Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
File:                     323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa (raw, json)
Hash identifier:          wgx4nqjrCDMR2I+nkikRRayXnnWAUNckVnx/qe5XmlM=
Subject key identifier:   12:C3:44:28:2E:70:0B:9A:4E:DF:09:63:BA:50:47:4D:6C:08:C8:63
Certificate issuer:       /CN=f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f
Certificate serial:       6677BF534D5F44B5A0BEAE67F7B0F6F1E2C0DAF6
Authority key identifier: C3:DC:72:ED:F6:AD:79:33:33:6A:CA:8F:AC:C7:21:A7:0B:24:9F:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
Signing time:             Thu 03 Jul 2025 08:25:36 +0000
ROA not before:           Thu 03 Jul 2025 08:20:36 +0000
ROA not after:            Thu 02 Jul 2026 08:25:36 +0000
asID:                     51939
IP address blocks:        2602:f96d:f20::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:bf:53:4d:5f:44:b5:a0:be:ae:67:f7:b0:f6:f1:e2:c0:da:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f
        Validity
            Not Before: Jul  3 08:20:36 2025 GMT
            Not After : Jul  2 08:25:36 2026 GMT
        Subject: CN=12C344282E700B9A4EDF0963BA50474D6C08C863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:fa:92:d7:43:6d:4a:a8:40:f4:90:d7:68:
                    d1:fa:d6:77:9a:38:bb:bb:13:b0:57:df:b6:40:8a:
                    fb:a2:61:4e:17:e2:30:c8:41:d8:3c:b5:1d:ae:b3:
                    ac:64:2c:64:a0:af:7c:8f:9e:8f:c9:97:53:29:31:
                    28:3b:5b:ed:de:1f:01:80:f4:e4:e2:8d:5f:c7:ef:
                    1f:9a:2b:53:09:53:97:d6:59:97:02:86:a5:6d:81:
                    cc:09:3c:58:59:16:e9:83:d2:8f:3b:dd:14:65:80:
                    4f:8d:25:2e:26:d4:d2:8c:78:3a:4e:a8:c7:4a:95:
                    d1:df:45:af:0b:b8:03:75:0b:6e:48:11:38:6b:d3:
                    a1:01:6c:db:53:17:77:29:1c:ac:0d:39:ec:bd:38:
                    28:40:97:3f:8b:cc:fc:37:6f:2e:cc:51:a2:a7:a5:
                    6c:1e:9a:89:fc:fc:56:62:51:26:22:86:d7:0a:56:
                    5a:d9:58:62:d5:1a:df:d4:9b:39:68:76:62:5b:27:
                    3d:72:6a:e2:21:32:08:22:5a:cc:e3:09:91:fc:e0:
                    68:9a:53:90:0f:92:2b:83:0e:2e:34:c9:1f:0e:88:
                    ff:df:2c:b0:df:53:05:1c:4d:4b:be:28:ce:cd:5b:
                    3d:1b:5b:0d:49:20:c4:e5:a1:a7:5d:4b:d8:76:ca:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:44:28:2E:70:0B:9A:4E:DF:09:63:BA:50:47:4D:6C:08:C8:63
            X509v3 Authority Key Identifier:
                keyid:C3:DC:72:ED:F6:AD:79:33:33:6A:CA:8F:AC:C7:21:A7:0B:24:9F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/C3DC72EDF6AD7933336ACA8FACC721A70B249F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f20::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:61:60:62:4f:c5:c0:77:87:27:b9:da:87:2b:ad:9a:19:
         8e:b6:a7:16:3a:18:9c:29:4f:6e:34:27:62:54:0f:e3:05:1d:
         6c:0a:bc:8b:e9:f5:b2:52:c8:4a:b9:b3:84:5e:37:60:b9:a7:
         fc:4b:9d:74:3d:f6:fc:ce:29:ef:21:06:b7:e1:dc:58:dd:7b:
         85:cd:02:df:79:12:46:cb:d7:bb:d1:17:ef:f7:2d:ad:41:c0:
         bc:35:fc:46:17:ca:7f:a7:30:9c:70:2c:97:85:61:85:dc:55:
         1a:5c:98:bf:17:09:c2:07:cb:47:98:87:b1:09:33:9d:2e:64:
         47:4f:79:46:2e:b7:7e:5c:a0:27:b3:64:3d:e2:54:93:7a:79:
         b2:04:35:f7:27:a6:93:37:ef:fe:df:54:a3:b5:de:6c:63:8f:
         dc:9e:39:22:0a:c4:93:88:dc:90:ab:91:12:1d:37:b4:28:42:
         9d:39:8d:71:70:0c:6f:e5:a6:5d:f0:79:b3:ef:a2:22:e8:68:
         ed:79:e0:d1:4e:94:f4:fc:da:fb:aa:e9:4f:f4:11:57:0a:93:
         ea:b9:02:f7:b5:56:a3:9b:c8:2c:41:0e:01:80:cd:32:cb:25:
         34:6b:b2:05:31:d6:a9:b1:32:fb:f9:44:9b:80:1f:cf:97:92:
         a4:5d:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:45:30 2025 by rpki-client