Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          AuNCVRs5Nmd3GBZgbGzIkubJx51oqtOfb7Ae449J/cE=
Subject key identifier:   74:21:2E:71:70:55:6F:CB:23:7F:CB:51:6E:86:E5:39:2B:30:F1:F7
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       71699A9C428B8F6FA2DE8C975BE52B6229E48252
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:00 +0000
ROA not before:           Wed 02 Jul 2025 19:28:00 +0000
ROA not after:            Wed 01 Jul 2026 19:33:00 +0000
asID:                     47272
IP address blocks:        2602:f96d:f71::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:69:9a:9c:42:8b:8f:6f:a2:de:8c:97:5b:e5:2b:62:29:e4:82:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:28:00 2025 GMT
            Not After : Jul  1 19:33:00 2026 GMT
        Subject: CN=74212E7170556FCB237FCB516E86E5392B30F1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ff:05:d7:2b:21:de:a8:73:6b:41:a8:bc:f6:
                    ae:5c:8e:b7:96:87:23:7e:db:57:d4:33:af:d5:f1:
                    f7:72:0b:c6:c6:03:d8:07:a2:6d:30:87:38:a2:9d:
                    06:66:62:27:d5:03:bc:5c:08:06:c0:7b:60:d2:c5:
                    30:4f:af:01:6d:31:f7:66:13:6e:ff:0a:7e:62:3a:
                    c4:c9:6d:e1:37:9a:8f:27:c5:ff:07:39:03:df:e2:
                    9b:4d:82:fd:37:be:e9:3b:9d:72:8c:1f:e7:de:1d:
                    68:12:f7:6b:4a:32:2d:94:61:db:26:49:59:49:12:
                    3d:3e:59:35:ad:d0:40:55:a2:55:1b:c2:17:cb:95:
                    5d:91:b2:95:86:65:06:b4:42:73:7d:10:64:00:42:
                    c5:19:c6:5a:b6:73:30:72:6e:c3:d4:d7:75:1d:f2:
                    95:31:48:d1:9d:75:8b:15:8f:d2:30:74:87:3c:8a:
                    f9:09:88:cf:b6:51:e2:d3:d9:1a:d6:f2:31:8f:93:
                    9e:4f:ce:a4:e9:7a:59:e3:dd:8d:79:1c:ea:d3:00:
                    47:a2:2e:28:2f:4f:11:66:85:0d:95:7c:8a:a1:f4:
                    db:39:5b:1f:34:5e:0a:05:ae:ca:de:3b:44:ac:e7:
                    0f:1e:92:5d:4e:45:6f:1c:cf:7e:0e:8d:da:4e:57:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:2E:71:70:55:6F:CB:23:7F:CB:51:6E:86:E5:39:2B:30:F1:F7
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f71::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:92:b8:39:04:f0:fe:b9:77:03:3e:7c:4c:b4:a1:3d:e7:
         c5:84:b2:23:e1:ec:30:01:5d:55:d7:2c:5f:f9:ff:96:a1:5b:
         77:c1:19:37:9c:0e:5c:34:e9:20:f1:70:43:ab:83:35:27:47:
         28:58:0d:46:37:ab:1e:d6:e6:15:32:2c:57:f0:f0:1e:1e:b0:
         e0:49:91:c2:60:5a:84:d7:6a:15:99:48:43:b1:48:45:2f:59:
         72:1c:10:81:ad:bc:85:da:b9:36:26:6f:dc:45:11:f2:20:cf:
         e8:b9:7f:f1:fd:9c:86:ac:38:cd:1f:51:45:48:e3:f3:f4:b0:
         82:a6:ab:37:32:5c:ee:b4:48:84:65:b1:fc:c6:e3:59:8d:80:
         9b:fe:c7:71:e0:1d:90:43:1a:50:92:ee:1f:99:0c:85:56:20:
         98:6b:70:06:fc:ef:2a:9d:02:84:9d:0d:93:fb:6b:74:5b:17:
         09:96:1f:28:8f:bb:ed:13:09:2e:66:99:27:22:d8:80:a5:6b:
         d0:de:94:a6:54:cd:71:80:8c:be:49:5c:09:ac:22:0a:92:8d:
         38:13:74:88:b1:66:38:7b:e1:e5:c9:46:23:64:2e:2e:d9:04:
         7b:06:68:95:db:b4:8f:49:77:97:6c:7a:76:c3:60:6b:d9:7c:
         69:20:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:30:22 2025 by rpki-client