Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          CJFHS76cfqQuOQG13bH32vXtMZNLquGuzy3irRB1YaQ=
Subject key identifier:   0E:B3:01:15:7B:E8:2B:59:1A:F5:AF:E4:AC:C7:E5:49:82:68:E5:DF
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       7427D3CFA289F27ABAA1503EA3B364AF2FCD9206
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:41 +0000
ROA not before:           Fri 18 Apr 2025 22:17:41 +0000
ROA not after:            Fri 17 Apr 2026 22:22:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:d3:cf:a2:89:f2:7a:ba:a1:50:3e:a3:b3:64:af:2f:cd:92:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:41 2025 GMT
            Not After : Apr 17 22:22:41 2026 GMT
        Subject: CN=0EB301157BE82B591AF5AFE4ACC7E5498268E5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:45:e5:86:56:0e:bd:fd:60:18:57:05:3d:
                    cc:06:dc:01:f0:5b:46:50:50:18:31:0e:54:d4:e6:
                    c8:77:12:86:d6:75:a1:8e:a2:27:53:2d:2e:db:4d:
                    00:3a:ef:49:7d:06:ed:c6:08:70:44:6a:c4:c0:52:
                    d4:a3:88:80:ac:0d:ca:7e:21:e5:d4:82:aa:db:af:
                    06:a0:fe:7c:b3:62:35:58:d1:2b:ea:1a:48:64:61:
                    8c:13:26:6d:1b:08:e5:03:07:91:66:50:43:1b:ac:
                    eb:b7:b5:6a:c9:ee:4f:e8:6c:33:53:88:0b:fb:c6:
                    43:e2:ff:68:7a:88:2e:1f:3a:82:40:91:1e:82:5b:
                    bf:53:3a:96:4a:af:07:2c:34:1e:71:49:cf:07:3c:
                    19:d1:7e:60:4f:42:3b:34:c8:5e:4a:73:2b:ef:53:
                    93:04:8d:35:47:1b:0a:70:05:ac:63:08:7f:8e:a9:
                    03:40:cc:ac:b5:70:bf:78:ab:ac:e9:13:8a:3a:95:
                    ea:c2:09:39:32:2d:0e:30:c3:3a:54:09:73:cc:96:
                    73:53:69:48:28:5e:fa:71:cc:dd:f9:99:20:46:71:
                    0b:6d:09:f0:2a:4b:e2:64:e1:4c:6b:33:93:f0:80:
                    58:aa:88:88:5a:39:eb:de:9d:27:44:48:dd:08:a5:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:01:15:7B:E8:2B:59:1A:F5:AF:E4:AC:C7:E5:49:82:68:E5:DF
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:e6:cb:b3:2a:38:e6:f9:ef:30:66:6f:f9:45:0c:c1:90:
         3e:c1:38:be:7a:59:c6:a0:17:b6:b9:16:ec:e9:8d:0b:f3:7a:
         ac:dc:e7:9d:ba:ce:6d:c9:b0:c5:fc:52:e2:a9:0f:3e:e5:5d:
         6e:f7:0d:5a:5a:1e:43:28:2f:c7:36:42:a7:d5:64:dd:db:7c:
         ea:6c:98:43:1f:85:53:6f:d7:19:47:01:12:d5:68:fa:d2:f6:
         3e:bd:f1:e4:1e:68:cf:c2:98:14:13:9a:bd:b8:df:f8:b9:b9:
         7d:e7:0c:c6:e0:7b:64:ed:90:16:14:34:85:fd:96:d7:68:5b:
         24:45:38:e3:20:c3:95:cf:bd:14:31:c5:ec:98:ef:da:23:68:
         7e:25:0d:08:8a:e3:84:ff:fd:7f:25:26:16:c7:9b:61:4f:fd:
         ea:e0:0a:2c:7e:a4:70:74:52:ef:65:c1:41:e4:7c:b7:12:c7:
         01:47:99:67:39:1a:8a:34:5b:4b:5a:ef:8a:0e:52:ea:d6:79:
         fb:9d:d8:18:f1:c8:3c:0f:88:53:65:ba:fe:7d:b3:80:98:a6:
         11:ea:67:a4:fa:3b:f6:5e:fe:b0:01:5f:9f:0e:fd:cb:8c:dd:
         eb:2e:cc:65:11:d0:c8:11:0c:da:3c:bd:36:81:13:2f:dd:88:
         bf:7a:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:39:01 2025 by rpki-client