Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          6CSUHmWZzJq7spbn8dff+QC0WOgJ+LsBtDhT3Nv2WlQ=
Subject key identifier:   58:4E:5A:D2:5E:93:39:97:6D:96:27:E6:42:01:6D:2A:B9:A6:1E:1A
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       23A6ADBF22B803F6A6CB0A97EDFFE6EAD2464463
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 16 Sep 2025 10:23:26 +0000
ROA not before:           Tue 16 Sep 2025 10:18:26 +0000
ROA not after:            Tue 15 Sep 2026 10:23:26 +0000
asID:                     11967
IP address blocks:        2602:f72e:25::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:ad:bf:22:b8:03:f6:a6:cb:0a:97:ed:ff:e6:ea:d2:46:44:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Sep 16 10:18:26 2025 GMT
            Not After : Sep 15 10:23:26 2026 GMT
        Subject: CN=584E5AD25E9339976D9627E642016D2AB9A61E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:d8:1b:50:d6:cd:66:9e:e6:c9:9d:12:d9:
                    3c:f3:07:d8:fc:96:03:d9:4a:4c:3c:cb:d5:e6:7a:
                    79:3c:78:c2:2a:a6:56:6e:69:b1:49:ef:f2:4d:88:
                    02:55:d7:42:f9:92:d6:8a:47:4d:8b:5c:ab:bd:29:
                    ed:84:5e:d4:fa:c5:9b:3a:46:fd:e6:8b:ea:79:97:
                    af:1f:d2:cb:99:68:4b:6f:cd:2d:a6:6f:43:ea:b5:
                    49:6a:29:2e:16:23:03:b1:53:1f:ff:58:a0:a4:86:
                    92:3b:48:8f:44:f1:4e:c5:3c:15:18:51:22:a8:15:
                    be:35:fc:91:82:42:dd:82:aa:63:4c:e3:f1:0d:26:
                    23:8f:32:71:36:2a:ff:3c:75:14:7f:3d:1f:ae:1e:
                    ad:5e:b6:80:eb:03:17:ef:30:df:ed:64:3d:66:37:
                    8c:df:ed:50:6d:a4:a9:be:6c:83:75:4c:3b:5a:bd:
                    4c:51:e9:04:53:64:0d:18:71:db:c8:44:b8:f9:a1:
                    7c:f1:d2:16:4e:ae:20:d4:a9:e9:0a:3e:69:58:31:
                    e3:67:96:85:3b:21:f2:44:19:18:19:f2:97:e4:17:
                    ea:5b:38:eb:5f:a6:5d:aa:6a:65:15:2d:8a:39:c6:
                    bd:06:8d:07:c5:db:8c:33:0c:95:3a:8d:43:17:61:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:5A:D2:5E:93:39:97:6D:96:27:E6:42:01:6D:2A:B9:A6:1E:1A
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32353a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:65:36:80:19:af:af:82:86:11:bd:5d:f6:32:93:07:fa:8d:
         28:45:19:ae:4d:74:09:80:45:9d:06:0e:72:b4:bf:2b:77:ae:
         b6:0a:e5:59:7b:f0:08:05:29:00:08:63:22:aa:06:b8:42:05:
         d3:ce:ad:e6:1e:f0:8f:5f:01:1f:43:c1:92:95:87:3e:dd:a0:
         10:a3:36:49:5e:5c:a7:95:73:d5:e6:7f:ea:72:63:bf:b5:2f:
         b7:c2:a4:12:f9:bc:90:5e:cb:0a:d3:df:11:0b:af:20:98:39:
         d8:13:c8:4e:d5:49:79:af:f7:f4:7b:8b:3b:46:c2:a8:c5:e9:
         fb:54:41:dc:5d:27:4f:08:b5:65:51:61:09:de:d8:5d:cb:39:
         2e:4e:96:88:a3:ed:bf:07:e2:4e:4c:18:cb:83:d2:59:dd:9f:
         b9:c6:a0:9d:1b:8f:3d:f6:8b:f5:0f:6e:47:23:e4:86:c1:72:
         81:49:f1:5e:f0:ce:81:b9:5e:67:06:55:c5:6c:6e:74:57:4c:
         b4:95:88:55:c2:12:22:02:f2:24:70:33:66:3b:04:a3:57:f1:
         83:a7:7e:b0:bd:da:0a:e0:9d:9f:ff:50:ca:c8:f4:67:8e:9a:
         a1:d6:af:90:c1:a4:89:68:af:31:95:36:40:5f:7e:fa:31:7e:
         a8:61:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 03:02:46 2025 by rpki-client