Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e2036393339.roa
File:                     323630323a666163323a393a3a2f34382d3438203d3e2036393339.roa (raw, json)
Hash identifier:          idBNqoCdStjqlr0ip7m7P1z6ZuGLGq28PQUTWt0VJ/I=
Subject key identifier:   A3:A2:21:C6:32:49:10:5D:CC:0C:88:7B:9F:08:C8:B6:86:A7:39:F8
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       2E81EB7156A941ECB188F4DA6FAF485F9D96E479
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e2036393339.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     6939
IP address blocks:        2602:fac2:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:81:eb:71:56:a9:41:ec:b1:88:f4:da:6f:af:48:5f:9d:96:e4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=A3A221C63249105DCC0C887B9F08C8B686A739F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:67:ef:87:c0:bf:67:a5:13:87:2d:b9:dd:
                    47:53:c3:a7:44:dd:f1:c4:2a:76:f3:32:2f:1a:1b:
                    89:60:fa:6c:40:6a:1e:4a:13:5f:53:ca:65:5b:1b:
                    0a:71:d0:67:47:e3:eb:cc:7e:eb:41:89:0f:3a:b3:
                    f7:c4:a4:6d:d3:5d:f1:5b:c2:61:4a:fb:98:aa:ae:
                    7c:69:d7:fa:46:d1:3e:2e:32:30:34:39:14:1e:bd:
                    3b:06:4d:35:72:f2:66:10:ed:18:20:62:38:ed:02:
                    56:2f:dc:6a:c9:05:c3:d3:95:79:b6:76:1a:ae:c5:
                    30:fc:73:79:b1:59:7c:0b:a6:66:57:86:b2:47:22:
                    ae:12:8b:76:df:a7:7b:e1:a0:19:02:af:38:98:1c:
                    7d:b1:08:81:1b:25:3d:9a:86:2f:c0:66:d6:d6:97:
                    60:44:9f:bf:7c:53:99:52:56:5c:df:99:45:b1:9e:
                    e5:5c:77:e2:f2:7a:54:67:24:92:2e:d1:e1:cc:02:
                    9b:ac:20:92:c2:97:88:ee:eb:20:11:1e:81:20:66:
                    43:88:89:2e:3c:20:ff:15:bf:7b:b3:88:67:a3:ed:
                    39:f5:1f:0a:36:c5:5f:dc:dd:19:3a:c9:85:a1:c3:
                    ed:77:2f:90:e1:71:dc:62:bc:9a:d2:d5:fe:58:11:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A2:21:C6:32:49:10:5D:CC:0C:88:7B:9F:08:C8:B6:86:A7:39:F8
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:fb:fc:77:05:62:1e:4d:21:f4:8e:49:da:26:53:cb:dc:77:
         86:96:06:0f:a7:de:21:32:f2:f0:d4:b3:ed:3d:55:d8:a1:02:
         0e:89:80:c5:f4:ea:0b:9d:c5:b9:44:12:28:3c:e4:dc:2c:3f:
         dc:43:34:89:49:5a:0e:f5:89:05:05:86:71:da:ee:6a:b5:6e:
         30:ae:22:6f:97:70:83:3e:26:fd:e1:b2:84:f1:4b:73:83:7c:
         6e:6a:02:ad:6f:16:9c:75:9a:59:66:d0:0e:90:97:b0:0c:47:
         34:c8:50:87:cd:0a:15:6c:31:9a:92:1d:5a:6a:5c:ee:a3:66:
         19:3d:3a:26:54:c5:a0:21:e9:8f:5c:b3:ed:53:16:98:ab:29:
         5b:4b:ef:d6:b4:4c:8c:e9:9c:2f:e7:85:1c:b9:a0:a4:5f:d4:
         e1:e4:fc:b4:a9:4d:65:23:60:b4:06:97:e1:a2:68:b6:c2:11:
         b8:87:3b:8f:60:89:dc:5d:df:18:b0:f5:68:c2:d8:9a:80:1b:
         7f:45:67:12:77:6f:46:89:d6:c3:83:74:09:6f:d7:37:2c:fb:
         ca:4e:48:a7:a7:39:16:c7:8b:3c:fc:1a:23:b3:b7:1a:e7:08:
         ad:e5:1d:30:4c:07:6f:bf:7c:fd:54:7f:e5:00:28:db:d9:ff:
         58:f5:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:28:11 2025 by rpki-client