Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132663a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          HFogh7Qql7FHymZ3eR2LHrLcSBDfoTZ8cKqPEsBDlUM=
Subject key identifier:   5C:54:F6:25:E0:1C:09:BC:95:69:09:D6:5A:4F:5C:92:02:06:73:8D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0C7031B7E8E95EC46B412307F76E82CBBAFF68B1
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:12 +0000
ROA not before:           Thu 30 May 2024 12:24:12 +0000
ROA not after:            Thu 29 May 2025 12:29:12 +0000
asID:                     13213
IP address blocks:        2602:ff62:12f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:31:b7:e8:e9:5e:c4:6b:41:23:07:f7:6e:82:cb:ba:ff:68:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:12 2024 GMT
            Not After : May 29 12:29:12 2025 GMT
        Subject: CN=5C54F625E01C09BC956909D65A4F5C920206738D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:43:fd:92:b7:e0:2d:52:bc:91:80:82:b8:
                    3d:88:79:e5:2d:ab:fb:e2:08:00:17:30:c8:57:96:
                    c4:f1:26:45:2b:99:59:b6:98:ab:04:bb:5c:aa:e0:
                    39:be:5d:e2:39:77:1b:55:fe:c3:1a:33:49:4e:db:
                    88:be:2d:b9:ea:cc:3e:b1:ee:9d:87:06:74:06:83:
                    b0:63:14:ad:02:29:38:36:f3:ee:a1:ef:dc:95:73:
                    59:14:7d:b4:76:08:2a:74:3a:e3:98:7d:49:12:1f:
                    45:18:0c:b8:40:dc:51:11:00:02:27:2e:02:4f:8c:
                    fe:60:01:e6:d2:c8:04:d0:81:5b:20:69:51:5d:58:
                    69:38:51:d8:3a:64:07:5b:24:d3:0f:db:6f:d0:f0:
                    1a:f9:0c:d3:22:56:98:52:77:e2:25:bc:73:49:08:
                    34:54:97:da:2b:5c:7e:9e:63:e8:e2:dd:12:47:fc:
                    4c:ce:c4:93:fc:57:d6:6e:a7:5c:5d:03:7c:2a:55:
                    d9:a4:d0:c9:7a:ae:df:a5:e1:be:fb:b6:4a:1e:71:
                    77:be:94:29:5c:06:38:4a:0a:e9:05:16:2d:c7:54:
                    e8:d2:cd:37:d9:89:82:7b:91:75:9a:59:a7:94:72:
                    f1:e6:83:21:c6:14:2f:b9:83:8e:74:73:67:e7:9f:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:F6:25:E0:1C:09:BC:95:69:09:D6:5A:4F:5C:92:02:06:73:8D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:16:7e:1a:b1:74:a6:84:e3:d8:ac:a4:3c:2b:bf:91:b8:4b:
         27:8e:99:3f:c8:c9:42:ed:59:77:4e:28:3d:c0:50:7b:ba:92:
         92:75:a2:63:3e:18:32:c2:e1:d4:98:37:e3:38:d7:29:c5:82:
         c8:fd:bd:ad:31:b5:e2:9c:46:dc:07:de:6d:e0:b3:e2:12:c5:
         9b:c0:3d:a8:e8:71:6e:67:9d:24:ff:0e:58:a7:e5:95:d0:92:
         79:0a:ba:38:11:67:46:b4:b2:58:80:18:9e:18:5d:ad:51:36:
         78:fb:da:f6:dd:94:ca:e9:72:6f:23:47:75:c1:83:2f:9e:98:
         9f:35:54:7c:38:b0:d9:cc:16:1e:0e:ca:bf:fb:83:12:80:c2:
         8c:aa:ff:42:90:1f:87:21:d1:c1:06:65:76:d1:21:1a:eb:3d:
         76:50:a3:ba:45:0b:f6:45:6e:f5:08:00:4f:fd:2b:4b:3b:90:
         b0:41:2a:af:ee:7e:20:a8:4b:9b:8a:ba:55:06:cc:ed:aa:2a:
         d9:0d:26:0e:9f:f4:b2:fc:cb:2a:0d:a1:e1:cc:b3:d1:65:f0:
         0e:ae:7d:77:6f:dc:b9:76:b1:04:c8:29:d4:cc:cb:06:f7:f3:
         34:e6:43:8c:19:b1:bc:7a:3b:0b:02:c7:ab:b5:c9:76:c5:c4:
         c0:8e:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----