Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa
File:                     323630323a666139623a3a2f33372d3337203d3e203539363738.roa (raw, json)
Hash identifier:          jHDRRkRkqvAMZI1+V7KjZ3v81rSa0QlrfxdRb261weI=
Subject key identifier:   76:44:80:75:AD:F3:2D:0D:6B:7B:F0:DF:74:A8:24:7F:DC:D6:35:62
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       1084967FEF78DA3367CD926A65958F83A39D6250
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa
Signing time:             Mon 27 Jan 2025 12:14:11 +0000
ROA not before:           Mon 27 Jan 2025 12:09:11 +0000
ROA not after:            Mon 26 Jan 2026 12:14:11 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:84:96:7f:ef:78:da:33:67:cd:92:6a:65:95:8f:83:a3:9d:62:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:11 2025 GMT
            Not After : Jan 26 12:14:11 2026 GMT
        Subject: CN=76448075ADF32D0D6B7BF0DF74A8247FDCD63562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:36:55:49:24:ed:53:86:cf:59:44:6f:71:
                    b0:8d:42:58:8a:de:65:59:f7:d9:4f:d7:63:79:68:
                    4d:f9:66:66:3b:ad:da:5a:16:24:a8:38:aa:9f:04:
                    2b:af:18:3f:7a:df:0a:66:c6:7b:fd:0e:b0:d2:b1:
                    f0:27:49:9b:1e:05:10:56:a6:c9:f8:57:3a:48:be:
                    f8:c5:bb:5c:de:d9:66:9b:95:26:66:d6:bc:11:9f:
                    6d:f1:ab:f3:46:24:6c:e2:74:03:6d:46:49:37:0b:
                    36:64:c4:18:5f:c1:f0:e5:a2:d9:ca:d8:99:8f:d1:
                    58:d2:ae:03:0b:be:d0:a3:86:c1:49:07:29:3f:e4:
                    73:cf:91:a0:28:31:7e:cc:b7:c7:4c:85:49:d1:ca:
                    1b:d5:7a:1c:4d:36:fd:4b:6e:9d:4a:58:8a:38:5a:
                    38:64:a4:bc:5d:e2:1c:91:f8:15:0b:0d:06:26:e1:
                    18:4d:0a:1b:65:a8:7a:53:b5:26:14:31:72:10:50:
                    ad:50:66:e1:7b:4e:2a:90:1a:ec:91:2b:9d:38:c7:
                    22:8a:35:f8:b4:40:2d:cd:47:63:b5:48:cc:35:4f:
                    76:30:4e:02:2e:73:7f:6c:62:de:e1:db:c1:a3:02:
                    a4:4a:bf:f8:4d:22:67:c4:c4:b7:32:9f:c1:3a:ce:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:80:75:AD:F3:2D:0D:6B:7B:F0:DF:74:A8:24:7F:DC:D6:35:62
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/37

    Signature Algorithm: sha256WithRSAEncryption
         da:5a:9c:41:d1:2f:f2:13:b7:a1:ab:af:4c:d4:97:0b:32:aa:
         7d:8e:78:8c:05:e3:af:eb:8d:05:cd:a8:d1:d0:30:89:5e:4a:
         7d:29:57:fa:74:b4:48:89:13:6b:5e:9b:25:5e:1c:dd:22:f8:
         38:41:4f:c4:63:f6:72:4f:cd:fd:0a:1a:f7:71:87:db:47:a2:
         40:a4:86:98:ab:cf:1e:0d:bd:d5:8c:aa:5f:08:e2:46:2d:19:
         0b:5c:fc:de:10:c1:18:1d:ff:0e:11:55:cd:09:71:41:a0:bb:
         3f:d7:ba:91:3d:ca:17:7c:0c:24:dd:5c:12:bb:ed:a2:ca:6f:
         f6:d9:b4:0c:a6:bd:22:40:d9:dc:e4:77:a9:8a:f3:f1:40:56:
         b7:af:b9:19:ab:1f:f1:11:20:7f:e5:b3:95:b6:e3:a8:c8:1b:
         5f:ad:0e:1a:96:7d:d5:ae:6f:28:61:c5:70:ea:13:a8:13:f3:
         61:bd:6c:c1:09:02:82:4d:7b:ae:58:6e:88:dc:42:c7:e5:f4:
         e7:49:46:4f:22:1e:68:9a:d0:a2:42:5a:3b:82:2c:8e:38:a0:
         fe:fe:1c:ed:63:af:88:ec:c0:f0:1d:85:85:47:1e:f0:da:bd:
         9a:af:a0:92:28:5c:da:df:2d:5e:bc:d7:ef:29:aa:d0:96:6f:
         a4:9b:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----