Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6665303a3a2f34342d3434203d3e203437323732.roa
File:                     323630323a663936643a6665303a3a2f34342d3434203d3e203437323732.roa (raw, json)
Hash identifier:          VW5wLclxpcd1B732hE6TmG4HF1KDdF1YI7Vjm7AhALI=
Subject key identifier:   F5:7E:9D:ED:C4:6D:62:BE:36:7B:47:CF:95:B9:85:21:BD:1F:BB:84
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       02F452B98AAD86A5476290C5159194C35F9E6466
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6665303a3a2f34342d3434203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:32:59 +0000
ROA not before:           Wed 02 Jul 2025 19:27:59 +0000
ROA not after:            Wed 01 Jul 2026 19:32:59 +0000
asID:                     47272
IP address blocks:        2602:f96d:fe0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f4:52:b9:8a:ad:86:a5:47:62:90:c5:15:91:94:c3:5f:9e:64:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:27:59 2025 GMT
            Not After : Jul  1 19:32:59 2026 GMT
        Subject: CN=F57E9DEDC46D62BE367B47CF95B98521BD1FBB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:6e:b3:b1:32:0e:1d:81:85:e1:e0:40:89:
                    11:c5:30:37:f8:1f:b7:92:ce:36:41:8e:42:fe:0c:
                    1b:ee:e4:b3:23:76:13:2f:ad:a2:8e:e6:1f:56:95:
                    e4:2b:82:73:4d:e0:5b:b2:3b:d9:37:64:a1:08:5f:
                    40:b1:3f:06:a2:f9:fb:5a:50:65:56:2c:63:9b:ea:
                    97:f0:1e:99:2e:62:ce:03:db:ac:07:39:20:2d:d3:
                    4a:08:25:bb:c8:b7:4f:e3:66:54:38:4d:f3:70:3a:
                    80:8b:bc:be:bc:cc:b4:68:30:e0:79:58:3f:b9:ca:
                    f2:0b:e6:88:ff:08:e8:72:15:21:1f:ba:7f:e9:8f:
                    6d:bb:fe:62:f4:12:21:72:6a:a2:5c:e3:f2:73:ba:
                    fc:85:99:ab:0f:9c:dd:2a:a8:16:74:8d:59:70:d4:
                    eb:f8:16:48:d4:8f:e3:05:79:8b:5a:e7:ae:4a:8e:
                    7d:b2:4a:5c:33:c0:94:f7:4d:85:09:2b:6d:c2:1b:
                    1b:ac:b8:b5:c7:32:60:00:d4:4b:b9:3c:9d:0f:16:
                    11:b4:57:fd:1c:4e:65:78:20:68:6f:ff:20:87:4f:
                    1f:2a:e0:dd:69:65:bb:13:ae:eb:34:aa:37:26:9c:
                    ed:15:ee:6a:2c:7c:00:cd:60:0e:c2:89:3f:1b:d7:
                    f4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:9D:ED:C4:6D:62:BE:36:7B:47:CF:95:B9:85:21:BD:1F:BB:84
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6665303a3a2f34342d3434203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:20:4c:13:8b:e2:e5:c6:69:c8:d1:82:b7:71:a2:19:61:99:
         a6:06:52:b9:f4:13:b8:46:f9:9f:c4:98:bb:8f:eb:85:f5:bf:
         c2:06:7a:9a:4a:8b:70:3c:70:ca:f2:7a:6c:ae:21:53:02:87:
         ae:60:e3:38:4f:b7:88:92:9c:81:c4:18:88:07:95:16:8d:a4:
         aa:33:dd:6d:0e:7c:5c:04:57:dc:f3:f5:6f:7d:aa:22:24:1a:
         d5:f9:b6:34:fc:65:b3:4d:a1:e8:16:ae:79:df:ac:e9:db:f4:
         c7:d4:8e:e3:41:70:33:5f:2a:6a:33:c7:ea:0a:d9:9d:f3:f1:
         81:50:00:08:fa:55:81:ef:01:c0:21:72:31:d9:47:9d:cf:22:
         1d:08:f5:26:0f:2c:3c:ff:92:c5:91:b5:92:6b:98:78:c2:4b:
         57:bc:9c:55:51:4e:1b:7a:50:35:f5:68:fb:8c:16:aa:75:72:
         37:e8:c3:74:5c:37:7c:f1:cd:a5:9c:a6:de:c2:db:90:03:a1:
         09:31:e7:fa:44:41:ea:95:dc:c6:73:bc:86:49:fe:48:ab:2f:
         5c:17:e5:a6:b2:0d:b0:9d:fb:65:4f:b0:60:56:b9:22:da:e8:
         32:8b:aa:36:38:74:b1:4a:15:52:e0:f0:02:55:b7:28:d7:dc:
         03:d3:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----