Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa
File:                     323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier:          znHMqAFcKeyYffd+7oUjJ0zo7KlmlEsTNmJxAiYxIZ8=
Subject key identifier:   8B:6E:B7:C3:AD:64:71:E2:EB:15:5E:89:C8:61:38:28:E0:1F:EB:0C
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       1CC912CF1BE08C1DF596808FF058290B38849AD1
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:00 +0000
ROA not before:           Wed 02 Jul 2025 19:28:00 +0000
ROA not after:            Wed 01 Jul 2026 19:33:00 +0000
asID:                     47272
IP address blocks:        2602:f96d:940::/42 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c9:12:cf:1b:e0:8c:1d:f5:96:80:8f:f0:58:29:0b:38:84:9a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:28:00 2025 GMT
            Not After : Jul  1 19:33:00 2026 GMT
        Subject: CN=8B6EB7C3AD6471E2EB155E89C8613828E01FEB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:86:40:42:35:a3:76:27:c0:ba:54:45:30:
                    99:1f:dc:f2:1c:15:2c:e3:3d:00:a8:76:b5:77:ee:
                    3d:1f:e5:75:f0:d3:de:d4:7b:83:e0:93:1f:f9:48:
                    79:9c:ec:4e:9c:8d:67:a1:c4:f5:ed:aa:c2:55:ac:
                    e4:5b:df:a5:97:ca:e3:7b:33:01:7c:e3:63:ad:a6:
                    8f:8f:8a:06:5e:fa:c4:e6:1c:b2:5b:ea:30:ed:70:
                    a6:b3:90:f4:61:2c:76:36:dd:08:eb:d2:43:2a:00:
                    10:b3:a6:b2:83:e8:dd:00:10:62:16:66:fd:72:34:
                    16:35:2d:d8:f7:b7:79:1b:56:78:85:69:58:e9:6d:
                    65:13:59:bc:ce:48:a3:d0:48:b0:ae:da:33:2c:55:
                    db:35:29:2c:61:f4:f8:01:ba:80:31:34:b3:e0:13:
                    44:ff:5f:04:23:50:a9:5d:df:07:4f:49:09:e7:35:
                    bc:fe:7b:35:09:35:70:20:91:31:1b:91:95:a8:a9:
                    f5:7e:ab:92:8a:a2:f8:ea:0a:fb:52:9f:0b:f9:d2:
                    ca:7a:0d:65:03:80:2f:10:dc:9a:60:24:a7:38:bf:
                    ab:c4:43:03:e2:e1:2c:09:07:a7:5f:4f:e1:fe:d9:
                    97:17:7d:71:1a:a6:23:a0:58:e3:e8:2d:15:bb:b1:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:B7:C3:AD:64:71:E2:EB:15:5E:89:C8:61:38:28:E0:1F:EB:0C
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:940::/42

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:fb:a6:79:f9:34:63:72:d0:4f:89:c9:1b:64:36:f8:a7:
         66:53:d6:ca:13:1a:e0:3c:f2:dd:ee:f4:7e:e6:e7:cc:e5:78:
         ec:32:f5:e6:4b:de:46:0b:4d:5b:d2:f5:c6:df:68:f5:74:60:
         e0:fe:3a:e1:3c:7f:43:dc:b3:1c:60:83:32:4a:5a:16:d8:5f:
         e2:84:75:08:66:25:5b:14:ef:7d:c4:2f:e1:42:18:d6:f1:21:
         5e:b0:96:24:a2:31:b4:62:98:02:e5:32:38:32:ad:8c:48:a3:
         87:64:1d:5b:c3:e8:0e:2d:17:81:61:51:6b:be:4e:e8:b4:ad:
         5a:86:f7:ae:1d:00:a9:c9:34:70:c3:65:53:52:2d:24:0e:04:
         6d:c1:fe:64:e4:72:d5:e5:60:d8:a2:5c:32:b4:4b:ac:c6:11:
         9a:f2:70:16:f2:83:0f:55:03:5b:05:73:3b:58:29:df:4f:f7:
         c2:3f:49:6d:64:90:56:8a:1f:e6:52:e9:2c:7e:a8:89:4c:72:
         ad:3f:80:61:08:8b:e8:d6:db:9b:d2:19:b9:e4:60:f4:1d:e1:
         17:6e:23:a9:1e:a4:bb:77:b3:61:83:a3:c8:25:c9:7a:b4:7c:
         79:a9:d6:79:da:80:ef:ae:73:1d:26:b6:2c:6e:c9:fa:56:4d:
         7e:0e:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:30:23 2025 by rpki-client