Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          IXvvJErkc4GRVYHo5/WM64uRgNLHlh/g+E/eP0vB3J8=
Subject key identifier:   5B:79:D9:D2:77:6C:6C:22:F7:82:15:A1:DB:CF:F6:43:F5:CE:8C:4C
Certificate issuer:       /CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
Certificate serial:       45B7B9F78455CB70A538BB40D1F82971EFB07DC7
Authority key identifier: 19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa
Signing time:             Wed 02 Jul 2025 19:33:00 +0000
ROA not before:           Wed 02 Jul 2025 19:28:00 +0000
ROA not after:            Wed 01 Jul 2026 19:33:00 +0000
asID:                     47272
IP address blocks:        2602:f96d:ffd::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b7:b9:f7:84:55:cb:70:a5:38:bb:40:d1:f8:29:71:ef:b0:7d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e
        Validity
            Not Before: Jul  2 19:28:00 2025 GMT
            Not After : Jul  1 19:33:00 2026 GMT
        Subject: CN=5B79D9D2776C6C22F78215A1DBCFF643F5CE8C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:b2:81:38:09:93:ac:99:7f:72:9e:99:64:
                    0c:4e:e9:0f:38:d5:69:6b:c9:55:b3:a4:cc:34:2c:
                    86:cd:69:a1:f8:d4:42:04:61:18:86:88:0d:2d:33:
                    7a:e4:35:f5:ff:1b:9c:3a:6d:be:3e:55:b1:b7:b5:
                    81:84:60:b2:29:dd:ea:fd:7c:f1:6a:86:3a:4f:8a:
                    7a:4d:19:0a:ec:1b:a2:ca:aa:47:30:28:8d:53:c1:
                    5b:ee:5d:5f:83:a9:d3:cf:3f:31:15:5c:bc:1f:b4:
                    f4:bc:8e:9e:cf:6e:60:b1:0c:ed:b2:2f:35:78:bc:
                    0f:d3:70:6f:cd:7e:ba:00:3b:72:95:ec:de:6d:dd:
                    e9:89:85:01:2b:cc:f4:29:11:39:34:33:bd:a2:53:
                    4c:d6:3c:f9:7f:83:d0:10:ca:91:71:ea:b0:71:4e:
                    44:e8:36:38:4b:24:c7:33:54:63:cb:d6:fd:b7:fb:
                    f6:77:47:1a:48:c7:93:0c:b6:65:49:7c:07:09:33:
                    ae:9d:08:8a:1a:e5:d2:fb:6a:4b:d2:be:f5:25:d6:
                    8c:a3:3e:0c:16:ef:41:1f:ef:5a:68:d0:2d:72:7a:
                    ac:45:7f:d9:d9:eb:10:ae:45:47:30:3b:c1:7d:22:
                    80:66:f5:81:de:4d:52:94:ba:c7:a1:e9:92:6c:c4:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:79:D9:D2:77:6C:6C:22:F7:82:15:A1:DB:CF:F6:43:F5:CE:8C:4C
            X509v3 Authority Key Identifier:
                keyid:19:FE:41:34:53:0A:27:25:9A:08:41:90:FB:0C:86:EB:C9:0E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/19FE4134530A27259A084190FB0C86EBC90E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabafcb25b5ab30dd6242ec012c9a6806434dffdbe8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/1/323630323a663936643a6666643a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:74:7a:cb:e3:1e:82:92:8d:84:eb:c2:6f:80:0e:0a:47:
         87:c7:a1:99:e9:a3:1f:7e:49:e7:2e:67:63:0b:4b:3a:89:4f:
         d2:76:0e:69:30:a8:88:90:63:75:39:1b:70:cf:0e:c1:fa:93:
         9b:35:5c:6b:23:64:1f:f8:4e:6d:28:39:ee:04:2d:d0:1d:34:
         73:71:12:cb:c8:8a:d6:0f:bc:48:c3:66:3c:84:59:34:f8:15:
         2e:15:08:0b:40:42:e5:50:6a:a4:72:b8:74:53:7a:99:d3:6a:
         8d:07:58:fd:95:0f:68:a6:d5:5c:5e:8d:d2:ed:53:33:f1:e1:
         1c:ab:f2:4f:a7:eb:51:b9:73:6f:e5:65:ad:b0:26:16:3f:b0:
         a0:07:a1:75:68:c8:17:ab:6e:c6:53:ea:40:40:ff:9e:1b:df:
         d6:b8:ae:03:ce:cf:12:8d:3d:65:44:95:67:90:f2:db:c1:3f:
         51:17:f9:01:2a:35:28:b6:8d:04:bc:a4:52:f7:df:14:c2:c4:
         d3:70:43:d6:7a:4c:db:d6:3f:7c:96:f9:14:45:67:75:97:a3:
         13:26:17:5c:3c:99:a7:f3:6b:bc:d2:ab:92:c3:ee:95:9e:b7:
         69:d6:d6:7c:44:bc:8e:a9:f5:53:69:6d:c2:a9:ee:b7:ab:e7:
         db:21:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:30:44 2025 by rpki-client