Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34302d3438203d3e203533343237.roa
File:                     323630323a666139313a3a2f34302d3438203d3e203533343237.roa (raw, json)
Hash identifier:          wwqAOSVPIrSapSIVzCO8JheGejeOu4rAMTylVuXB8Xg=
Subject key identifier:   77:70:2A:46:A0:1F:BA:94:D4:3A:37:1F:B3:10:5C:51:6A:CD:F8:F8
Certificate issuer:       /CN=dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424
Certificate serial:       472EAD6D86A8981DE64645151A7A6C62B8974797
Authority key identifier: 75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34302d3438203d3e203533343237.roa
Signing time:             Fri 20 Dec 2024 11:48:04 +0000
ROA not before:           Fri 20 Dec 2024 11:43:04 +0000
ROA not after:            Fri 19 Dec 2025 11:48:04 +0000
asID:                     53427
IP address blocks:        2602:fa91::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:ad:6d:86:a8:98:1d:e6:46:45:15:1a:7a:6c:62:b8:97:47:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424
        Validity
            Not Before: Dec 20 11:43:04 2024 GMT
            Not After : Dec 19 11:48:04 2025 GMT
        Subject: CN=77702A46A01FBA94D43A371FB3105C516ACDF8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:b9:d6:45:12:e3:08:36:7f:71:ae:c9:78:
                    53:0b:80:d6:7b:b5:de:57:53:7a:f8:18:9c:b5:3c:
                    cf:33:4a:ac:38:f0:1b:67:26:85:83:20:3f:1b:32:
                    15:e7:28:61:b4:a0:ef:f4:3a:9e:95:3e:6e:63:a1:
                    69:95:5d:ac:d1:39:9b:fa:95:bd:87:76:10:6f:35:
                    ca:36:fe:83:7b:6f:de:4a:a0:8e:95:53:17:7c:b8:
                    30:4b:04:52:e4:a0:f5:bf:f0:2e:47:ed:dd:ed:98:
                    2c:de:1d:d3:38:20:18:58:14:a3:0c:df:74:c0:d7:
                    81:af:47:18:54:fb:f5:0a:8b:4e:a9:f1:55:90:8c:
                    ee:16:6c:dc:ea:dc:b9:88:8f:8d:12:22:80:84:f7:
                    ff:53:22:c4:c4:3c:ac:99:50:b9:8d:5b:10:60:5d:
                    4d:9c:b2:ee:69:01:8d:90:0a:2e:7f:36:6d:33:be:
                    53:5a:99:2b:f5:4a:74:7a:ae:19:7e:93:a4:1e:0a:
                    94:f3:8d:7f:99:f7:1f:e4:5c:7a:e9:6f:f3:17:f1:
                    4c:8a:46:fe:b9:80:2f:f6:7d:19:b1:5d:6b:6e:0d:
                    6f:10:f6:de:08:b7:e6:ad:d6:3f:59:f7:75:37:d4:
                    9f:b6:ec:a3:52:9b:ad:ea:39:0e:ae:10:bd:a9:38:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:2A:46:A0:1F:BA:94:D4:3A:37:1F:B3:10:5C:51:6A:CD:F8:F8
            X509v3 Authority Key Identifier:
                keyid:75:0F:D3:BA:0F:6C:08:56:3C:DD:BE:91:19:79:FB:12:27:97:64:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/750FD3BA0F6C08563CDDBE911979FB122797649C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5cc13fc8360aaeb13b5e7232add8ba17de6cddad424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34302d3438203d3e203533343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa91::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:84:1e:11:be:86:be:fb:88:16:9c:26:d4:6e:ea:a5:22:07:
