Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          ooSKgGk9JJ99fyHwjcjv1bWglH9ad11VpxWZtKZ6NRE=
Subject key identifier:   08:19:DF:D2:90:0E:DA:C1:B0:17:EC:E3:D9:26:DE:78:CC:F3:B5:E5
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       30963A23A700F386638B4E6D66F74DF888E83CC0
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 16 Sep 2025 10:23:59 +0000
ROA not before:           Tue 16 Sep 2025 10:18:59 +0000
ROA not after:            Tue 15 Sep 2026 10:23:59 +0000
asID:                     11967
IP address blocks:        2602:f72e:2a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:96:3a:23:a7:00:f3:86:63:8b:4e:6d:66:f7:4d:f8:88:e8:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Sep 16 10:18:59 2025 GMT
            Not After : Sep 15 10:23:59 2026 GMT
        Subject: CN=0819DFD2900EDAC1B017ECE3D926DE78CCF3B5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:2b:1c:d0:ea:87:04:d6:9b:9f:78:a4:ac:
                    68:34:4b:73:19:cb:5a:bc:7c:35:1a:55:20:87:c2:
                    20:01:1c:4e:07:20:95:dc:53:ea:4e:92:96:aa:72:
                    8b:85:49:d6:0d:f4:f0:df:07:bf:52:bd:62:40:99:
                    b2:28:eb:d6:b5:91:8e:65:bb:4b:69:9f:be:77:38:
                    1d:8d:30:a3:16:59:fb:a5:eb:13:2b:db:9d:59:e4:
                    e7:f1:c8:28:72:00:6c:b6:a7:2c:57:7a:30:e0:d7:
                    8a:e0:ff:86:ae:65:5f:57:59:31:05:c5:cd:27:1e:
                    a1:7c:ae:b2:6a:08:66:e9:94:ea:31:fd:7d:cd:2d:
                    6e:14:a5:c8:91:1a:26:e4:f3:d3:be:0c:90:33:93:
                    05:a9:00:83:ad:6c:7b:a3:42:cb:59:ef:68:08:51:
                    29:dd:f3:94:35:39:9e:50:b9:c3:02:ed:60:fd:bf:
                    bb:a1:8b:da:ce:a0:9c:ea:13:7b:9e:7f:a2:a9:65:
                    79:fe:c8:9b:16:1a:44:45:d4:d0:b6:b7:9d:85:af:
                    20:42:99:8a:d1:04:2a:15:eb:3f:f7:1c:80:4e:eb:
                    e1:35:31:8f:92:51:ab:22:33:3d:04:12:2d:f6:bf:
                    99:b1:d0:ab:39:ea:7a:58:58:8f:8d:9e:c4:d6:c5:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:DF:D2:90:0E:DA:C1:B0:17:EC:E3:D9:26:DE:78:CC:F3:B5:E5
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:33:06:10:e2:b2:d4:a4:b9:62:be:98:7f:51:df:63:93:73:
         9d:eb:d3:16:9a:ca:18:6e:a2:01:53:7c:fc:64:64:ba:e3:71:
         98:57:f3:77:45:1c:37:c8:af:2b:c0:5e:9e:57:87:c4:37:89:
         f8:35:3e:9d:eb:42:55:6b:e9:b1:53:36:d5:40:1c:0d:d3:2d:
         a4:e5:9e:90:db:14:dd:84:4d:86:3a:bb:89:e1:e1:ad:a4:92:
         67:71:be:b7:f5:c4:97:e4:54:42:5e:29:bf:b2:6b:ad:34:2c:
         e9:76:27:93:18:d9:67:d5:98:24:dc:a6:ee:1c:e1:3c:e7:5c:
         ac:d1:69:39:f8:1f:1a:1d:64:f4:b1:f9:16:60:b2:ed:6f:81:
         ae:75:64:be:dd:48:f9:01:ec:05:43:38:0f:10:22:db:76:f1:
         c7:2d:99:af:6d:64:7f:ab:d1:ee:8b:03:47:a8:7c:5e:a1:26:
         01:06:90:08:a9:9a:e6:93:3f:50:21:96:c3:c8:6a:c3:4b:bb:
         f0:60:bc:f1:b6:59:27:d7:02:4f:0d:27:7a:91:b8:32:f6:0a:
         38:8f:d9:0e:d8:7a:40:fe:44:b0:40:41:f8:28:d2:ca:b8:4f:
         1b:5a:8a:8e:05:61:00:23:59:05:43:18:02:3e:f2:d7:61:e9:
         68:b8:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----