Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33322d3332203d3e203539363738.roa
File:                     323630323a666139623a3a2f33322d3332203d3e203539363738.roa (raw, json)
Hash identifier:          WsafW2/VIc0PivD8o/IbRY3d3tTNILFkdMAO3LVEl8Q=
Subject key identifier:   95:8C:83:7D:DD:1A:26:47:22:46:E6:21:73:AB:E5:27:5D:C6:45:14
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       03E535FE16D8A095CA9BCE305C8FFA46429DE069
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33322d3332203d3e203539363738.roa
Signing time:             Fri 31 Jan 2025 22:13:51 +0000
ROA not before:           Fri 31 Jan 2025 22:08:51 +0000
ROA not after:            Fri 30 Jan 2026 22:13:51 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e5:35:fe:16:d8:a0:95:ca:9b:ce:30:5c:8f:fa:46:42:9d:e0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 31 22:08:51 2025 GMT
            Not After : Jan 30 22:13:51 2026 GMT
        Subject: CN=958C837DDD1A26472246E62173ABE5275DC64514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:f5:67:47:63:0b:c3:fa:1d:6a:0b:6f:40:
                    33:f6:08:a3:91:e2:70:42:74:c8:6c:bb:94:2b:08:
                    b0:e1:88:22:f6:21:22:b5:74:9e:5e:9e:44:45:6b:
                    01:1b:a9:61:74:70:2b:93:3f:ea:14:a4:39:00:ba:
                    f4:70:cf:b0:f6:fb:85:38:37:a9:f7:00:05:22:b1:
                    12:45:6e:45:e5:64:40:ac:ad:6a:01:1a:14:c3:1a:
                    57:a7:d1:ec:92:b0:f8:70:2b:dc:61:22:d1:a3:99:
                    e2:c6:b1:f3:90:99:9c:04:ac:25:5f:80:e5:ea:37:
                    0b:e5:20:f3:3c:fb:a3:aa:ed:78:19:4a:1d:c6:bf:
                    58:c3:c0:da:b2:92:c5:42:2d:2d:ac:2b:54:26:5b:
                    85:8a:29:76:26:44:db:76:94:f6:45:80:dd:73:a1:
                    11:87:3d:c7:1f:a9:f0:34:cf:ea:27:6c:9b:95:65:
                    28:3b:21:12:af:50:f0:fc:3f:ce:53:3c:cc:28:c8:
                    f0:95:68:a1:83:6e:52:8f:2d:0d:49:2b:0b:d1:f6:
                    f9:d5:7a:c9:e8:55:b1:e2:d1:3c:10:2a:6a:ea:ac:
                    e9:d2:15:86:a0:f9:05:40:59:c9:ef:d3:c1:5d:95:
                    f6:fd:14:b4:b0:dc:ca:5a:2a:38:ce:5a:c5:7b:6d:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:83:7D:DD:1A:26:47:22:46:E6:21:73:AB:E5:27:5D:C6:45:14
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33322d3332203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:2f:58:6e:d9:6e:85:4a:c9:7b:7f:75:4e:0c:93:2c:a4:ab:
         45:55:b2:6c:b7:0b:14:aa:99:3b:66:56:bf:38:6c:73:1e:25:
         14:46:4d:91:da:04:af:56:41:32:47:74:0c:2a:85:a1:49:38:
         37:9b:21:dd:f6:03:ba:c1:b3:f5:1a:f2:58:99:44:0b:8b:a9:
         15:71:ac:bc:84:d0:e5:73:43:51:06:81:d0:a7:7a:ce:34:77:
         a2:3f:1a:da:45:8a:06:8d:d5:3b:1e:d2:27:14:5e:09:26:2e:
         5a:23:fc:93:16:d3:29:b8:ed:87:ae:1d:96:24:73:f2:d7:36:
         dc:0f:72:ce:6d:ab:83:36:9b:f0:67:20:84:46:af:74:c7:54:
         1f:48:08:85:1d:05:14:e2:3a:2c:83:59:34:82:67:f0:9d:b9:
         4c:c1:c5:fc:92:e0:b6:86:17:51:04:a2:77:7b:ff:25:91:44:
         ee:04:18:9e:7f:3a:2b:5f:4e:d7:db:22:c7:a9:32:3d:7b:ff:
         37:f8:2a:ee:d5:2b:18:5d:73:9d:b8:da:73:68:1d:80:86:53:
         d0:4f:f4:76:2d:cc:e4:61:39:08:39:83:b8:55:b0:8f:8e:84:
         80:e5:df:7b:ba:a2:7d:0e:40:68:b9:07:d4:17:2f:aa:3c:ea:
         c4:e7:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----