Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6530303a3a2f34302d3438203d3e20343031363030.roa
File:                     323630323a663736353a6530303a3a2f34302d3438203d3e20343031363030.roa (raw, json)
Hash identifier:          UaayX7XCU0f6fvf1LCCQLoJKLtP6PfxaPZmov5wWWug=
Subject key identifier:   E5:88:A1:FA:64:9E:C0:CB:9D:D1:B0:3F:80:A4:00:13:10:99:90:59
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       5AA3B0F26D70B9F0947FBD908CB0C848B053B6B3
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6530303a3a2f34302d3438203d3e20343031363030.roa
Signing time:             Thu 13 Feb 2025 04:00:04 +0000
ROA not before:           Thu 13 Feb 2025 03:55:04 +0000
ROA not after:            Thu 12 Feb 2026 04:00:04 +0000
asID:                     401600
IP address blocks:        2602:f765:e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:b0:f2:6d:70:b9:f0:94:7f:bd:90:8c:b0:c8:48:b0:53:b6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Feb 13 03:55:04 2025 GMT
            Not After : Feb 12 04:00:04 2026 GMT
        Subject: CN=E588A1FA649EC0CB9DD1B03F80A4001310999059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:16:fa:71:fb:69:fb:ad:a5:91:1d:f7:a7:
                    f0:8c:26:c5:ee:0b:93:8f:ff:ab:51:21:8c:f6:41:
                    36:c9:bb:6d:01:54:2e:34:c0:bd:f9:d4:63:33:dd:
                    f8:1c:09:69:86:fe:fc:74:be:f0:e8:eb:35:6f:46:
                    68:d0:43:88:ff:dd:d5:a8:3c:ea:47:14:64:c3:f7:
                    36:92:59:01:17:53:1c:7c:6b:63:f6:a4:4d:01:07:
                    f0:ed:3a:10:e7:eb:94:2b:d7:cd:c6:b9:72:40:77:
                    0b:75:ed:c6:ce:67:d5:db:f0:ce:21:df:02:f9:a1:
                    6e:dd:13:88:f0:a2:c9:cd:b5:af:50:1e:85:ea:59:
                    df:6f:55:9c:bd:93:82:ac:42:94:2b:73:25:44:f4:
                    e9:22:06:19:ea:06:fa:fe:e8:39:67:fd:a2:04:a5:
                    41:22:5e:0c:2f:0b:f0:81:8b:9f:7b:8a:30:3d:57:
                    05:6a:aa:e9:2e:0f:6d:c1:af:49:5d:73:13:2e:38:
                    29:d9:47:03:2d:74:43:c2:a4:61:7b:8b:05:62:8f:
                    c2:28:93:7a:39:db:6c:7f:61:d8:a9:0e:e9:37:fd:
                    b1:af:2e:11:09:46:72:df:7b:2c:0f:a1:47:ca:c2:
                    9a:8c:23:53:d7:9c:26:ea:35:52:83:9c:25:5e:8c:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:A1:FA:64:9E:C0:CB:9D:D1:B0:3F:80:A4:00:13:10:99:90:59
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6530303a3a2f34302d3438203d3e20343031363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:91:d1:5c:28:d5:e8:55:d4:2a:ea:4a:ae:88:fd:d5:31:
