Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa
File:                     323630313a316430303a3a2f32382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          nAQQX35V5wpkj6+9UsN5hcj+Os5ZKLv4DahsS8TqfU8=
Subject key identifier:   43:85:F4:40:D3:29:1B:6A:DA:39:CF:F2:A6:88:1B:04:52:C4:35:55
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       5E74586D033D4E80160233030A348F7F533EF00E
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa
Signing time:             Thu 20 Jun 2024 05:23:43 +0000
ROA not before:           Thu 20 Jun 2024 05:18:43 +0000
ROA not after:            Thu 19 Jun 2025 05:23:43 +0000
asID:                     7719
IP address blocks:        2601:1d00::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:74:58:6d:03:3d:4e:80:16:02:33:03:0a:34:8f:7f:53:3e:f0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jun 20 05:18:43 2024 GMT
            Not After : Jun 19 05:23:43 2025 GMT
        Subject: CN=4385F440D3291B6ADA39CFF2A6881B0452C43555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:70:12:a8:c4:4e:ca:dd:30:b1:a6:1c:b7:
                    1e:01:11:43:41:2c:0e:ce:f5:7c:1e:1c:2d:97:9a:
                    87:fe:93:43:74:94:c1:84:f5:4f:65:8d:f7:73:f0:
                    c2:7b:8a:07:40:ea:30:e0:65:2c:d3:6a:92:ff:77:
                    fc:59:56:71:31:bb:55:ac:16:ac:53:13:9d:b9:a2:
                    41:d1:6d:ef:b3:ab:a7:bb:37:88:48:fa:1a:fa:be:
                    f9:00:25:d7:ba:07:f8:be:af:29:e1:53:e9:41:a2:
                    02:40:ed:94:64:64:2f:c9:cb:56:58:8d:8d:e5:27:
                    b7:76:c3:2e:3e:68:c8:ee:36:b9:74:60:37:32:96:
                    56:20:db:23:43:c1:4f:c2:aa:b2:f9:34:e1:c4:4d:
                    da:4b:00:27:87:9a:8c:02:6c:9f:91:f5:68:16:f9:
                    60:13:1a:39:c2:82:82:92:ee:58:27:d8:b3:27:dc:
                    76:c6:30:8b:9f:c6:ed:f3:7e:bd:ad:f5:45:77:c8:
                    1c:c9:a6:a4:52:e4:f3:82:c8:d9:96:62:88:26:15:
                    ca:b4:d2:5b:b3:5b:13:f4:a8:7f:a0:70:ba:5a:4f:
                    bb:d2:12:c3:84:78:99:90:cb:d9:16:97:10:21:33:
                    6e:7d:c0:5b:45:42:c9:d8:f7:b3:79:0f:56:44:2c:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:85:F4:40:D3:29:1B:6A:DA:39:CF:F2:A6:88:1B:04:52:C4:35:55
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:f6:52:44:00:11:dc:bb:24:58:09:3e:5a:8f:fd:72:52:
         b6:cb:b3:53:8e:7c:21:2d:16:8f:1e:2e:ee:8c:32:40:de:78:
         3a:23:57:d3:2d:f0:47:f6:c2:c9:0c:4c:2a:b1:ea:b1:6a:6a:
         e0:5c:66:12:d9:55:2b:66:b0:8c:0f:6c:5a:85:07:60:e1:f5:
         1c:10:cb:59:6f:c3:cb:91:f6:1e:a1:5c:d0:ca:60:c6:a9:50:
         25:cc:87:28:62:61:ca:40:ee:e3:b3:30:6d:06:e7:54:b2:eb:
         14:23:af:9d:fe:1c:c4:8d:de:d9:b6:f9:ee:eb:4e:9d:71:cd:
         be:af:ef:bf:30:13:cb:f2:41:12:0a:90:fe:77:03:87:95:5f:
         61:27:cc:6b:23:4b:dc:f1:6c:2b:4f:fd:a3:bf:a2:a7:ea:5c:
         e3:94:21:69:be:6a:e5:d2:11:ab:54:2d:f3:01:a6:42:f5:ec:
         bc:a1:01:f8:18:db:e4:9c:b6:6e:16:46:0b:4a:a8:07:25:a7:
         7e:51:c5:58:ed:c0:3b:65:72:a3:8d:3d:44:6b:48:71:4d:95:
         d6:79:39:6c:76:70:93:7d:67:d3:0f:c2:ff:4b:e8:bf:90:c1:
         82:40:43:5f:4b:69:b3:b6:f5:b1:12:03:ad:80:fe:32:27:10:
         2a:2b:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----