Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
File:                     323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier:          G6jUg0Ue6XkNeW1uOYmYomPn/HrkTRHUM8HpyrzkYSc=
Subject key identifier:   34:84:7D:C6:9F:1C:ED:59:2C:EE:7F:B7:B7:17:A4:EF:9E:70:13:3F
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       3E8E795D80C467CA1DCBBD066039C6CED1C8066F
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:02 +0000
ROA not before:           Wed 02 Jul 2025 19:28:02 +0000
ROA not after:            Wed 01 Jul 2026 19:33:02 +0000
asID:                     47272
IP address blocks:        2602:f96d:980::/42 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8e:79:5d:80:c4:67:ca:1d:cb:bd:06:60:39:c6:ce:d1:c8:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:28:02 2025 GMT
            Not After : Jul  1 19:33:02 2026 GMT
        Subject: CN=34847DC69F1CED592CEE7FB7B717A4EF9E70133F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:d2:9d:8d:d9:1a:2b:bc:fd:c5:7c:eb:0d:
                    5b:1c:36:cb:c0:42:3c:e8:15:7b:c1:07:47:dc:7f:
                    48:14:a5:9c:b4:ba:ab:bf:06:33:6d:8e:e8:5c:46:
                    42:82:d8:d8:9d:73:e3:03:0c:da:d6:47:bd:81:75:
                    eb:5c:69:5f:4e:f4:55:13:52:57:ec:54:30:0f:dc:
                    06:4a:25:f8:d3:b1:8b:bd:26:4a:73:b7:83:2d:33:
                    42:be:83:b4:64:5f:fc:f1:92:45:f6:ea:ab:3e:e9:
                    83:7c:c8:aa:e2:d8:de:f9:24:6e:5c:09:c0:fa:86:
                    6b:7e:92:4f:24:d1:a0:e4:c1:26:be:47:34:6c:b4:
                    73:dc:f1:67:d0:1a:da:c8:8a:36:f2:50:b2:4e:d1:
                    3f:46:cc:d7:3c:dc:5c:ab:9e:d7:d6:1f:a7:8f:e0:
                    c1:97:f3:d8:d2:c1:48:28:96:b4:cc:47:08:fc:f3:
                    f4:01:67:6b:62:de:8e:7e:35:77:7b:d2:cd:ec:60:
                    ad:2f:0f:1f:91:28:2a:d0:51:e9:a8:34:6e:8b:a2:
                    da:0a:e4:6b:5f:32:2e:10:1a:e8:a4:64:53:91:0f:
                    d3:aa:e4:59:ba:c1:ec:37:4e:13:9b:7c:fd:09:46:
                    5d:02:55:99:71:bc:7f:23:d1:01:03:61:a1:c3:a9:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:84:7D:C6:9F:1C:ED:59:2C:EE:7F:B7:B7:17:A4:EF:9E:70:13:3F
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:980::/42

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:85:d7:d2:96:ef:9f:89:cd:a1:60:16:31:21:3d:cb:4a:
         4b:f1:80:ea:a1:c7:00:a9:36:b4:1b:a6:fd:72:76:8e:d5:a2:
         cb:be:2f:4a:f4:bb:b7:ca:19:c5:7f:81:0c:ba:8b:82:56:de:
         c3:a7:92:ad:6e:f1:29:b2:ec:3e:f8:c7:ec:0e:d9:bf:e7:aa:
         bd:6d:1d:7f:6d:5e:ce:68:a9:43:c7:3f:dd:91:26:a2:11:e6:
         a4:11:7e:b4:70:4c:b9:93:36:18:64:ea:e4:f3:1e:5e:d5:07:
         e7:23:56:86:b4:f5:b7:aa:40:fd:34:b4:14:73:89:32:73:f5:
         3b:b2:3b:19:b2:2d:39:49:45:f5:62:2c:ee:db:81:da:56:b6:
         04:f9:4f:dd:e1:04:5c:e7:7c:a3:49:40:9e:b3:c5:97:f4:dc:
         3d:e4:87:09:0f:11:a6:f8:52:4f:6e:87:80:3e:0f:65:bf:da:
         fe:53:9c:98:a4:24:ff:a9:b9:1c:29:eb:20:fb:c9:4c:a0:e4:
         8d:92:33:c1:a9:91:cc:23:00:fd:80:50:7b:de:0b:b0:4b:8c:
         f0:93:8e:9e:a1:aa:8f:a4:f6:23:51:7b:f0:f8:ff:ed:88:72:
         70:45:93:48:1c:25:34:cf:9f:48:92:8b:57:dd:5a:6e:cd:a0:
         2d:04:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:31:33 2025 by rpki-client