Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130313a3a2f36342d3634203d3e203137313339.roa
File:                     323630373a666361383a3130313a3a2f36342d3634203d3e203137313339.roa (raw, json)
Hash identifier:          Xu8JPqo95B47PK8tkf0AEXjbI3FtN/V6TrEgyq4WY4U=
Subject key identifier:   B4:93:7E:EC:30:08:0A:CB:16:5E:82:53:2B:9E:04:2C:30:76:03:1E
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       309F5A3846F4950D012E449C0987723B54E8F705
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130313a3a2f36342d3634203d3e203137313339.roa
Signing time:             Thu 16 Jan 2025 12:43:13 +0000
ROA not before:           Thu 16 Jan 2025 12:38:13 +0000
ROA not after:            Thu 15 Jan 2026 12:43:13 +0000
asID:                     17139
IP address blocks:        2607:fca8:101::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9f:5a:38:46:f4:95:0d:01:2e:44:9c:09:87:72:3b:54:e8:f7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jan 16 12:38:13 2025 GMT
            Not After : Jan 15 12:43:13 2026 GMT
        Subject: CN=B4937EEC30080ACB165E82532B9E042C3076031E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:d1:4b:20:d5:d6:a5:c1:76:12:86:86:49:
                    7c:df:82:3d:d1:de:a7:2c:d3:a0:f3:19:7f:13:69:
                    16:86:88:96:76:98:15:6e:34:4a:36:8b:a4:b1:19:
                    77:b8:7c:b7:d7:50:fe:17:80:74:e5:42:7a:76:62:
                    8c:e9:38:4f:46:7c:06:fe:49:48:17:63:ca:e5:4e:
                    76:78:cd:57:8b:6c:c7:a3:b3:b8:ba:44:4f:2b:b1:
                    3d:3a:49:f8:8d:80:9b:e7:a9:3e:ea:5d:e4:e8:d3:
                    af:5b:68:5b:aa:c5:32:15:56:a7:5c:9a:58:fe:28:
                    7d:bf:c8:7e:40:09:7c:47:4c:1b:95:d9:18:d8:bb:
                    6a:95:95:96:4e:f6:aa:8b:00:80:1e:85:72:93:5c:
                    4d:c1:32:6b:d1:07:a7:07:4d:a2:52:e4:b1:fa:79:
                    a0:df:1d:f4:d9:0f:89:e7:49:0a:03:50:48:50:29:
                    87:90:fd:31:96:76:cb:39:1f:cb:91:8c:d8:ef:da:
                    3b:1c:f6:62:e6:b7:cd:19:db:ba:2c:c6:6f:67:fb:
                    bc:89:ed:27:5d:b8:ef:b2:85:af:d7:c1:6d:b0:31:
                    fe:2a:df:cf:ee:7a:c8:f8:52:6b:1d:f1:61:10:43:
                    79:d4:19:e5:29:cb:3d:b0:39:52:01:65:f8:52:3f:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:7E:EC:30:08:0A:CB:16:5E:82:53:2B:9E:04:2C:30:76:03:1E
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a3130313a3a2f36342d3634203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:101::/64

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:c0:38:98:de:00:43:13:19:e9:ec:0f:98:5c:c4:3f:60:
         a0:89:de:75:d8:33:94:3c:22:a2:68:43:28:c2:6c:c7:27:c2:
         cc:9d:c9:57:be:dc:16:14:a4:96:bb:61:e5:27:fc:f0:8a:1a:
         41:6f:ef:ec:66:4a:4b:a0:84:58:be:6c:88:c0:c9:83:61:0f:
         cf:38:20:6c:d0:31:47:8f:1f:99:57:13:16:b0:5e:9b:e2:ad:
         c8:fa:38:11:f6:2a:36:81:7d:41:7c:d7:7c:1d:1e:a7:2c:46:
         47:a8:02:43:69:29:f0:19:e8:07:9b:cb:ad:d1:08:18:67:99:
         19:72:f0:c9:50:e8:cb:be:31:80:f3:58:eb:88:52:3e:86:5e:
         eb:f8:a8:1a:47:9f:4c:6b:18:07:ed:69:b8:b0:26:62:65:e3:
         d8:9d:6c:fb:34:1b:41:3c:d4:c3:1d:0e:37:cd:01:ea:6e:bb:
         9f:cc:d2:1c:72:83:7e:d4:bd:a4:a8:a9:8e:c1:7f:52:ad:08:
         ef:e5:f0:18:28:5a:c6:d1:72:a8:55:b8:a2:31:46:27:af:fa:
         50:00:89:7c:84:c2:d1:53:37:53:97:4a:f3:22:72:7a:ec:37:
         30:d8:b1:c2:97:f7:20:98:ca:ce:cc:6d:f3:e5:66:ae:2d:64:
         77:7b:cc:e7
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUMJ9aOEb0lQ0BLkScCYdyO1To9wUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwMTE2MTIzODEzWhcNMjYwMTE1MTI0MzEz
WjAzMTEwLwYDVQQDEyhCNDkzN0VFQzMwMDgwQUNCMTY1RTgyNTMyQjlFMDQyQzMw
NzYwMzFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbTRSyDV1qXB
dhKGhkl834I90d6nLNOg8xl/E2kWhoiWdpgVbjRKNouksRl3uHy311D+F4B05UJ6
dmKM6ThPRnwG/klIF2PK5U52eM1Xi2zHo7O4ukRPK7E9Okn4jYCb56k+6l3k6NOv
W2hbqsUyFVanXJpY/ih9v8h+QAl8R0wbldkY2LtqlZWWTvaqiwCAHoVyk1xNwTJr
0QenB02iUuSx+nmg3x302Q+J50kKA1BIUCmHkP0xlnbLOR/LkYzY79o7HPZi5rfN
Gdu6LMZvZ/u8ie0nXbjvsoWv18FtsDH+Kt/P7nrI+FJrHfFhEEN51BnlKcs9sDlS
AWX4Uj8jHQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLSTfuwwCArLFl6CUyueBCww
dgMeMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzYzMDM3M2E2NjYzNjEzODNhMzEzMDMxM2EzYTJmMzYz
NDJkMzYzNDIwM2QzZTIwMzEzNzMxMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACYH/KgBAQAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCk8MA4mN4AQxMZ6ewPmFzEP2Cgid512DOUPCKiaEMo
wmzHJ8LMnclXvtwWFKSWu2HlJ/zwihpBb+/sZkpLoIRYvmyIwMmDYQ/POCBs0DFH
jx+ZVxMWsF6b4q3I+jgR9io2gX1BfNd8HR6nLEZHqAJDaSnwGegHm8ut0QgYZ5kZ
cvDJUOjLvjGA81jriFI+hl7r+KgaR59MaxgH7Wm4sCZiZePYnWz7NBtBPNTDHQ43
zQHqbrufzNIccoN+1L2kqKmOwX9SrQjv5fAYKFrG0XKoVbiiMUYnr/pQAIl8hMLR
UzdTl0rzInJ67Dcw2LHCl/cgmMrOzG3z5WauLWR3e8zn
-----END CERTIFICATE-----