Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32303a3a2f34362d3436203d3e203131393637.roa
File:                     323630323a663732653a32303a3a2f34362d3436203d3e203131393637.roa (raw, json)
Hash identifier:          yvC649o0h+9cOVGlYDroa+v4Cyu/tiHD0bNR4mfaqcg=
Subject key identifier:   16:51:89:06:A9:C8:5C:28:B6:B4:C1:1D:07:32:69:C6:01:2B:C1:58
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       53D1D4F974B6574F0BA87DFFAFBC5979215766CA
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32303a3a2f34362d3436203d3e203131393637.roa
Signing time:             Tue 16 Sep 2025 10:22:53 +0000
ROA not before:           Tue 16 Sep 2025 10:17:53 +0000
ROA not after:            Tue 15 Sep 2026 10:22:53 +0000
asID:                     11967
IP address blocks:        2602:f72e:20::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d1:d4:f9:74:b6:57:4f:0b:a8:7d:ff:af:bc:59:79:21:57:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Sep 16 10:17:53 2025 GMT
            Not After : Sep 15 10:22:53 2026 GMT
        Subject: CN=16518906A9C85C28B6B4C11D073269C6012BC158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:a7:f9:12:c7:c1:b2:5a:22:a4:3e:c4:74:
                    0f:70:b5:19:a3:c7:20:42:30:b4:9d:54:32:6b:a6:
                    3e:ce:76:9f:94:ae:25:91:c0:93:a0:59:05:3e:98:
                    f3:2f:92:e2:8b:8d:b1:cf:93:2e:c9:48:4c:a2:5c:
                    55:5d:88:73:14:f9:6d:c1:8f:31:07:0c:b9:8f:f1:
                    10:17:85:1e:68:bf:45:fa:5a:ac:2e:86:b1:90:d6:
                    bd:79:a3:ef:33:40:bb:9e:33:aa:67:08:45:f2:fd:
                    54:ce:6e:1d:0f:f4:59:1f:46:ef:ee:0d:95:4c:1d:
                    1c:bb:8d:b4:6e:cd:55:8b:08:de:fa:18:a5:0e:f1:
                    ce:66:5f:f4:2f:d5:a9:f5:75:e2:3b:3f:0e:7b:3f:
                    a1:e9:04:ef:af:3f:bc:6a:00:e5:7d:d5:e3:d3:f4:
                    fe:6c:1d:50:68:e7:7c:cf:86:97:7e:f9:71:a2:59:
                    fb:07:71:5a:1d:ae:96:75:7d:34:ab:40:d7:42:f2:
                    65:37:6c:c3:3c:f8:33:e5:bf:7f:8d:50:01:4d:b8:
                    49:aa:8f:6a:4c:ad:2a:95:81:c1:71:34:88:60:09:
                    9d:17:c2:af:39:ff:66:be:c7:8f:b1:ef:45:c8:c5:
                    13:3a:b3:71:ec:24:d8:0f:e0:5e:10:94:45:f5:8c:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:89:06:A9:C8:5C:28:B6:B4:C1:1D:07:32:69:C6:01:2B:C1:58
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32303a3a2f34362d3436203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         bd:25:a6:26:da:d7:ba:d0:56:e2:90:35:d1:e2:c0:96:d4:c8:
         2e:76:b0:22:a4:36:b2:95:13:92:a9:8d:98:1c:fb:ff:70:e5:
         6a:d7:80:84:85:fc:25:50:02:e4:19:66:43:b4:3e:da:5e:e8:
         6d:b6:cb:58:10:78:fd:e7:58:d8:46:bd:9f:49:02:36:a0:c3:
         55:c9:57:12:ea:e2:a8:e4:41:85:bb:b0:3a:3a:cd:2e:07:a8:
         af:a7:f8:b3:94:e9:ee:83:de:14:ae:be:8d:4d:38:00:a6:56:
         e8:85:43:a8:81:34:ed:f0:e4:ec:65:9a:21:11:6f:94:1d:ce:
         e5:62:a1:8c:30:0c:93:be:9c:b0:ae:68:3b:6d:e2:03:28:e9:
         c0:e6:e0:2c:a8:07:1f:43:ae:61:47:01:57:8b:60:86:ff:ee:
         80:c3:78:a4:e9:4b:5b:71:36:7e:23:65:4e:18:6c:1f:f9:61:
         e0:20:64:fd:e6:61:19:37:a2:53:ef:d4:9d:0d:b7:9d:5a:32:
         5d:77:98:98:95:a4:ce:cf:33:b5:76:59:4d:43:c3:ca:6d:13:
         da:e8:e8:90:c4:74:75:92:f7:ee:7d:8d:b1:9c:e7:ec:19:b1:
         d0:22:c4:7d:e1:92:b7:fb:19:1a:58:30:b1:b8:77:29:f9:9a:
         24:e1:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----