Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630323a3235303a3a2f32382d3238203d3e203436363930.roa
File:                     323630323a3235303a3a2f32382d3238203d3e203436363930.roa (raw, json)
Hash identifier:          i5mGDDOmKR0VYWl+Ttdw9b7noH6JwuSVk3XKzlRzYJw=
Subject key identifier:   2F:6F:AD:B2:B8:83:30:5F:84:E4:07:35:4B:5A:EB:C1:7C:0D:22:DA
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       6D1AE0540C01026914D5DB5FCD1CC8EF14267EAE
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630323a3235303a3a2f32382d3238203d3e203436363930.roa
Signing time:             Thu 27 Feb 2025 05:08:51 +0000
ROA not before:           Thu 27 Feb 2025 05:03:51 +0000
ROA not after:            Thu 26 Feb 2026 05:08:51 +0000
asID:                     46690
IP address blocks:        2602:250::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1a:e0:54:0c:01:02:69:14:d5:db:5f:cd:1c:c8:ef:14:26:7e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Feb 27 05:03:51 2025 GMT
            Not After : Feb 26 05:08:51 2026 GMT
        Subject: CN=2F6FADB2B883305F84E407354B5AEBC17C0D22DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:b1:24:b6:12:55:95:8f:e3:e8:ad:b1:15:
                    a5:2e:20:93:c4:e8:7c:05:0a:8c:5b:a4:5d:92:30:
                    12:d3:66:42:5e:63:49:a1:04:9c:b6:58:b3:f1:f0:
                    44:c5:3a:7d:b1:27:21:1e:9a:2f:66:b8:6e:e4:36:
                    2c:a4:bb:97:eb:10:9a:0d:00:a6:f0:af:a7:65:ce:
                    85:90:43:65:40:ea:d1:4a:29:04:9b:e9:f8:ff:1c:
                    ec:c9:58:c2:8f:e3:43:b1:14:95:e9:7f:d3:56:d1:
                    5f:cc:63:4b:32:62:a8:1d:56:c9:7e:c7:69:19:81:
                    a8:e0:ae:f0:ba:dd:8b:2f:16:a8:d2:c9:56:49:94:
                    7f:2e:50:de:a9:80:6a:11:c3:15:a7:76:d5:d6:99:
                    a4:c4:2e:09:a5:4a:04:1e:2b:58:2c:bf:f2:bb:96:
                    43:4b:69:c5:d3:2a:aa:a4:fe:ee:ce:68:f7:f8:51:
                    68:87:63:50:d5:a4:53:9b:10:9f:2a:d9:ba:1c:76:
                    dc:94:d4:74:c1:c8:2b:27:12:ef:bd:83:c6:59:fb:
                    cf:43:98:45:8e:3e:61:2a:8f:d8:c9:c4:2a:20:53:
                    2e:1d:76:3b:32:5e:a4:b8:6a:9a:fb:17:b8:92:f9:
                    3f:13:5e:1f:18:04:b3:ca:5c:f4:10:f2:33:ea:b2:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:AD:B2:B8:83:30:5F:84:E4:07:35:4B:5A:EB:C1:7C:0D:22:DA
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630323a3235303a3a2f32382d3238203d3e203436363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:250::/28

    Signature Algorithm: sha256WithRSAEncryption
         d7:46:de:26:66:fe:0b:1e:cc:e8:1a:4e:2e:a7:85:db:a7:c0:
         34:b3:1d:fd:b1:4a:67:2c:d3:3b:9b:7e:37:33:14:ec:37:fb:
         a8:db:2f:b9:80:44:83:5b:fb:55:8c:70:88:f9:f1:78:ad:98:
         37:d6:e2:15:6d:f5:ec:92:fb:a5:55:ca:0b:c6:1b:7d:e2:62:
         9c:a4:80:fb:f3:9a:44:47:07:3b:15:c9:03:ed:50:82:6e:d1:
         17:3d:b1:28:18:c2:31:f2:89:ca:4c:cc:13:03:98:77:13:ae:
         f6:68:18:2d:ff:86:ba:59:42:9f:08:88:97:dc:74:1a:9f:00:
         38:ef:0a:5e:c1:d5:2b:3c:e3:2e:dd:ba:8b:3c:c6:29:4c:fb:
         30:9d:dd:6a:1b:10:24:7b:8b:c2:db:df:07:1b:a5:8d:c9:8b:
         be:b7:fc:eb:bc:56:94:47:22:4e:58:2d:17:78:ca:4a:2b:c0:
         09:85:38:1f:af:83:6b:cb:6d:ff:02:0d:22:c6:29:3c:07:82:
         aa:f2:cc:29:7d:c8:b2:be:1e:9c:d4:9f:90:2b:42:e9:a5:95:
         d8:65:2a:2a:bd:ac:d3:80:a4:39:98:0f:33:2c:2f:ea:4c:d2:
         86:2d:ec:be:1a:f3:ba:a0:18:65:d1:b9:7e:44:2d:1d:6b:72:
         e4:77:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----