Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
File:                     323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa (raw, json)
Hash identifier:          CZlySqmoK8EP/yCguUtFiJuTMneDaZwZd4jrkkiKCpE=
Subject key identifier:   1B:0A:47:F9:5F:F8:95:C2:BD:9B:B0:4F:28:1C:07:8F:0E:B2:B4:87
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       36DEEA92E958A333F82C3952EA863CBC8C839570
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
Signing time:             Fri 28 Mar 2025 00:17:20 +0000
ROA not before:           Fri 28 Mar 2025 00:12:20 +0000
ROA not after:            Fri 27 Mar 2026 00:17:20 +0000
asID:                     19521
IP address blocks:        2602:fac2:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:ea:92:e9:58:a3:33:f8:2c:39:52:ea:86:3c:bc:8c:83:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:20 2025 GMT
            Not After : Mar 27 00:17:20 2026 GMT
        Subject: CN=1B0A47F95FF895C2BD9BB04F281C078F0EB2B487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:f1:dd:4d:c8:ab:b1:12:bc:4f:9e:20:08:
                    be:0d:5c:44:e0:b9:3b:43:0f:92:6c:27:57:1e:14:
                    1b:06:83:db:eb:de:54:cd:9a:ef:b8:be:fa:42:42:
                    c0:82:df:66:8c:ee:e0:70:08:95:38:3a:6c:21:ca:
                    96:87:72:0d:37:bf:c6:3b:9d:29:16:37:ab:5f:be:
                    69:4c:07:70:13:1a:5e:b5:05:a5:3a:93:6d:a8:47:
                    32:97:f3:67:40:b0:06:bf:be:7d:8a:02:53:ff:a9:
                    49:a6:d2:71:b9:3f:9d:5a:3a:8c:35:69:04:1b:b6:
                    d6:94:da:cd:0e:a3:91:ce:6e:65:55:75:25:ae:09:
                    3e:cf:5d:20:8a:a6:be:35:8d:fc:d2:26:aa:e0:f6:
                    aa:ee:d5:f6:49:0a:b9:2f:19:b7:03:b1:79:b6:00:
                    ea:f0:d9:b7:95:ae:8b:33:42:aa:30:9a:dd:88:eb:
                    c9:7f:ef:1d:09:60:a4:b6:e1:0e:ae:83:ce:d2:af:
                    7e:73:9d:3a:d5:b4:51:80:74:e9:82:8d:e0:2c:f0:
                    78:da:01:51:7b:eb:61:19:12:91:f8:4f:a5:f2:65:
                    04:0a:61:18:8d:a6:3c:04:3f:a5:d1:98:d4:cd:46:
                    07:68:bc:12:39:0a:17:b4:a5:dc:2d:9d:6f:da:0e:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:47:F9:5F:F8:95:C2:BD:9B:B0:4F:28:1C:07:8F:0E:B2:B4:87
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:78:da:9f:82:27:0e:36:4d:b0:3e:fc:bc:8c:ff:05:a1:
         08:75:8b:36:64:2d:87:a4:08:fe:bc:02:f8:d9:85:b9:10:0c:
         ca:bb:23:3f:3f:e4:50:4f:c7:66:9e:bb:8e:bc:34:8a:2b:cd:
         4a:30:c6:59:2e:5f:81:58:2e:9d:f2:87:62:56:ce:30:d7:1c:
         42:2d:4e:ff:f7:4c:d0:79:1e:78:cc:4a:05:6b:82:a6:40:2b:
         73:50:60:db:4b:ec:16:2c:e1:85:c8:03:d9:4a:c8:ce:46:87:
         3a:3b:c1:36:17:f6:25:23:45:41:03:a5:1d:39:5a:8d:06:eb:
         b5:ab:3e:11:c5:06:0f:05:a6:ec:22:36:86:39:9c:22:cf:56:
         dd:10:dc:e8:ea:56:91:5d:b3:d1:c3:2f:76:d7:ae:3b:e4:6e:
         42:a8:c4:64:3a:dd:d3:2a:54:0e:72:8a:04:3c:e8:91:d0:7f:
         1f:f5:6a:3e:81:65:45:93:d2:dd:18:d3:6c:25:aa:6d:9d:65:
         16:71:66:67:c5:e3:cd:18:82:4f:17:c2:b6:a6:0f:e8:6e:2e:
         1d:79:62:67:bb:ee:63:90:ed:f5:70:58:81:66:f7:49:d6:1a:
         a3:ec:b6:d0:8a:01:97:ac:27:3c:55:78:1e:01:92:43:f1:c8:
         fb:1a:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----