Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          Qs302/OBLkqB6oyJT4OPHn1d9+h88vSx6KC/gRXE+Eg=
Subject key identifier:   0A:C8:99:A9:19:EC:5B:1B:86:3D:4F:E8:E4:4A:3C:4B:CD:54:F2:7C
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       158EF8AFD352D2B91606BC614AC0DDFE08C5070C
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:25 +0000
ROA not before:           Fri 18 Apr 2025 22:17:25 +0000
ROA not after:            Fri 17 Apr 2026 22:22:25 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8e:f8:af:d3:52:d2:b9:16:06:bc:61:4a:c0:dd:fe:08:c5:07:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:25 2025 GMT
            Not After : Apr 17 22:22:25 2026 GMT
        Subject: CN=0AC899A919EC5B1B863D4FE8E44A3C4BCD54F27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:8f:8a:a1:45:9f:b2:9d:83:e8:cc:58:fc:
                    88:df:74:8b:aa:da:1a:d5:57:95:33:42:60:3d:d9:
                    77:e9:83:a0:fc:4b:a8:99:d5:61:03:af:48:7c:2d:
                    86:0d:89:d6:1d:fc:88:0c:42:f0:6b:da:55:40:90:
                    bb:9e:0a:bd:99:51:c7:61:79:70:0b:d3:0a:76:b5:
                    f8:96:20:23:30:16:6d:ec:e4:be:66:5d:e3:dd:4b:
                    18:f1:1e:ec:98:b8:fc:6c:52:94:0a:d5:18:32:7b:
                    ac:00:aa:6d:a0:0d:0a:6d:d6:a4:b8:1f:95:c6:09:
                    37:07:a1:49:fe:1c:81:ca:40:c7:d5:50:51:ae:64:
                    31:cc:e6:12:d5:db:08:e9:5b:cb:0f:94:ad:46:0f:
                    3b:f0:3b:d0:30:b1:1c:55:63:79:c3:99:84:15:c5:
                    fd:1b:12:31:eb:46:6c:85:93:51:b8:17:f7:6d:04:
                    c2:57:e7:9c:f3:b3:36:73:9f:f6:a3:e6:29:4a:6a:
                    6e:2a:4a:8b:e1:b8:2c:ba:0e:10:71:2e:a0:ce:c1:
                    7f:f4:2a:51:6c:68:bd:95:d5:27:39:f5:84:bf:ae:
                    11:f5:94:de:fe:51:ca:5f:27:39:42:a3:40:2e:f2:
                    2e:2a:4b:f4:c4:0a:c8:2c:75:7b:73:16:1e:62:fa:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C8:99:A9:19:EC:5B:1B:86:3D:4F:E8:E4:4A:3C:4B:CD:54:F2:7C
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:66:b0:53:9b:71:f9:3a:b1:0d:38:cb:7a:9e:69:aa:6a:8f:
         b0:bb:76:45:f9:98:6a:16:c3:7b:5c:f9:4c:f0:31:a1:fd:e6:
         57:42:f6:48:91:09:de:e1:d4:4b:1c:5a:db:f7:e1:52:16:bf:
         54:ba:9c:32:82:db:90:86:99:0d:c2:be:d7:6e:2f:e1:ca:9c:
         5e:7a:b4:5a:cf:36:1c:4d:8b:ec:8b:5c:ea:07:f5:9b:a6:5d:
         69:25:d6:ff:ef:ba:45:e9:ea:30:2b:f5:c5:11:71:09:70:91:
         b0:49:4e:41:a8:6d:16:ca:66:1b:98:bb:af:43:d6:76:39:a0:
         fe:59:30:a7:b4:a8:b5:16:da:56:b6:40:12:14:5b:ba:0d:1a:
         da:ce:13:d3:b8:54:f1:45:a8:19:31:22:d3:bc:68:f0:2c:08:
         33:3e:af:74:d3:8d:50:35:33:3f:8d:20:d1:68:18:3d:ef:83:
         7a:97:99:9e:4d:6a:48:81:20:95:e8:76:2f:c6:cf:b4:cb:28:
         c4:62:07:75:39:3d:5f:a0:f0:d4:b5:67:51:a4:be:20:93:4a:
         10:f7:08:3c:02:90:0c:de:a4:b2:c1:16:7f:54:da:9d:4b:44:
         1b:91:a1:c6:63:af:1d:e3:1d:3b:33:32:56:e1:8e:9f:a9:f0:
         fa:af:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:03:44 2025 by rpki-client