Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          bGpxTJm45KgFqXAjJvcC5Ysu/yd5QJ5Z/2GF1AJIfI4=
Subject key identifier:   97:7E:0B:60:29:E1:7E:5F:1A:01:12:47:13:29:59:21:FC:BA:7A:03
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       09F2B9D439BD8C40CD8FDF4D29285213BFC2BF4F
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 28 Mar 2025 00:17:17 +0000
ROA not before:           Fri 28 Mar 2025 00:12:17 +0000
ROA not after:            Fri 27 Mar 2026 00:17:17 +0000
asID:                     50224
IP address blocks:        2602:fac2:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f2:b9:d4:39:bd:8c:40:cd:8f:df:4d:29:28:52:13:bf:c2:bf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:17 2025 GMT
            Not After : Mar 27 00:17:17 2026 GMT
        Subject: CN=977E0B6029E17E5F1A01124713295921FCBA7A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:ce:0c:70:76:3a:ae:63:1d:62:b1:66:4b:
                    75:b8:96:80:ae:63:9e:b5:c9:6b:82:f0:5d:6b:1a:
                    e8:e1:f9:d3:15:ba:83:4e:f7:9d:a6:3f:7d:02:c5:
                    68:cc:f1:06:98:55:e9:eb:d9:d4:85:2d:41:36:eb:
                    03:ca:d9:5d:41:1f:9c:3b:08:26:1a:93:0d:b2:c6:
                    97:05:10:97:86:74:04:89:44:18:2a:37:43:0a:f4:
                    34:99:2d:52:31:cb:aa:6a:92:8d:aa:76:7c:16:65:
                    07:84:b4:19:e7:76:84:c7:6d:98:3f:8a:7d:e1:c2:
                    6c:eb:1f:c9:cf:22:d9:6f:f5:d0:0f:2c:a5:c1:c6:
                    a8:2e:75:7a:3b:e0:1a:3e:63:72:e9:79:ba:7f:bc:
                    b0:c5:d2:da:cd:ce:82:62:05:5d:b6:1c:62:af:59:
                    7d:f0:2f:1c:cf:df:79:3f:18:b5:74:41:20:10:df:
                    b4:b3:aa:1d:fc:ec:cf:f7:6e:60:34:79:51:91:3f:
                    d0:8f:e8:a6:8e:38:78:a7:4a:7d:f1:61:81:3d:e7:
                    72:db:bc:6c:81:bf:36:95:d5:2b:78:69:14:91:44:
                    1e:1d:60:52:5e:e7:b9:09:ca:26:07:96:6a:11:ec:
                    ae:41:2f:f1:91:45:b9:6c:92:01:8a:02:9c:a3:78:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:0B:60:29:E1:7E:5F:1A:01:12:47:13:29:59:21:FC:BA:7A:03
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:cc:80:c1:7e:a3:8e:09:b4:2f:24:2d:19:d3:d6:e5:36:5b:
         4f:5c:36:9c:e7:85:e1:c9:b3:55:1d:af:21:b3:7f:a2:a4:e8:
         2a:03:58:f4:1c:bf:56:26:22:50:88:09:d5:9e:9d:d2:43:2d:
         2f:c1:9c:de:c1:78:63:08:7c:c6:f7:e0:92:76:10:b2:74:e6:
         0e:e5:95:47:ee:2b:6e:6d:f8:7e:1f:f7:b0:ae:18:90:f4:55:
         b1:4a:e4:c3:50:7e:e9:13:c7:ae:11:db:52:fc:24:69:ca:60:
         94:b9:a5:88:66:a7:72:cc:74:14:ec:a3:fc:03:5f:52:d2:f0:
         7f:01:b2:8e:0a:90:b0:10:6b:52:16:c5:37:2f:d8:da:ac:50:
         79:16:98:75:4f:73:d9:94:ff:8f:ba:10:74:0a:4f:d4:2e:a2:
         94:15:13:48:cc:a4:ca:35:ae:5c:7b:56:f6:2b:8e:c3:f6:6f:
         7d:60:68:99:30:71:3b:42:cc:f8:18:a1:a6:d5:10:f2:fa:2e:
         13:de:6f:b0:ce:c7:ac:d1:ea:85:ee:bb:ea:80:e0:f6:da:d1:
         c7:31:e8:9d:f3:98:ab:07:19:1c:46:15:d7:d2:4e:d0:14:5b:
         d5:a3:ba:a6:62:38:f4:4f:d8:37:f1:ec:df:1a:4f:f8:78:32:
         85:61:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----