Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          CsGQLlFfhdAo4gANw+hLAHFT5OM1hdK5E5VnFokoepU=
Subject key identifier:   5D:EF:55:67:FA:07:C1:5A:F6:44:FD:F9:3C:D2:D4:48:5B:53:0B:49
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       42B080106D8463FE7E933B5D58FD40F01B252DDE
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:32:58 +0000
ROA not before:           Wed 02 Jul 2025 19:27:58 +0000
ROA not after:            Wed 01 Jul 2026 19:32:58 +0000
asID:                     47272
IP address blocks:        2602:f96d:100::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b0:80:10:6d:84:63:fe:7e:93:3b:5d:58:fd:40:f0:1b:25:2d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:27:58 2025 GMT
            Not After : Jul  1 19:32:58 2026 GMT
        Subject: CN=5DEF5567FA07C15AF644FDF93CD2D4485B530B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:ea:56:b7:a5:f7:9e:5c:d7:40:e1:97:37:
                    f2:d1:f4:a9:42:5d:c9:61:e9:1c:f9:4c:d1:c6:7d:
                    6e:33:21:06:80:c3:45:44:47:7d:74:44:f8:a9:f7:
                    7e:0b:a0:9f:5c:0b:14:49:c7:8c:57:00:4f:e4:9b:
                    8d:6f:7d:a5:e5:87:4c:b5:6d:f1:d8:b5:07:7e:a6:
                    37:4d:66:da:eb:1c:33:f9:f4:63:74:98:84:6e:3c:
                    e5:2b:c2:86:fe:9c:f4:0c:33:b8:e1:6a:c2:20:0d:
                    ba:c3:e3:d8:4e:5e:97:11:f6:37:9e:7e:c4:e9:80:
                    50:f9:26:12:f8:ac:43:dc:28:ac:fa:8d:0b:27:62:
                    8f:aa:b4:6b:1e:7a:8c:96:66:22:c0:ad:22:2c:9d:
                    8d:56:ea:51:06:26:a2:24:74:d8:f3:63:c7:7b:f6:
                    08:c3:b9:bb:5d:15:ed:a6:ae:b6:8a:cf:1c:59:ee:
                    e4:e0:c9:7a:3b:34:d8:60:eb:ac:ec:99:45:6e:2a:
                    fd:e4:a7:27:27:4f:13:aa:22:06:8e:bd:1a:a8:4a:
                    f2:63:75:a8:8e:77:d0:72:88:85:2c:0f:fe:e7:17:
                    ec:25:d5:16:b0:25:45:8a:3c:92:af:f4:38:bf:36:
                    e2:dc:9c:7a:e3:09:3e:1c:94:2b:3a:e0:cf:59:a5:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EF:55:67:FA:07:C1:5A:F6:44:FD:F9:3C:D2:D4:48:5B:53:0B:49
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:bf:90:dc:43:80:c6:ae:0a:94:23:fc:fa:cf:e4:e1:18:
         06:27:ee:59:0f:83:b6:4d:45:56:0d:c5:af:29:6a:29:06:75:
         1f:27:a5:34:56:99:70:6c:4e:f8:96:a8:86:4e:b9:38:7d:96:
         b4:d5:67:f5:d8:16:33:d1:8c:4e:1b:e8:dc:24:81:3c:c0:75:
         36:a1:82:10:e3:3a:da:94:32:ca:49:b8:2d:ad:10:18:14:f7:
         f2:42:3f:83:17:07:32:92:4e:2c:b1:c5:41:a4:e5:2c:75:5f:
         49:40:86:8c:af:81:f1:7b:4a:f1:cd:dc:43:0f:17:79:39:14:
         3f:65:ba:2c:d9:8f:5f:4f:b7:12:8f:1b:da:ff:e5:a9:1d:c2:
         cb:08:8e:2b:c1:f0:9b:12:bc:bf:37:d2:56:42:51:ac:1d:f8:
         d3:2b:e1:36:7c:fb:85:37:c5:59:9b:7b:e6:b0:e7:d0:6c:75:
         c6:ba:d1:67:6a:f2:c3:eb:c8:2c:6d:4e:c8:99:8b:c0:40:05:
         81:b9:8f:c4:0c:07:bb:55:37:1b:cc:f0:29:b8:ba:ea:08:38:
         33:bc:ee:df:d6:40:5e:6b:8c:45:2f:57:e8:6e:8e:23:2f:d1:
         ad:50:15:45:ce:e6:eb:28:0e:33:95:d6:04:b2:a0:8e:18:16:
         5b:93:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----