfeVONt
EGybbny6xBWQ6i78rh027Urw7uv8F8CcWaarDYt/+LNQbLmOkpwJRsMfP8X9Dt4N
4ts0Cu+KwbtwwNW+DuWS7BrBCrsADN91NlkU8dGNNIF1vRggcwwdlM5SYldfZlud
fgPaQtElkwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFHoRFF3+HtGagN2zMKJBpkH7
+aREMB8GA1UdIwQYMBaAFLegdNRHQhedQQPy+SuN1745V1zVMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRjYWI4MTdiNmJlMTQ5YzQ4M2QxOTQzMGUyNTQ1MzEwLzAv
QjdBMDc0RDQ0NzQyMTc5RDQxMDNGMkY5MkI4REQ3QkUzOTU3NUNENS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzljNjRkNGFkLTg0MWItNDBhOS05NTdjLTNjZDFmZTZiYjE1ZC9mY2Iy
MGY1OTY2MGMyZWZmYWIwMjJiNzIwMmMxMjRhYzAzNjRhM2YyZjkyZjFlN2ZhYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80Y2FiODE3YjZiZTE0OWM0ODNkMTk0
MzBlMjU0NTMxMC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzEzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwEAMA0G
CSqGSIb3DQEBCwUAA4IBAQCWfYtJbKPDL6Jx99c/5ZiluHNOHoqHGaEnZSdJIh/p
29ZmiqSgIiwNN9QnQmi2kIRdU3eHyeU7N4iyTwfvF3X89Kjb0xVdHVJD8oVwxIhP
x7K6BH5ReT4gI6QGgvl5lnul+O9EBMOel3ia7Wi1UHqzoyW9llc4ZvRFUZEPSXC6
LAVLseCSmiywOWdfc+l07mZsJP0Z+dvJ5JH5vyDwNdkPbbYFaCQZORyiUKY0ZSc7
1EaDNlH3ZX82F01S/sI04b06y/1Tifh9/ng8/TxlgRJ8YmNwLaHpiOnWZBksPXK2
SvNmsjp+TfI1TEltXFYPVTkYc/3b1SOgzw6R3q6b6bv8
-----END CERTIFICATE-----