Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31323a3a2f34382d3438203d3e20323131343037.roa
File:                     323630323a666163323a31323a3a2f34382d3438203d3e20323131343037.roa (raw, json)
Hash identifier:          9dBlsG/6cGATuPfXltDVLUluWeJNBQrbH2smlKbF3jg=
Subject key identifier:   15:9E:D0:D7:7E:FF:80:FF:CC:4C:F2:40:9B:F4:48:5B:36:D9:27:52
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       0ACAF5F37A0F580D2C0A094985637D66710CB7D7
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31323a3a2f34382d3438203d3e20323131343037.roa
Signing time:             Fri 28 Mar 2025 00:17:20 +0000
ROA not before:           Fri 28 Mar 2025 00:12:20 +0000
ROA not after:            Fri 27 Mar 2026 00:17:20 +0000
asID:                     211407
IP address blocks:        2602:fac2:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ca:f5:f3:7a:0f:58:0d:2c:0a:09:49:85:63:7d:66:71:0c:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:20 2025 GMT
            Not After : Mar 27 00:17:20 2026 GMT
        Subject: CN=159ED0D77EFF80FFCC4CF2409BF4485B36D92752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:11:4a:1e:fa:e7:e3:a7:5d:b7:84:b6:93:
                    3d:86:de:a4:69:bc:ad:c9:88:92:98:8b:d7:e2:de:
                    5d:44:a6:83:5f:17:7c:f1:18:98:1f:e6:6f:06:65:
                    4b:23:dc:61:ff:1f:87:ae:0b:7b:7c:9e:76:6d:4f:
                    18:d6:ee:6f:0d:10:17:ac:c4:73:03:06:cc:4b:ac:
                    3f:df:20:9e:e3:76:75:a6:8a:0e:3b:9e:b2:33:5c:
                    df:fa:ae:ba:0a:bf:63:6a:a8:50:2a:71:6f:b8:d4:
                    b3:01:f7:57:4e:f6:8d:c7:07:9c:72:a8:6a:5b:ac:
                    79:6b:5d:4c:86:2f:8e:33:ee:76:be:89:e5:e1:85:
                    0b:56:c2:7d:55:d1:d7:81:90:bc:12:cd:c0:20:60:
                    c6:49:4c:cf:58:55:3d:50:69:64:97:c7:31:5d:b6:
                    3e:e1:48:86:7a:c1:e5:26:ff:60:0b:d5:86:6e:93:
                    b2:ac:e4:ba:31:62:db:54:8a:8b:ee:52:c2:ee:6c:
                    85:39:09:e4:f8:b0:fd:09:12:df:da:11:b1:0a:08:
                    33:31:96:45:ef:d5:ed:04:24:30:6c:68:22:e7:2f:
                    f6:8d:91:53:58:30:ec:b6:cf:3e:d9:be:39:0d:6f:
                    b2:dd:0f:b3:19:6a:4b:18:3a:1e:21:22:57:a2:78:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:D0:D7:7E:FF:80:FF:CC:4C:F2:40:9B:F4:48:5B:36:D9:27:52
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31323a3a2f34382d3438203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:53:e4:fe:7b:7f:c7:9d:4a:04:1b:aa:f1:43:cf:9a:2a:c2:
         a3:ca:cc:26:2c:8a:ac:21:7a:87:76:40:bf:b8:bb:4c:18:78:
         7e:9d:e8:de:49:0c:ec:7d:f4:0c:ac:a7:9a:7b:21:32:16:e4:
         84:d3:22:50:f6:0f:4c:9e:07:60:57:71:76:e3:67:7d:3e:43:
         b6:cd:e5:f2:5c:e5:6e:54:e1:85:5e:2b:80:32:3e:cd:0c:d7:
         9c:5a:11:39:e7:13:6e:2e:ba:dd:d0:a0:8c:92:ac:e8:82:4d:
         a8:73:d6:61:36:91:88:41:3a:ff:2b:e2:66:b9:15:41:1f:17:
         77:fd:17:c8:2f:8e:cd:02:c9:81:72:8b:ec:25:31:6d:59:5e:
         31:6e:0c:b6:ba:4b:88:59:b4:01:b0:19:af:e9:69:2d:53:e0:
         f6:29:22:d3:a5:88:4f:65:4c:91:c1:b7:bf:0b:e1:da:ed:d4:
         16:0a:b4:da:5d:55:c9:ac:f7:ca:e7:81:8c:44:2a:4c:20:90:
         4c:45:94:ac:3b:42:ae:31:a3:f3:31:50:b7:ca:f4:19:4b:ee:
         5a:4c:69:be:bf:0d:85:be:65:5a:5c:26:6d:09:b1:a6:e9:81:
         42:b8:c6:70:85:76:4f:40:f1:a0:f3:9b:30:2f:b1:06:48:6f:
         62:04:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----