Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa
File:                     323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa (raw, json)
Hash identifier:          RjBQi7KOiJifwfd34FVyQDEzI4QAUVwKnH2ETtcpQV0=
Subject key identifier:   7F:D5:50:A3:41:33:4A:63:CE:01:A9:60:7C:61:86:18:CA:5C:2F:1E
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       373652E3D02132F9900F007B35A16A44B8F50E84
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa
Signing time:             Fri 28 Mar 2025 00:17:17 +0000
ROA not before:           Fri 28 Mar 2025 00:12:17 +0000
ROA not after:            Fri 27 Mar 2026 00:17:17 +0000
asID:                     211407
IP address blocks:        2602:fac2:13::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:36:52:e3:d0:21:32:f9:90:0f:00:7b:35:a1:6a:44:b8:f5:0e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:17 2025 GMT
            Not After : Mar 27 00:17:17 2026 GMT
        Subject: CN=7FD550A341334A63CE01A9607C618618CA5C2F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:24:23:1c:a8:77:65:64:2a:c7:31:1f:74:
                    81:97:87:1f:12:e7:00:af:69:be:d7:a7:7f:9f:a3:
                    ca:19:88:b4:7b:9b:c9:f3:84:21:c9:3a:40:2d:2e:
                    13:db:7d:7c:5d:57:8e:af:87:63:75:27:c2:63:a3:
                    90:6f:34:c0:b1:8a:85:47:4b:0c:b4:a1:2f:4b:e9:
                    e9:87:1c:47:2c:5d:36:78:b9:29:8d:b2:2f:65:e1:
                    f5:ef:ef:04:22:8a:f8:80:28:ba:23:e0:c4:ed:10:
                    a4:c3:b6:4d:91:dc:79:38:14:90:b8:20:e6:f3:a6:
                    03:cb:cc:7d:8c:ce:39:c0:07:8f:c3:65:54:f4:5e:
                    8b:ac:8d:70:60:f6:b8:74:2e:6c:23:11:5f:e8:9a:
                    83:14:d6:50:b3:76:b0:27:9b:2e:41:3c:fa:21:b6:
                    01:f8:27:b1:90:07:40:8a:ac:da:c0:fd:35:7e:26:
                    8e:d7:2a:88:03:3b:99:95:4b:2e:1f:b4:79:42:cb:
                    b2:cf:3a:2b:04:04:53:7d:1e:3e:a5:3e:7c:78:bd:
                    2f:fd:25:37:e8:78:b4:59:3a:37:64:1c:51:b9:61:
                    b7:6e:60:62:60:5f:ee:57:7a:c2:bd:c7:d6:d3:57:
                    b0:2a:6e:f1:9c:e7:6c:0b:6e:0d:0f:e1:d3:60:5c:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:50:A3:41:33:4A:63:CE:01:A9:60:7C:61:86:18:CA:5C:2F:1E
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:99:44:de:b2:9c:5d:db:49:30:a1:c2:ad:53:31:16:1d:
         db:74:c6:b0:ed:a4:75:8c:d8:00:c7:0e:10:b0:54:1c:b6:d8:
         a2:cf:0d:a8:ca:7a:b2:54:93:8e:34:aa:98:5a:fc:aa:db:ef:
         c9:e9:16:9e:b3:54:ad:76:03:9c:71:c9:39:38:71:c8:e1:7e:
         b9:7f:cd:21:33:b9:9a:bc:a1:a0:89:20:eb:bd:f5:fb:bb:2f:
         81:f2:5d:f5:5b:8e:11:b3:b9:f2:27:b9:a9:42:02:ba:39:f6:
         e8:54:37:d1:04:71:e1:c0:4b:c5:e7:9e:71:ce:f2:be:39:18:
         cb:f2:36:36:0e:c8:24:6e:ed:b8:3f:41:f7:78:0c:4f:fa:88:
         ac:85:24:17:eb:d9:28:8f:4e:42:3c:a7:a8:32:32:2d:bd:98:
         cd:59:8a:6c:ee:ed:8b:8b:af:84:dd:e3:e9:18:41:71:d6:16:
         6b:48:a0:1f:0b:7d:d4:3c:86:b4:39:2b:0d:8b:ca:6c:c8:89:
         fc:47:30:f0:85:fc:cd:85:6b:9d:b2:03:e3:17:b2:b1:84:bc:
         cc:5c:94:7a:af:ab:75:da:9e:58:ff:d9:29:2c:6c:b5:45:23:
         ac:72:eb:ca:1f:0f:bb:7c:59:ec:be:d3:41:7e:ed:08:52:06:
         f2:1d:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----