Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa
File:                     323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          INAGwT2++uEuuhpFxe42XHqlDmPWMQuxrX3FelofDEY=
Subject key identifier:   7F:3A:B9:75:32:1D:75:12:BB:7E:49:4D:A8:1D:57:02:F1:5E:FB:02
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       41279F558438E5B1DC97EDFE0E1647FA2B322048
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa
Signing time:             Fri 28 Mar 2025 00:17:20 +0000
ROA not before:           Fri 28 Mar 2025 00:12:20 +0000
ROA not after:            Fri 27 Mar 2026 00:17:20 +0000
asID:                     50104
IP address blocks:        2602:fac2:14::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:27:9f:55:84:38:e5:b1:dc:97:ed:fe:0e:16:47:fa:2b:32:20:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:20 2025 GMT
            Not After : Mar 27 00:17:20 2026 GMT
        Subject: CN=7F3AB975321D7512BB7E494DA81D5702F15EFB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:84:cd:07:6c:27:33:d0:9c:a5:1e:07:c6:
                    8e:40:ab:dd:bc:a4:d0:11:26:64:8a:ab:96:d6:41:
                    e2:65:04:2e:56:32:ec:79:9a:00:c3:db:db:25:0b:
                    0e:68:d0:65:12:a0:e6:a0:17:2a:3b:3b:45:3d:f0:
                    d1:cb:7c:ab:ab:f3:32:0b:7c:3d:4d:df:26:02:51:
                    96:ab:2d:25:c0:48:ee:85:99:c5:86:93:0a:bf:de:
                    4b:e6:39:0e:e7:d5:bb:19:a2:e3:52:36:35:10:26:
                    0f:81:7b:4f:71:2f:51:bc:af:05:d6:4b:49:6b:49:
                    cf:9b:c0:53:da:e5:4c:3e:37:c9:78:ae:a3:9b:a5:
                    00:b2:84:c9:d5:88:87:4c:9e:fe:13:52:7b:1f:ed:
                    57:e2:92:72:75:fb:9b:00:0d:c7:d6:61:95:c2:72:
                    7f:b3:dc:0a:b1:58:d9:03:c6:90:2b:88:3c:df:44:
                    ae:6b:04:d6:f7:af:26:3b:83:58:24:1d:31:6f:8c:
                    92:f7:c7:61:0b:c4:24:11:89:a4:0a:97:67:84:e6:
                    f2:91:59:9e:51:60:f6:65:21:01:46:f7:44:f7:5b:
                    e3:4a:2c:50:86:29:f9:61:ff:3f:96:2d:09:fe:14:
                    3d:5e:04:b8:6e:1b:0f:56:93:a9:28:2c:3c:54:c2:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:B9:75:32:1D:75:12:BB:7E:49:4D:A8:1D:57:02:F1:5E:FB:02
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:06:13:62:91:20:01:32:e9:28:1a:45:c2:e2:41:6a:d8:
         bd:79:f5:d1:91:e2:08:3e:c4:34:2c:86:5c:d3:9a:7b:01:b5:
         c8:0d:fa:0c:76:1c:d7:18:eb:6f:2f:4d:e7:05:5a:40:76:03:
         b3:08:f7:6c:08:f2:cb:66:cc:9c:86:6c:65:6f:76:0f:dd:ad:
         ba:1a:13:21:ef:07:85:ce:b4:23:51:d1:52:0e:5f:5f:eb:c5:
         b8:5f:60:75:1b:fc:39:a6:dd:15:6b:b4:f2:32:d3:94:c5:c1:
         da:ec:ac:5a:e2:35:17:e8:bf:75:5a:a0:6c:50:67:a3:bf:55:
         09:77:06:65:54:c8:2b:d4:12:ec:22:54:2d:30:dc:1b:86:23:
         41:7e:52:16:95:26:a8:71:9d:0e:21:b9:e7:43:2f:0d:79:0b:
         6f:9a:7e:85:77:65:65:8b:b7:3e:91:9e:cd:b4:55:9d:08:11:
         77:29:be:9d:f1:19:bf:a9:e5:67:5d:d7:85:fb:0a:c0:e5:9e:
         3c:29:b9:02:bf:f7:5b:c0:85:5b:7e:04:1a:a3:a7:03:2b:33:
         4c:d0:12:85:b4:50:62:b8:67:bf:d2:7d:3e:f5:63:31:23:3b:
         b9:1d:0f:e8:6e:b7:28:48:61:aa:77:a6:1f:1d:31:78:59:9e:
         f6:96:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----