Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a613a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a613a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          v9+BR9efpvEW+qJvv63t7NzJ8x3Jc/Vtymwf9YVaRqo=
Subject key identifier:   A6:03:E8:FC:A3:7D:BD:72:2C:FE:5E:3B:DF:58:9E:49:4C:12:A9:4A
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       0E2C6B52815B20C96FDD80C3A99A992938E7C92F
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a613a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 16 Sep 2025 10:22:11 +0000
ROA not before:           Tue 16 Sep 2025 10:17:11 +0000
ROA not after:            Tue 15 Sep 2026 10:22:11 +0000
asID:                     11967
IP address blocks:        2602:f72e:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2c:6b:52:81:5b:20:c9:6f:dd:80:c3:a9:9a:99:29:38:e7:c9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Sep 16 10:17:11 2025 GMT
            Not After : Sep 15 10:22:11 2026 GMT
        Subject: CN=A603E8FCA37DBD722CFE5E3BDF589E494C12A94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:7b:54:03:f9:76:c7:ce:08:13:95:2f:42:
                    37:3f:ab:b6:33:82:57:f5:42:8d:2c:e1:d0:58:a3:
                    3e:89:00:b1:4f:83:75:c2:66:9f:34:87:29:d5:dd:
                    41:dc:f6:b7:45:51:75:cc:e1:29:23:db:a6:9d:98:
                    dc:6d:da:a7:00:9d:10:92:7c:c6:da:9e:cd:72:9f:
                    50:6e:e3:c6:f1:1d:88:43:1d:d1:2c:36:31:7d:e3:
                    0a:60:31:a8:28:fb:6a:2e:1d:62:9f:61:71:0e:77:
                    38:e6:55:6e:61:cf:27:bb:d2:2c:8e:68:93:17:50:
                    c5:e2:5d:f6:6e:d2:b1:e1:d2:4a:e8:32:97:85:be:
                    25:8f:5e:29:bc:26:2e:e8:40:a0:6d:dd:e4:1c:7e:
                    fa:f8:6e:a3:e8:7c:f2:2c:fc:ec:58:f1:9c:04:a7:
                    29:c2:c8:36:26:6f:f8:19:f0:2e:da:7e:38:50:aa:
                    5a:9b:6c:61:b7:8d:53:4d:c7:f2:44:43:f4:ed:55:
                    68:c8:5c:a6:7f:49:74:5d:5a:ce:be:19:20:ea:54:
                    08:9b:90:6c:d7:bf:db:91:cd:24:2a:9d:ed:76:68:
                    13:e2:88:98:4b:db:97:57:7e:59:fd:28:3b:72:59:
                    4b:17:71:2a:dc:24:5b:41:40:44:2a:65:b2:ba:6b:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:E8:FC:A3:7D:BD:72:2C:FE:5E:3B:DF:58:9E:49:4C:12:A9:4A
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a613a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:66:18:4b:35:fb:24:7f:ab:3c:cf:8e:95:01:fb:54:f9:
         5d:af:19:0f:55:29:df:1c:e3:2b:cb:58:54:d1:76:e4:e7:ec:
         19:34:cf:bd:94:5d:ce:03:03:16:f0:25:63:e1:90:5a:17:2b:
         e5:20:b3:56:4d:19:dc:da:cd:69:8f:3e:44:76:2c:3a:3d:79:
         c0:a3:65:d3:b6:07:71:09:65:63:48:93:e4:43:b8:5c:f7:20:
         8b:06:f4:9d:31:b6:dc:04:3b:af:f1:c7:32:8a:e6:e6:e4:e9:
         d7:25:b9:b0:2a:56:72:9c:30:48:e7:11:a5:a6:2c:61:f5:80:
         f1:99:0c:25:25:39:ed:b1:85:42:15:ce:5a:66:30:94:02:21:
         89:ea:62:42:88:d4:70:1b:56:aa:ac:ac:85:2b:e4:3f:f4:99:
         27:0e:dd:55:67:50:90:56:56:67:e4:bc:b2:b0:3a:a9:7a:b0:
         0a:0b:b1:f0:9f:f0:68:e1:66:cc:19:08:71:82:72:46:e3:39:
         c7:73:94:b2:7e:03:f3:cd:23:19:e2:d9:04:df:18:e1:7e:34:
         6a:2b:8a:6c:a0:00:d6:63:c0:35:08:f3:4e:10:63:d1:67:2e:
         58:e1:f1:6b:6b:e0:03:ea:7a:41:b2:55:bb:73:02:e5:58:c4:
         8d:f1:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----