Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33352d3335203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33352d3335203d3e20333939393730.roa (raw, json)
Hash identifier:          0wZdEJIRbt2ovdXNwFImTG9ofqIvoFpJis4nFFvPZhM=
Subject key identifier:   F8:51:BE:D2:09:A6:19:6E:9F:0C:E5:EF:56:2D:83:47:4F:98:4B:47
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       6E59447049197AA18CAD7C2311BB9292F3EB1AC1
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33352d3335203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:22 +0000
ROA not before:           Fri 18 Apr 2025 22:17:22 +0000
ROA not after:            Fri 17 Apr 2026 22:22:22 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:59:44:70:49:19:7a:a1:8c:ad:7c:23:11:bb:92:92:f3:eb:1a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:22 2025 GMT
            Not After : Apr 17 22:22:22 2026 GMT
        Subject: CN=F851BED209A6196E9F0CE5EF562D83474F984B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:21:5c:99:7e:49:17:71:94:d9:b4:d3:8d:
                    fa:f3:8f:4b:cd:8e:65:89:04:36:8d:39:d8:be:ad:
                    53:5b:6d:03:f9:3d:74:96:34:01:03:d4:43:eb:27:
                    91:5b:7f:eb:e9:6a:9d:18:a6:0d:06:34:23:77:55:
                    08:36:ac:a5:ce:e8:75:ea:ab:57:e0:d7:63:73:ef:
                    b7:c4:e1:12:3e:4f:62:d6:d9:8b:93:1d:e9:05:51:
                    ca:58:ab:f8:5a:05:ca:9b:28:94:ed:e4:41:07:36:
                    d4:5d:4a:74:30:2f:12:21:ca:18:5d:4a:b2:94:97:
                    5b:06:c3:7e:4a:1e:ce:35:dc:ba:90:71:37:07:3b:
                    8f:d0:9a:a8:73:01:48:26:f9:e2:82:39:5c:31:37:
                    83:95:00:29:68:65:97:f8:3c:a2:7f:1e:08:43:95:
                    14:d0:7a:70:2a:27:8a:21:33:c7:d1:09:35:6c:5c:
                    bb:88:b3:a6:01:6b:3c:b5:c9:e7:bd:d8:51:27:ab:
                    83:70:92:b6:98:5b:e8:f0:b5:a8:27:9b:98:19:5f:
                    cd:de:40:0b:ef:ea:b4:61:c0:42:ca:19:49:96:91:
                    13:02:d8:b7:a0:90:4c:8e:e4:30:b3:75:04:8a:0f:
                    cf:05:f2:a0:7d:ea:2c:f7:ea:65:68:5f:66:d6:ae:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:BE:D2:09:A6:19:6E:9F:0C:E5:EF:56:2D:83:47:4F:98:4B:47
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33352d3335203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/35

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:25:be:fb:53:94:a6:38:01:0d:3e:4e:d9:2a:1b:7f:a3:
         81:28:a3:81:85:7c:be:e6:3d:fb:c7:fb:4d:fe:83:76:be:7f:
         f0:d9:6d:8a:6d:f3:83:41:dc:ed:02:25:ce:a5:db:e0:22:02:
         1c:85:86:5b:ba:b2:15:03:3c:8f:dc:fa:5e:1c:2e:1b:d6:45:
         14:9d:1e:50:19:05:03:23:f7:fc:c4:9d:8f:84:1b:c6:f8:c1:
         a8:8f:c0:79:a3:75:c9:b0:ae:68:e8:d6:5d:d7:3b:ee:3e:7a:
         2e:2e:01:fa:02:a3:89:aa:d0:11:a7:3c:05:c2:09:69:f9:67:
         2e:78:b9:f8:d2:a7:d3:20:e2:9b:35:d1:d6:42:91:44:ca:92:
         15:8f:6b:10:63:e1:b0:ae:65:1e:58:a1:0f:24:ce:bf:bb:08:
         42:73:ce:4d:61:f1:92:06:30:ba:6f:54:89:95:4f:c1:29:69:
         25:95:3e:52:e1:0f:b2:d9:6b:dc:46:f5:b2:af:6e:83:08:01:
         ec:28:e3:4b:95:8d:0c:4d:90:d4:ab:37:8c:02:b6:b2:4a:ca:
         f5:1b:65:5c:3c:93:09:35:aa:83:b5:cc:3f:a5:29:b2:cd:fb:
         97:c2:9a:04:f1:54:6e:a7:f7:1f:01:a0:85:ef:7e:c8:82:0d:
         b0:3e:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:45:55 2025 by rpki-client