Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa
File:                     323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa (raw, json)
Hash identifier:          p3HBP56A9bx2THb08uRoYeVyvO9Po+dbNQDSTwziwEY=
Subject key identifier:   05:2C:AA:11:09:A6:5C:9C:1A:85:92:60:E5:C8:F6:36:23:47:8E:CC
Certificate issuer:       /CN=f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f
Certificate serial:       767077B0715E9B2EE2933C21A72DA72D8F4A63FD
Authority key identifier: C3:DC:72:ED:F6:AD:79:33:33:6A:CA:8F:AC:C7:21:A7:0B:24:9F:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa
Signing time:             Thu 03 Jul 2025 08:25:33 +0000
ROA not before:           Thu 03 Jul 2025 08:20:33 +0000
ROA not after:            Thu 02 Jul 2026 08:25:33 +0000
asID:                     51939
IP address blocks:        2602:f96d:f25::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:70:77:b0:71:5e:9b:2e:e2:93:3c:21:a7:2d:a7:2d:8f:4a:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f
        Validity
            Not Before: Jul  3 08:20:33 2025 GMT
            Not After : Jul  2 08:25:33 2026 GMT
        Subject: CN=052CAA1109A65C9C1A859260E5C8F63623478ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:cd:08:d9:e4:26:09:bb:e2:28:11:4c:e2:
                    32:2d:c4:0c:4c:45:3a:39:37:95:ba:92:b0:d4:5e:
                    21:ad:cd:3e:90:20:ee:29:13:58:3e:b9:28:ed:0d:
                    76:6b:92:3d:3c:bb:25:94:5e:17:e9:70:57:ee:86:
                    67:f9:95:c0:06:ac:88:a5:f6:20:f3:69:15:bc:6c:
                    74:f7:31:b6:ba:c0:27:b3:a5:16:52:80:a2:ff:ce:
                    69:eb:b7:71:82:bf:3f:9d:0b:e7:e8:f3:c2:93:11:
                    19:a6:9a:be:ee:a2:52:c8:f0:e8:09:de:1a:75:a1:
                    54:55:2e:79:df:d6:f3:49:31:5c:af:60:b8:1c:6e:
                    67:6f:42:00:e2:89:27:44:f6:61:ad:72:6a:0b:32:
                    ff:35:45:20:6d:05:4f:b1:1b:b5:3b:cb:30:7c:a4:
                    5c:80:ac:16:91:e2:ba:46:bc:cc:e7:b8:f1:2a:65:
                    63:68:40:09:08:57:7b:c2:da:cb:c2:47:4e:a4:fa:
                    a4:f2:e6:30:08:25:c0:fa:37:9f:d1:bb:3f:21:92:
                    bf:0a:b1:e2:91:91:3a:53:aa:8b:77:79:e7:6b:48:
                    ad:90:9f:5f:74:32:ef:4a:45:e6:7d:5b:ff:8f:57:
                    19:91:74:24:2e:f1:8e:b9:53:60:e5:d6:a2:42:54:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2C:AA:11:09:A6:5C:9C:1A:85:92:60:E5:C8:F6:36:23:47:8E:CC
            X509v3 Authority Key Identifier:
                keyid:C3:DC:72:ED:F6:AD:79:33:33:6A:CA:8F:AC:C7:21:A7:0B:24:9F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/C3DC72EDF6AD7933336ACA8FACC721A70B249F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba8518a8a6f3109fef543def94edf8388aa287ac8f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6632353a3a2f34382d3438203d3e203531393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f25::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:1b:3a:0a:e4:5b:9e:03:48:e0:b2:d4:94:86:0d:73:d4:
         84:e9:fe:bc:e8:59:16:45:13:e5:38:57:85:49:11:01:6d:92:
         72:f4:aa:2c:4b:41:8a:42:36:62:89:79:84:ac:21:e8:c6:16:
         bd:d0:10:ff:58:28:df:52:6c:e6:84:07:b7:79:c2:da:2e:c6:
         14:fb:dd:51:d4:0c:38:bd:bf:1a:bb:81:98:0c:c7:40:3f:cc:
         28:e8:58:cb:01:1d:06:2b:ec:49:a3:39:5f:76:62:cc:91:83:
         ac:d8:36:b7:0b:c7:7f:d1:a7:03:aa:e2:89:61:18:fb:25:1a:
         00:61:54:6e:d0:19:97:99:10:2f:a3:0f:91:4a:16:95:b2:62:
         2e:77:b4:09:53:da:be:96:9c:ff:ad:f6:ba:ab:d0:4f:2e:37:
         0f:ec:e1:7e:3a:42:23:7b:77:b3:33:de:3b:46:98:8f:1b:04:
         18:ad:3c:7e:67:39:7e:93:1e:3a:54:06:bc:7b:95:6c:18:a6:
         cd:a8:62:7f:71:53:77:ac:bb:42:9d:4a:71:18:5d:dc:74:2e:
         ae:2f:8e:19:d4:5e:28:82:af:48:aa:02:7c:11:b4:bc:03:3c:
         b7:c6:7e:c1:c3:6c:01:ea:57:70:17:38:49:98:e5:fd:9c:8c:
         ed:8b:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:45:59 2025 by rpki-client