Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33322d3332203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33322d3332203d3e20333939393730.roa (raw, json)
Hash identifier:          eSxcMU8sndahqMzE0TB5qWnXBWF2wOi5v3d1VlwDlpQ=
Subject key identifier:   52:19:5F:51:C2:D0:E3:16:DF:EF:15:2B:7F:15:06:45:AF:3A:4E:DF
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       7EB3F6B15363B43AEDDD88526FA87527AD100C4A
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33322d3332203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:18 +0000
ROA not before:           Fri 18 Apr 2025 22:17:18 +0000
ROA not after:            Fri 17 Apr 2026 22:22:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:f6:b1:53:63:b4:3a:ed:dd:88:52:6f:a8:75:27:ad:10:0c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:18 2025 GMT
            Not After : Apr 17 22:22:18 2026 GMT
        Subject: CN=52195F51C2D0E316DFEF152B7F150645AF3A4EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:d1:b5:c7:e4:3e:9d:c7:8d:1a:4c:5c:0d:
                    37:25:5d:b4:a3:25:93:fb:e0:e2:0f:46:f2:8e:44:
                    ef:8b:e5:22:de:25:f5:92:bb:5e:13:c0:f5:b6:06:
                    ed:2f:f2:30:c7:f3:f0:14:a6:36:82:1c:b8:c9:c3:
                    96:aa:38:3f:33:30:5f:07:67:4a:9f:d0:ff:59:f6:
                    e2:b7:a7:99:6d:d8:3a:fd:ea:99:6b:68:f5:37:89:
                    5b:80:8b:ad:11:5a:63:3d:73:23:a2:5b:d8:1b:b4:
                    2e:44:1f:12:52:da:1d:a8:50:00:d7:56:c8:aa:39:
                    05:47:42:ea:1a:21:08:7b:a8:a6:f6:af:b2:99:f0:
                    62:92:65:5a:54:5d:fc:10:cb:b6:1e:d5:f0:76:97:
                    74:43:36:0f:a8:3f:5d:5c:c8:e6:b3:9a:76:a6:ad:
                    ee:6c:90:ae:b0:72:4e:6c:de:03:a7:44:08:b6:37:
                    fa:83:91:86:68:25:e8:4d:45:52:af:d1:81:5a:01:
                    4c:ae:50:70:8a:e7:65:0b:be:3e:74:60:a8:70:e0:
                    6e:38:2c:35:6c:a5:82:63:c8:b8:a5:37:c7:34:be:
                    4c:81:30:e4:9a:d2:3b:c5:50:f0:c0:fd:a4:e0:e1:
                    8e:1d:f1:91:78:9c:a7:94:84:21:8e:3b:47:75:38:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:5F:51:C2:D0:E3:16:DF:EF:15:2B:7F:15:06:45:AF:3A:4E:DF
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33322d3332203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:8d:64:98:84:db:fa:4d:37:be:f1:95:42:2f:e6:6f:64:
         6e:49:dc:e0:ea:9f:83:3f:be:e3:e8:45:91:e9:c3:eb:b6:e5:
         df:45:8c:3d:5c:21:3a:4a:05:c6:c3:e6:2d:93:10:e0:ae:17:
         34:c8:80:b1:16:b9:b9:3c:4e:ee:30:5e:64:23:fb:03:b7:c9:
         9e:74:42:c8:92:a4:c0:0d:03:43:c6:78:20:ec:89:ec:d0:9c:
         4c:3c:dd:52:62:9c:e9:c1:ad:ac:9f:c0:94:8c:c6:4b:72:18:
         c5:84:42:c7:4d:a2:28:7c:af:2f:78:f7:6d:2e:71:4b:c3:d2:
         b9:55:09:3b:d6:51:01:1c:93:7f:90:4e:24:39:d7:26:2f:45:
         8f:4f:8c:87:95:b3:64:1a:d4:66:9e:9a:57:75:86:9c:08:7c:
         17:35:ae:f6:59:74:58:52:3d:66:1a:19:a3:07:95:d3:90:30:
         6a:dc:d0:61:2c:4c:47:bb:84:73:f2:41:de:1e:4a:c2:1c:57:
         34:e5:08:9a:d4:47:da:d1:b1:61:d0:ae:a1:e4:69:2d:49:61:
         34:f6:31:0b:6a:67:32:90:9f:b1:06:e3:9a:98:ca:7a:b8:01:
         ed:03:76:7b:c5:2b:50:d3:43:70:47:16:32:04:dd:fa:60:8e:
         7a:ee:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----