         4b:4b:10:e9:bf:a9:bd:59:f7:ae:6a:50:2e:0e:6a:38:29:5a:
         17:06:8c:c1:01:73:07:78:54:02:e7:63:7f:cc:85:7f:24:f4:
         21:9f:4f:20:7d:36:56:c4:b8:99:50:18:e7:cc:40:bb:a2:63:
         69:bb:dd:1e:1c:2a:33:eb:c3:32:e0:09:9e:31:8e:e3:82:82:
         f8:91:2b:96:46:93:d5:e4:26:08:4d:f9:fd:fe:39:a0:f3:95:
         a9:b3:46:b6:a2:90:04:f9:24:59:45:5e:77:ab:66:b2:de:cd:
         d3:0c:86:10:12:30:59:22:d6:e0:15:f4:41:5e:80:3e:ca:46:
         1b:ba:cd:06:4f:23:7d:97:96:b5:02:9f:ee:f1:cd:39:23:01:
         0c:56:5a:ac:9e:72:bf:db:2e:ef:c0:d4:18:1f:80:c4:2c:1f:
         fa:88:1c:76:65:3c:8c:87:cc:df:ed:b8:3b:43:34:73:a7:ca:
         0d:19:90:da:90:37:07:4b:8a:4d:ea:a1:a1:12:f6:03:80:23:
         a9:28:fc:46:f9:84:8e:2b:4b:72:15:27:6f:60:06:56:49:0f:
         39:07:d8:3d:5d:2e:7e:17:6a:ed:ad:52:78:6d:80:a4:dd:36:
         2e:2f:3b:f6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUWqOw8m1wufCUf72QjLDISLBTtrMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzcyY2E4YjliMWE5ODQwMjYyNGUwZDUxNDJiMTc0MjVk
ZGQyZTAzMzBlYmQyNGRjZmYwHhcNMjUwMjEzMDM1NTA0WhcNMjYwMjEyMDQwMDA0
WjAzMTEwLwYDVQQDEyhFNTg4QTFGQTY0OUVDMENCOUREMUIwM0Y4MEE0MDAxMzEw
OTk5MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsAW+nH7afut
pZEd96fwjCbF7guTj/+rUSGM9kE2ybttAVQuNMC9+dRjM934HAlphv78dL7w6Os1
b0Zo0EOI/93VqDzqRxRkw/c2klkBF1McfGtj9qRNAQfw7ToQ5+uUK9fNxrlyQHcL
de3GzmfV2/DOId8C+aFu3ROI8KLJzbWvUB6F6lnfb1WcvZOCrEKUK3MlRPTpIgYZ
6gb6/ug5Z/2iBKVBIl4MLwvwgYufe4owPVcFaqrpLg9twa9JXXMTLjgp2UcDLXRD
wqRhe4sFYo/CKJN6Odtsf2HYqQ7pN/2xry4RCUZy33ssD6FHysKajCNT15wm6jVS
g5wlXoxjnQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFOWIofpknsDLndGwP4CkABMQ
mZBZMB8GA1UdIwQYMBaAFGu/urQmZy05XPwXsTytrBo4IjutMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTk0M2Q1ODM2ZmYxYjI5LzAv
NkJCRkJBQjQyNjY3MkQzOTVDRkMxN0IxM0NBREFDMUEzODIyM0JBRC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2OWY3Ny83NzJj
YThiOWIxYTk4NDAyNjI0ZTBkNTE0MmIxNzQyNWRkZDJlMDMzMGViZDI0ZGNmZi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk
NTgzNmZmMWIyOS8wLzMyMzYzMDMyM2E2NjM3MzYzNTNhNjUzMDMwM2EzYTJmMzQz
MDJkMzQzODIwM2QzZTIwMzQzMDMxMzYzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3ZQ4wDQYJ
KoZIhvcNAQELBQADggEBABqDkdFcKNXoVdQq6kquiP3VMUtLEOm/qb1Z965qUC4O
ajgpWhcGjMEBcwd4VALnY3/MhX8k9CGfTyB9NlbEuJlQGOfMQLuiY2m73R4cKjPr
wzLgCZ4xjuOCgviRK5ZGk9XkJghN+f3+OaDzlamzRraikAT5JFlFXnerZrLezdMM
hhASMFki1uAV9EFegD7KRhu6zQZPI32XlrUCn+7xzTkjAQxWWqyecr/bLu/A1Bgf
gMQsH/qIHHZlPIyHzN/tuDtDNHOnyg0ZkNqQNwdLik3qoaES9gOAI6ko/Eb5hI4r
S3IVJ29gBlZJDzkH2D1dLn4Xau2tUnhtgKTdNi4vO/Y=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net