Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa
File:                     323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier:          LjhTehrUSJJwTzrCpuOFlQy0QqqhZPUbLiKhToOAi8Y=
Subject key identifier:   98:74:00:A7:7C:4C:E5:12:EE:AE:37:27:61:69:5A:9A:FC:9E:AA:C5
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       360C39B646E0F7A7B2C1DD336659607D2F7619BA
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:32:59 +0000
ROA not before:           Wed 02 Jul 2025 19:27:59 +0000
ROA not after:            Wed 01 Jul 2026 19:32:59 +0000
asID:                     47272
IP address blocks:        2602:f96d:900::/42 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0c:39:b6:46:e0:f7:a7:b2:c1:dd:33:66:59:60:7d:2f:76:19:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:27:59 2025 GMT
            Not After : Jul  1 19:32:59 2026 GMT
        Subject: CN=987400A77C4CE512EEAE372761695A9AFC9EAAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:cf:ef:d2:70:0c:6b:a1:02:81:70:19:66:
                    84:4f:b8:22:79:d9:32:d7:4f:be:cf:b7:fc:15:50:
                    82:61:07:86:a0:98:46:3b:49:ca:4d:91:0a:c0:4e:
                    09:9b:ef:75:6f:9e:3a:ff:20:0a:f4:f8:b2:f8:13:
                    30:af:13:3b:76:c0:79:26:e6:eb:56:dc:a0:95:da:
                    2c:35:b0:4d:15:ed:2c:7b:b3:b2:c5:fe:86:a7:cf:
                    95:ed:49:05:23:a4:73:cc:8f:87:06:c5:43:b7:f7:
                    96:5e:b9:00:ee:08:ce:67:42:1d:b8:19:be:f3:b1:
                    ec:f7:33:b5:6a:ed:06:27:fc:a3:f7:ef:68:64:60:
                    79:59:08:50:40:11:da:c6:0d:f6:ff:f6:ef:4c:62:
                    fe:10:3e:20:6a:7b:61:ba:a9:b8:bc:37:1a:95:8e:
                    38:99:c0:4b:31:75:32:b7:79:73:72:42:ef:79:c4:
                    c3:aa:6c:65:33:3d:60:c7:f6:ee:2e:fc:c3:10:a7:
                    09:91:64:f2:b3:a0:03:92:46:11:4e:ae:7c:f7:74:
                    6b:60:71:b1:4c:2d:3c:ca:4f:ee:1e:1f:63:8e:ff:
                    ae:6b:1a:70:23:a3:ca:17:23:f4:68:ab:f7:b3:55:
                    71:cf:56:66:9e:fd:f2:a5:fc:91:1b:71:3f:71:c2:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:00:A7:7C:4C:E5:12:EE:AE:37:27:61:69:5A:9A:FC:9E:AA:C5
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3930303a3a2f34322d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:900::/42

    Signature Algorithm: sha256WithRSAEncryption
         26:27:18:22:21:54:ff:a4:92:e0:e7:a3:1a:fd:bc:df:00:38:
         4e:1f:0f:61:b7:00:21:9f:84:dd:95:c4:95:e1:3d:b0:d2:07:
         0a:66:52:c6:84:45:99:85:e5:dd:2a:cd:2d:a1:11:51:17:d1:
         96:58:93:d6:50:89:51:27:9e:6d:5f:5b:0f:1e:2c:eb:d4:99:
         04:96:2f:de:5b:a4:e9:b8:38:86:5f:8e:43:db:01:84:78:de:
         e9:25:09:47:39:22:a2:a9:45:58:de:f5:38:0c:15:96:37:12:
         12:8f:4c:74:47:97:29:3b:86:21:ea:c2:2b:d9:14:f2:39:ae:
         c2:bc:62:10:7d:55:23:2e:54:29:bc:66:80:26:61:51:84:1f:
         3d:7c:3c:09:86:3c:68:b5:28:fb:7a:db:b8:aa:0a:76:a5:a7:
         8b:c0:9c:86:c3:bb:83:cc:0d:30:df:4b:81:17:c3:74:ad:45:
         8b:ad:c5:58:3a:0f:29:ef:ec:55:54:b1:75:76:7a:a5:c9:b1:
         a5:f5:b7:8b:78:72:fd:49:07:e6:42:99:0a:19:0b:34:24:f5:
         ff:4c:6b:48:c5:0d:83:b9:a5:2e:53:48:dc:03:59:9f:bb:74:
         79:0b:a2:6b:b4:9d:ba:31:7c:25:2c:c8:b1:43:c9:5b:35:55:
         d4:4b:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----