Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
File:                     323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier:          dw3VRUXBwD+6IPt5/QKG3zFSi64NFnqH3Vd7D/JUiA4=
Subject key identifier:   15:E7:2D:CA:6C:CB:D7:A3:67:6E:2E:6A:88:FE:D9:61:56:FC:4D:EB
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       3F85EB1D66CB81A49667E546077FCE6B2B054F33
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:32:59 +0000
ROA not before:           Wed 02 Jul 2025 19:27:59 +0000
ROA not after:            Wed 01 Jul 2026 19:32:59 +0000
asID:                     47272
IP address blocks:        2602:f96d:300::/40 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:85:eb:1d:66:cb:81:a4:96:67:e5:46:07:7f:ce:6b:2b:05:4f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:27:59 2025 GMT
            Not After : Jul  1 19:32:59 2026 GMT
        Subject: CN=15E72DCA6CCBD7A3676E2E6A88FED96156FC4DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:02:d1:f7:d2:77:ca:9a:a4:35:a5:f2:38:
                    f7:64:a7:7f:41:4c:6f:ce:fd:00:13:e7:fb:c7:12:
                    ed:45:d1:e4:16:8a:8f:99:ef:52:9b:f9:ca:16:c0:
                    03:b7:4d:49:93:12:aa:64:a3:c5:d1:f8:9e:68:33:
                    c3:b9:aa:73:b2:91:70:bb:e3:60:94:eb:b1:b0:74:
                    b9:b5:ba:e5:3c:24:15:f1:1c:8c:59:bd:98:6a:eb:
                    b2:44:3f:1c:c1:f7:26:8b:58:e4:d7:03:16:e7:3a:
                    a3:6a:9e:ae:7d:80:55:95:88:40:ea:7d:7c:97:4d:
                    f3:96:70:cb:48:f3:62:c1:0e:b6:6d:7a:6d:42:80:
                    fb:01:7c:80:ea:09:97:00:d5:d7:b7:3e:5c:29:af:
                    f0:80:e2:16:2b:2e:5d:c6:26:ba:a7:ff:52:40:32:
                    2d:7f:74:53:57:7a:f7:5a:cb:3a:60:8a:a1:51:60:
                    49:47:b0:6f:5d:d0:53:e7:61:6f:58:4d:26:9b:d8:
                    aa:f8:d4:e2:06:bd:3c:04:21:23:4a:bb:e2:e6:ea:
                    c2:d2:d6:77:19:80:b0:8e:d4:9e:0e:72:59:c3:3b:
                    84:71:c2:19:39:6d:dd:53:a8:44:7d:dc:a7:8b:7c:
                    bb:e1:38:bb:c8:ac:80:14:94:84:4e:6f:48:a6:61:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E7:2D:CA:6C:CB:D7:A3:67:6E:2E:6A:88:FE:D9:61:56:FC:4D:EB
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:16:d9:03:c0:9b:77:b9:49:cb:5d:23:26:d0:08:c8:cd:28:
         a4:09:cb:fe:c0:7a:b2:ef:66:66:06:ae:6c:13:a8:71:ae:7d:
         96:46:7e:43:46:4d:fc:42:00:95:42:8d:1c:76:5a:02:66:0a:
         c7:44:ff:51:fb:43:d0:2d:59:71:68:55:ad:bc:4a:6b:43:1e:
         d8:60:7d:78:e2:e1:fb:3b:83:1f:a7:15:68:aa:c1:8a:62:32:
         3b:15:77:e4:07:09:ce:50:74:23:4e:dc:9b:c6:f2:62:de:02:
         09:34:56:7c:69:c6:b4:9c:70:6f:ff:be:e2:b2:4a:92:aa:94:
         90:20:2f:b2:f1:65:4a:10:1e:38:2a:0b:65:15:30:d0:a9:19:
         37:3a:25:5e:1f:e7:55:ff:51:43:97:ef:d4:c5:e6:0d:8b:ab:
         e7:64:fe:f1:bd:26:7c:c0:75:94:30:b6:0a:db:c7:23:e8:9c:
         ed:ea:60:81:c0:29:60:c5:9f:69:62:82:fb:ce:9b:4b:b9:78:
         55:a8:e2:e4:68:ec:46:35:5f:1b:30:e6:1b:d9:68:64:7a:f1:
         ec:ce:6d:48:06:cf:1a:51:5a:73:13:da:e8:c7:37:2f:5a:bd:
         4d:5c:75:a4:fc:a4:9b:8f:ee:21:e1:cb:a4:b7:78:3f:05:7a:
         70:ff:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----