Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          jXKFgY/XUHVZAyFS18At3im1BoWe1RlY7eKfNl+kd6U=
Subject key identifier:   04:06:4E:9B:1C:72:72:39:92:8F:C9:E4:69:28:AD:29:40:39:E1:C9
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       50ECF6F0394F50610F6543EF4D77164A015301C1
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:59 +0000
ROA not before:           Fri 18 Apr 2025 22:17:59 +0000
ROA not after:            Fri 17 Apr 2026 22:22:59 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ec:f6:f0:39:4f:50:61:0f:65:43:ef:4d:77:16:4a:01:53:01:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:59 2025 GMT
            Not After : Apr 17 22:22:59 2026 GMT
        Subject: CN=04064E9B1C727239928FC9E46928AD294039E1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:bf:ff:05:8c:f7:fa:5f:6a:4b:3b:af:4f:
                    78:5d:3f:50:a4:50:a1:01:1f:dc:18:96:88:59:69:
                    29:df:95:7d:2b:a1:c3:9b:86:43:c1:86:fb:c0:ce:
                    8e:83:ad:8d:1c:d0:bf:42:c7:f5:c3:bb:48:ce:f6:
                    3f:a4:21:53:e6:2e:be:a7:34:97:18:03:34:d4:35:
                    03:d7:a0:f7:47:b2:be:ea:ca:e9:ae:c3:0b:41:83:
                    27:3e:84:e2:08:5e:27:76:1b:f8:7f:6c:74:03:b4:
                    a2:de:29:c1:dc:1c:bc:66:3e:5a:8c:1c:96:f3:c1:
                    2d:3d:36:44:91:fd:a1:c3:a6:72:34:e3:8a:06:b1:
                    d7:a3:67:97:b1:c5:63:33:0a:39:0b:6d:b7:97:60:
                    4f:05:bc:51:1b:9a:a5:e8:b3:79:ad:d3:f0:d2:60:
                    35:5e:49:61:e5:a6:e5:b5:f7:f2:a1:cc:fb:04:e1:
                    72:c4:23:de:10:b7:91:0a:72:00:7c:26:41:09:88:
                    f5:24:bc:cf:89:95:91:1a:81:b7:e9:1c:c9:c7:c4:
                    9d:46:50:a7:b8:82:1f:49:46:81:e5:70:fe:32:7c:
                    87:c2:92:61:2d:9f:13:8a:c1:ba:dc:91:0d:6d:8a:
                    6a:d1:ec:3b:f1:46:64:21:7b:69:28:3c:0f:33:ee:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:06:4E:9B:1C:72:72:39:92:8F:C9:E4:69:28:AD:29:40:39:E1:C9
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:8b:51:6c:0d:f3:63:0e:85:61:bf:20:88:36:b8:13:1f:
         a5:93:86:36:b9:5f:28:c8:ec:8a:d2:1c:de:51:48:18:04:cd:
         ef:19:62:bb:cf:90:6c:d1:42:d6:d2:3f:36:77:23:32:1b:34:
         c1:54:2c:00:c2:57:22:44:ea:54:bd:11:e8:91:ef:da:67:e8:
         e5:72:28:bf:9f:c0:b8:44:ad:05:1d:73:65:33:77:f4:80:29:
         1f:67:73:f7:b6:82:eb:a8:b7:5c:1c:2c:a7:45:eb:f5:84:ec:
         9d:f0:5f:05:92:fd:53:ea:6c:df:10:31:3f:52:44:44:77:a4:
         31:eb:83:7d:b5:13:be:e7:06:38:d0:f4:ba:db:81:6c:54:11:
         1e:5a:0c:86:3d:65:3a:7a:c7:c8:25:19:4b:fd:c7:ff:99:cf:
         9c:e8:4b:79:a5:5c:4f:4e:ce:d4:9b:6b:a9:df:78:b4:b0:ce:
         59:50:62:70:bf:50:c0:86:91:0e:a3:3b:9a:49:d0:78:2d:7e:
         0c:c9:b3:fd:7a:8c:4f:e6:4b:80:fc:a1:49:18:0d:f7:6f:09:
         7f:22:4d:c2:60:af:9e:37:73:2c:c8:07:e8:12:5f:1a:53:88:
         af:59:d0:51:9d:e4:75:e1:57:74:99:1e:d9:09:14:ee:16:d8:
         ac:75:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:22:03 2025 by rpki-client