Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
File:                     323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          YNQ+eY3qi3GNPrhrCopZncyqeXsLOvH3pEJ9UCx0dVE=
Subject key identifier:   93:BC:68:04:DE:26:4F:A8:B2:0E:88:99:B2:80:51:9D:9F:48:52:90
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       668925A716D83E8C063CAB11D229552996698E9C
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:32:58 +0000
ROA not before:           Wed 02 Jul 2025 19:27:58 +0000
ROA not after:            Wed 01 Jul 2026 19:32:58 +0000
asID:                     47272
IP address blocks:        2602:f96d:e00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:89:25:a7:16:d8:3e:8c:06:3c:ab:11:d2:29:55:29:96:69:8e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:27:58 2025 GMT
            Not After : Jul  1 19:32:58 2026 GMT
        Subject: CN=93BC6804DE264FA8B20E8899B280519D9F485290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:23:7f:d9:4d:19:81:17:41:8e:58:f0:69:
                    b8:bd:d0:77:9f:0d:d1:4d:ea:df:76:f6:e2:88:2a:
                    01:e9:4d:d9:dc:69:2a:3e:64:87:a6:ed:25:57:53:
                    e6:5d:46:77:d2:10:ea:a6:d0:05:70:dc:b9:61:bf:
                    95:c6:33:6b:98:10:56:8c:3c:4b:f8:b5:76:d7:d8:
                    a3:1b:89:6a:f1:94:9f:bd:62:52:4c:c2:eb:e9:30:
                    d0:a7:4b:4a:c1:a2:ff:34:85:ce:21:67:fd:1f:7c:
                    25:e7:64:8e:d3:20:f8:40:30:82:23:5a:4b:78:b9:
                    0f:e3:65:09:e1:6a:85:c8:91:32:cc:fa:dd:f0:ff:
                    8c:3d:5b:ed:d4:58:a2:4b:f6:7a:bc:96:5e:2c:2c:
                    49:3c:2e:e4:83:74:ab:47:9d:9b:e0:d4:2a:0b:c8:
                    6d:d1:05:92:4d:ce:5d:cf:15:fb:1b:50:02:3c:fc:
                    bf:91:6f:8b:62:0f:34:3f:bd:99:a5:b9:48:ee:08:
                    3f:f0:e9:7d:b8:87:4a:67:59:3d:7d:85:81:ef:5b:
                    3c:a9:22:75:5c:61:66:26:7d:16:aa:8b:d7:3e:4e:
                    13:99:e8:d4:9f:47:33:6b:e4:90:6c:fa:a6:1b:cb:
                    38:8d:24:50:6b:12:9f:7c:92:2c:61:49:bd:bb:d4:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:68:04:DE:26:4F:A8:B2:0E:88:99:B2:80:51:9D:9F:48:52:90
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6530303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:d1:d4:0d:e2:32:a0:fb:ac:aa:6a:1c:7d:f9:a6:2e:4f:
         7f:9a:6c:68:79:db:14:a2:95:60:51:13:f6:a6:df:c4:93:88:
         d1:a1:75:45:ce:27:87:c2:0f:ed:1e:57:1e:35:6d:98:e4:cc:
         bc:6c:74:09:b1:2b:f4:48:b1:7b:2c:00:f6:8b:e0:46:ac:92:
         30:89:ec:6f:fc:e7:28:30:65:1d:b5:72:f8:29:55:bf:47:cb:
         12:8b:07:c9:30:97:34:e7:5e:fd:9c:5b:06:c1:4c:55:cb:3c:
         90:32:f8:2b:f5:ee:f0:27:06:60:58:4b:cb:09:f6:26:e0:4c:
         5b:c9:df:e2:f7:76:f0:f6:e3:96:e7:62:28:3e:b5:f0:fa:b9:
         09:6e:73:ff:4c:8f:2a:9a:2f:52:b7:5f:28:46:97:e4:87:09:
         21:a6:3b:b6:80:11:50:5f:69:4c:a6:10:65:8f:5f:0b:65:67:
         a5:f7:cf:87:3b:e8:39:50:08:38:8b:9c:b9:a6:a0:14:3b:61:
         02:65:2f:48:3e:6a:80:11:59:46:05:62:e2:48:1f:2d:d8:8a:
         b0:9a:0c:1d:bf:ba:7c:3a:41:3c:32:59:c8:55:63:29:1e:59:
         20:82:e1:31:41:e3:0f:43:f7:53:74:49:56:1d:03:d1:93:32:
         bc:84:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----