         a8:0b:ac:c7:58:ed:b5:af:08:f3:16:14:ca:bd:5b:9d:9e:ef:
         58:14:38:c6:8e:f1:ed:af:ae:61:ad:bd:62:ac:02:07:d1:42:
         6f:1e:74:12:67:f3:0e:48:23:7a:75:d5:d9:db:f8:73:33:1f:
         31:4d:07:7d:9d:55:94:bd:41:84:aa:f1:d3:25:a8:c8:1e:6e:
         e3:87:76:2b:15:1f:ea:b6:09:ef:af:74:05:21:1f:c1:c2:65:
         5d:b4:4a:a8:fe:5a:c5:68:61:bc:79:52:f6:55:36:66:2a:5f:
         6a:87:dd:69:24:45:ef:35:97:d0:e0:a2:43:1b:23:a4:77:ee:
         fb:03:20:fa:13:67:bd:81:fe:80:bc:f1:56:ba:47:25:89:06:
         48:ec:b3:91:22:b1:16:f0:9e:d1:0f:45:0e:bb:cd:3c:72:b3:
         29:f9:e3:dc:c0:31:83:6d:aa:90:0f:ca:cb:12:7d:57:13:3f:
         95:20:0b:8b:1d:a4:a3:0f:ad:df:b5:ef:4c:c8:a2:71:78:36:
         cf:87:30:c0:ab:5d:b2:db:f8:e2:ba:e7:f6:19:3a:2a:80:46:
         d8:74:88:7f:30:6f:69:d4:b6:51:ca:b6:8a:73:b0:76:ca:fa:
         5e:6f:5b:4b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURy6tbYaomB3mRkUVGnpsYriXR5cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGQ5ZDlmZTVjYzEzZmM4MzYwYWFlYjEzYjVlNzIzMmFk
ZDhiYTE3ZGU2Y2RkYWQ0MjQwHhcNMjQxMjIwMTE0MzA0WhcNMjUxMjE5MTE0ODA0
WjAzMTEwLwYDVQQDEyg3NzcwMkE0NkEwMUZCQTk0RDQzQTM3MUZCMzEwNUM1MTZB
Q0RGOEY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9bW51kUS4wg2
f3GuyXhTC4DWe7XeV1N6+BictTzPM0qsOPAbZyaFgyA/GzIV5yhhtKDv9DqelT5u
Y6FplV2s0Tmb+pW9h3YQbzXKNv6De2/eSqCOlVMXfLgwSwRS5KD1v/AuR+3d7Zgs
3h3TOCAYWBSjDN90wNeBr0cYVPv1CotOqfFVkIzuFmzc6ty5iI+NEiKAhPf/UyLE
xDysmVC5jVsQYF1NnLLuaQGNkAoufzZtM75TWpkr9Up0eq4ZfpOkHgqU841/mfcf
5Fx66W/zF/FMikb+uYAv9n0ZsV1rbg1vEPbeCLfmrdY/Wfd1N9SftuyjUput6jkO
rhC9qThqqQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHdwKkagH7qU1Do3H7MQXFFq
zfj4MB8GA1UdIwQYMBaAFHUP07oPbAhWPN2+kRl5+xInl2ScMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2ZjBkNTEwYTY1ZDExLzAv
NzUwRkQzQkEwRjZDMDg1NjNDRERCRTkxMTk3OUZCMTIyNzk3NjQ5Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg4YzY5NDg2LTNlMTQtNGYyNi05Zjk5LTAyY2Y3YWFhYjdiZi9kZDlk
OWZlNWNjMTNmYzgzNjBhYWViMTNiNWU3MjMyYWRkOGJhMTdkZTZjZGRhZDQyNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmYw
ZDUxMGE2NWQxMS8wLzMyMzYzMDMyM2E2NjYxMzkzMTNhM2EyZjM0MzAyZDM0Mzgy
MDNkM2UyMDM1MzMzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvqRADANBgkqhkiG9w0BAQsF
AAOCAQEApYQeEb6GvvuIFpwm1G7qpSIHqAusx1jtta8I8xYUyr1bnZ7vWBQ4xo7x
7a+uYa29YqwCB9FCbx50EmfzDkgjenXV2dv4czMfMU0HfZ1VlL1BhKrx0yWoyB5u
44d2KxUf6rYJ7690BSEfwcJlXbRKqP5axWhhvHlS9lU2ZipfaofdaSRF7zWX0OCi
QxsjpHfu+wMg+hNnvYH+gLzxVrpHJYkGSOyzkSKxFvCe0Q9FDrvNPHKzKfnj3MAx
g22qkA/KyxJ9VxM/lSALix2kow+t37XvTMiicXg2z4cwwKtdstv44rrn9hk6KoBG
2HSIfzBvadS2Ucq2inOwdsr6Xm9bSw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:57:58 2025 by rpki-client