Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          9vytupD6SmJtfqRDzJ35rsQJUIeDUBHQ9ftqpMj3hJs=
Subject key identifier:   1A:85:D6:EA:7A:81:E5:CC:AB:5E:65:AB:E4:2B:51:9B:D0:D7:76:F6
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       7D66BE6C37E8266B0A1346F0B1B01A34E026E5AF
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:23:14 +0000
ROA not before:           Fri 18 Apr 2025 22:18:14 +0000
ROA not after:            Fri 17 Apr 2026 22:23:14 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:66:be:6c:37:e8:26:6b:0a:13:46:f0:b1:b0:1a:34:e0:26:e5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:18:14 2025 GMT
            Not After : Apr 17 22:23:14 2026 GMT
        Subject: CN=1A85D6EA7A81E5CCAB5E65ABE42B519BD0D776F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:09:f6:ac:36:01:55:b1:4f:45:c2:dd:3d:
                    b6:e3:98:e4:94:97:e8:f3:81:2e:16:7d:92:e8:9c:
                    68:ff:48:d8:14:6f:e5:91:88:e7:5d:1d:c7:5a:c6:
                    c7:c1:65:3b:4d:97:37:94:84:4b:6d:c1:37:63:12:
                    97:01:64:64:7e:f1:53:46:35:1f:95:1f:90:f2:80:
                    87:40:86:22:41:98:91:5b:e8:95:1a:ea:5e:c0:f0:
                    06:f3:d5:79:69:27:5d:9d:d1:ac:0e:3f:ef:0f:e1:
                    44:aa:54:3a:71:c2:97:61:da:91:47:7e:dd:04:ad:
                    7a:44:f6:2c:aa:2c:ed:a2:96:79:b3:58:b4:de:05:
                    c5:c4:eb:24:db:7e:b1:08:08:5a:e6:93:c0:96:6d:
                    81:62:16:37:81:ed:ea:76:c3:6c:f3:9c:47:80:22:
                    d9:9f:e7:06:06:0a:71:25:11:1a:b9:08:35:aa:35:
                    af:ea:c0:a9:3c:89:f9:43:3e:5a:8f:1c:2c:6d:37:
                    4d:aa:14:4f:90:50:f7:98:68:0b:cf:b7:ff:91:2e:
                    23:e6:9a:b9:83:d6:71:41:c7:8f:b6:30:d3:b0:9e:
                    0b:b5:12:6c:71:9c:7f:88:f7:1f:8a:45:e1:63:df:
                    bb:e9:5e:f2:ba:a5:ba:d2:7e:11:e7:80:52:9d:9e:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:D6:EA:7A:81:E5:CC:AB:5E:65:AB:E4:2B:51:9B:D0:D7:76:F6
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:1f:4d:b0:60:1d:0b:6b:01:0c:59:4b:3a:88:37:7e:e0:
         a7:9b:4b:24:d2:f8:c3:25:d3:4e:24:50:64:af:21:0e:49:56:
         b3:51:56:f0:88:b6:ba:7e:19:27:ed:54:b2:26:69:f9:84:a8:
         9c:ad:06:db:2f:0a:87:5c:71:ab:7f:c6:ca:80:e7:23:7f:91:
         5c:69:d5:58:43:b6:b0:5f:ed:9d:41:c5:a2:a9:45:2e:0b:96:
         9b:ff:4c:60:df:b9:12:37:9b:0d:79:69:bf:34:6f:0b:98:54:
         65:e9:40:3c:9d:fe:fb:67:98:7f:37:24:da:a7:60:44:27:9f:
         71:7c:4b:61:01:a9:05:23:09:50:bc:74:a8:81:c1:bb:7a:18:
         92:40:44:a2:61:9c:be:d8:30:4b:f8:62:a0:d8:8c:63:69:16:
         66:38:7f:46:d8:c2:bb:79:5b:d5:8c:c0:9f:71:17:b0:ce:bc:
         9b:9d:47:65:15:19:eb:b5:08:c5:a0:e6:48:63:be:41:1f:bc:
         8b:9a:aa:07:93:0f:86:60:23:c4:4f:b9:84:2f:09:7f:d0:9a:
         c2:fa:cb:5c:5b:e5:d8:6f:51:19:ca:7d:ae:75:b7:04:99:9f:
         08:39:3f:70:ca:70:dd:18:9a:d4:ca:3c:05:1a:c2:ab:6c:64:
         f6:35:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:40:34 2025 by rpki-client