Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          d+UO3XZa1/2K34RllKnZSQKiYYbHeix2WcQN7IXQfHg=
Subject key identifier:   2F:31:4C:97:FF:22:37:D2:2F:85:C5:E0:45:34:3C:E4:C8:FF:3C:83
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       5965CA78EC64237EBF62BAB935E87AC6397D3655
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:03 +0000
ROA not before:           Wed 02 Jul 2025 19:28:03 +0000
ROA not after:            Wed 01 Jul 2026 19:33:03 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffb::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:65:ca:78:ec:64:23:7e:bf:62:ba:b9:35:e8:7a:c6:39:7d:36:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:28:03 2025 GMT
            Not After : Jul  1 19:33:03 2026 GMT
        Subject: CN=2F314C97FF2237D22F85C5E045343CE4C8FF3C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:67:eb:fb:5a:1a:09:80:05:9d:41:58:d4:
                    61:71:e7:62:6d:73:98:2a:4c:71:71:7f:bc:60:37:
                    b4:89:0d:d8:84:4c:19:42:cb:98:84:22:87:97:72:
                    90:f3:c9:89:d4:51:be:fe:36:21:0b:38:a3:3f:ee:
                    f3:09:f5:7d:c5:ec:88:1b:da:72:53:8c:fa:58:be:
                    8e:cf:11:0a:a5:61:bb:47:a1:4c:78:41:fe:e7:4a:
                    59:e6:a2:48:93:79:d7:27:3a:5f:9e:1a:34:e4:83:
                    cc:32:fb:ee:ae:4f:ce:2c:59:8d:c6:83:c1:fd:2d:
                    a4:75:e8:dc:cc:de:c9:70:a7:db:b6:1f:2b:cf:d8:
                    7b:05:58:65:3b:cc:6a:5b:a0:58:fe:bf:4a:fa:2c:
                    7b:1a:29:50:dd:b5:93:f7:c7:b4:9a:33:99:bc:33:
                    35:8a:68:4c:f1:ac:5f:75:14:33:56:01:fb:0f:8e:
                    03:21:88:b4:a6:0c:63:ae:e7:8e:05:e4:9d:88:66:
                    be:a4:22:83:98:8c:26:f5:e1:64:ec:0d:c2:bf:c0:
                    53:45:65:4b:54:e4:46:bb:e9:6a:8e:d6:66:2e:fc:
                    3d:bf:4b:93:e3:7b:8a:66:9e:3b:ee:bc:bd:cc:8a:
                    f1:5d:9e:ea:4d:d0:4e:29:5c:09:2a:38:93:0f:50:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:31:4C:97:FF:22:37:D2:2F:85:C5:E0:45:34:3C:E4:C8:FF:3C:83
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666623a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:a7:f9:6e:45:f6:b9:12:22:9c:55:c1:af:20:5a:c1:6b:
         5b:cc:8f:ef:f5:52:1a:10:24:a2:67:2c:39:cc:91:eb:76:8d:
         16:87:6f:ee:1c:d4:e4:f6:1a:1e:96:a0:70:95:8f:de:d2:90:
         99:f9:8a:5b:f2:23:c7:b7:6c:87:0e:62:51:45:14:d5:b4:ac:
         9c:fe:e7:ad:96:fe:44:36:c4:45:d8:ee:42:da:fa:0e:49:05:
         ea:6c:16:90:49:dc:a4:30:47:5b:62:53:8d:63:4b:1e:e8:60:
         8d:73:73:05:e4:e7:02:dd:9e:73:cb:7e:68:d2:d2:76:49:78:
         d6:e4:c6:03:e3:80:6b:a2:bb:6b:33:38:74:bd:9e:b7:fb:0f:
         45:de:3c:88:63:b1:a3:06:f9:86:39:45:2d:d7:60:5b:70:19:
         01:42:04:de:ec:6c:57:08:58:b2:4d:95:6a:1a:46:c6:9d:7a:
         bb:89:11:39:b0:e6:18:4e:74:9e:5e:9e:ac:37:c0:d6:76:43:
         f0:1c:ab:25:2a:86:e8:ea:98:f0:11:54:2a:3f:4b:3f:d3:fb:
         2e:ee:32:19:6c:05:ee:27:fe:67:b8:fd:68:28:c5:e4:ee:5c:
         56:6f:9d:c1:34:41:16:ce:fa:7b:23:61:ba:4d:26:11:fe:5f:
         88:c9:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----