Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa
File:                     323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa (raw, json)
Hash identifier:          I7lUPMyaGBhfRziFkD+OQ/3S6BQHLks0gWX3wquAf+U=
Subject key identifier:   42:DB:11:70:DC:5D:2E:D1:69:80:5F:A9:93:81:B7:FD:9F:DF:67:C9
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       3B0CC8BFCCAAEC88EF3328715F3D9B3D53ED2037
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa
Signing time:             Fri 28 Mar 2025 00:17:18 +0000
ROA not before:           Fri 28 Mar 2025 00:12:18 +0000
ROA not after:            Fri 27 Mar 2026 00:17:18 +0000
asID:                     14315
IP address blocks:        2602:fac2:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0c:c8:bf:cc:aa:ec:88:ef:33:28:71:5f:3d:9b:3d:53:ed:20:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:18 2025 GMT
            Not After : Mar 27 00:17:18 2026 GMT
        Subject: CN=42DB1170DC5D2ED169805FA99381B7FD9FDF67C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:9f:d9:88:db:ca:5d:8b:22:c9:34:47:fb:
                    ae:46:26:0b:13:40:7d:75:8f:d4:e5:29:f3:b7:d0:
                    a5:45:82:b6:58:8f:8c:c4:c6:99:59:e3:04:81:bd:
                    c8:e0:ce:56:60:ce:d2:ec:9b:1b:21:d7:82:ca:75:
                    f8:e1:d0:04:fc:ad:6b:19:84:bc:c5:2c:ab:cf:4d:
                    6d:eb:94:a9:1f:8d:83:e0:3e:1f:6b:08:04:22:7f:
                    61:eb:15:fd:6e:c5:0e:5e:12:bb:3f:5b:f5:97:82:
                    3b:7b:1c:bf:77:dd:33:32:dd:3c:d8:d5:c2:4a:d3:
                    b9:8b:fd:2d:39:7a:3f:ae:06:e8:b6:53:45:08:d3:
                    85:51:ef:82:50:8e:73:e5:45:fe:59:7e:60:c2:c5:
                    32:20:60:ee:12:a7:65:9d:c7:69:9b:31:5b:c9:e4:
                    a8:95:c6:49:3f:9b:d0:1d:33:4f:9f:8c:29:4c:e5:
                    19:96:9c:d7:cd:2f:70:69:66:50:b7:a9:d9:2c:5b:
                    52:e4:92:61:8b:38:29:3f:e7:16:43:d6:dd:96:df:
                    75:d9:60:96:69:01:7f:fb:84:29:31:32:31:c0:ab:
                    f3:bd:ca:47:94:66:d6:d9:c5:1e:f2:f0:eb:c7:e6:
                    7f:25:a3:40:60:5b:85:b8:66:a1:b2:e6:5c:71:28:
                    4a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DB:11:70:DC:5D:2E:D1:69:80:5F:A9:93:81:B7:FD:9F:DF:67:C9
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:76:e6:4c:54:8b:98:35:ca:64:a5:aa:c8:21:c6:25:9b:
         d7:bc:cd:f1:87:51:5e:50:13:fe:03:4a:42:8b:cc:5a:d1:09:
         0e:30:af:15:6c:7d:6a:f8:30:f6:3f:65:c6:44:c4:82:34:d1:
         e2:1b:22:9e:92:a5:7e:cf:1f:6f:78:dd:ba:f6:62:ac:94:b8:
         bf:c9:1d:e4:eb:20:ff:7e:88:8b:04:64:92:49:05:c6:0e:e8:
         56:fd:6d:1a:18:86:55:de:c2:4d:50:fa:f2:66:25:43:4f:70:
         60:1c:f2:8b:82:0f:45:9e:0e:54:b1:fc:be:da:f9:01:b8:ff:
         a1:0c:7b:95:9c:1d:e2:ba:b5:f1:a9:fa:af:96:21:1a:19:7f:
         11:c7:fd:78:6f:f8:0a:75:e9:09:8f:1f:8b:6a:8a:24:0a:3e:
         b3:67:ce:11:7d:6a:e3:e5:0b:c7:46:46:29:15:fa:1d:5f:ad:
         04:3e:09:15:22:c0:0a:0c:dc:75:72:70:1b:ab:8f:55:f3:c1:
         41:b7:51:81:cf:ab:a5:77:5a:6c:b0:85:a7:cf:a1:8b:33:1e:
         c4:4e:72:3c:3f:b2:53:95:00:a6:99:ea:eb:d9:93:ca:b1:87:
         79:61:98:64:b8:a6:7a:44:98:06:64:37:75:47:d6:7b:65:df:
         a1:71:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----