Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
File:                     323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa (raw, json)
Hash identifier:          403JMVbFX2pV1k/ejQKFnzdhPwwyyrcZ7AUltbATZyw=
Subject key identifier:   9B:5B:DA:A3:B3:B1:8B:B3:87:B5:4E:55:1F:DD:ED:6F:78:16:E7:CE
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       424E2ACC96759DA44941623A343F3A555131F52C
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa
Signing time:             Sun 26 Jan 2025 02:09:58 +0000
ROA not before:           Sun 26 Jan 2025 02:04:58 +0000
ROA not after:            Sun 25 Jan 2026 02:09:58 +0000
asID:                     140682
IP address blocks:        2602:f9ba:10c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4e:2a:cc:96:75:9d:a4:49:41:62:3a:34:3f:3a:55:51:31:f5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Jan 26 02:04:58 2025 GMT
            Not After : Jan 25 02:09:58 2026 GMT
        Subject: CN=9B5BDAA3B3B18BB387B54E551FDDED6F7816E7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:db:96:f9:3f:9f:33:13:7c:db:ba:af:39:
                    25:34:cc:fa:de:80:42:4a:2f:00:d0:fe:6f:7c:c1:
                    1a:2e:84:ba:fd:21:41:68:4b:4a:7e:e7:95:e7:47:
                    cc:aa:e2:a2:d8:20:e7:8c:0a:bb:ac:7d:f6:6f:d8:
                    48:33:70:d8:73:3c:dc:fc:33:52:69:85:a5:d8:79:
                    7d:c4:85:dc:78:e4:c2:ec:67:a6:fe:a3:5f:5f:dd:
                    78:3c:5e:98:e6:22:57:04:d3:d1:cc:fa:6d:e1:39:
                    19:ee:ad:a0:1a:19:52:d5:8d:14:cf:0b:f7:8d:cd:
                    ac:f9:64:c8:ca:48:3c:8e:24:ad:fc:f7:3b:5f:d6:
                    22:af:8f:63:18:40:10:91:a6:d8:de:8f:f8:55:51:
                    86:ce:e8:82:28:de:6f:a4:f7:f6:be:e3:c2:3b:66:
                    65:1e:f7:d2:66:a2:42:4d:0a:f5:6e:0d:9c:c0:bf:
                    42:91:c2:df:7e:02:a7:d1:b7:53:99:e3:87:08:82:
                    3f:02:c9:ea:e7:aa:d6:86:68:d3:f1:c0:1b:d6:41:
                    31:34:0c:38:a9:99:34:ca:47:47:1d:ff:cf:fb:69:
                    f8:cb:11:f4:59:5e:98:06:96:b6:3b:71:9d:00:af:
                    fd:c4:24:da:d5:63:4a:28:47:80:a8:b1:c5:21:17:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:DA:A3:B3:B1:8B:B3:87:B5:4E:55:1F:DD:ED:6F:78:16:E7:CE
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3130633a3a2f34382d3438203d3e20313430363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:af:5e:61:77:d2:77:15:bd:fa:34:58:6e:15:a7:50:9d:7d:
         e8:36:f7:86:45:e1:68:b5:6b:47:8f:1c:5e:3a:41:15:82:dd:
         92:3d:06:88:23:8e:71:bc:5d:92:8b:32:07:01:ea:e0:86:cd:
         13:b1:d2:6e:10:b9:a4:cb:ea:f3:16:b6:59:d4:35:f0:b9:05:
         9b:0f:24:d3:5d:a2:69:05:54:72:9f:e9:f8:f2:40:80:b2:ba:
         e6:c5:bb:85:87:03:47:f1:c4:b1:a9:15:6c:4e:4a:e7:0c:02:
         51:d3:9c:36:c8:97:b3:48:0e:44:11:f7:63:3b:04:b1:f7:c1:
         bf:a3:43:d3:61:02:7f:05:e4:08:2d:f8:3e:32:da:e0:0b:b1:
         45:59:6e:5c:6c:20:d2:08:59:3d:57:16:27:e7:72:a4:d1:d1:
         fa:0a:55:49:80:40:c9:6e:12:c5:48:f5:34:22:a8:ab:ef:27:
         f8:00:04:5d:bd:5e:65:34:87:03:a1:6e:a6:5d:a1:cc:bb:c5:
         37:7c:03:97:9e:01:7a:b9:af:9a:ff:58:bb:4e:8f:6f:77:0f:
         3e:d4:61:25:3a:28:f3:e2:0e:a4:7e:e3:dd:f8:80:92:b9:8a:
         ea:a1:b6:1a:11:c8:31:1f:60:f7:62:17:29:53:f8:84:da:42:
         aa:26:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----