Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3730303a3a2f34302d3438203d3e20323037343435.roa
File:                     323630323a663962613a3730303a3a2f34302d3438203d3e20323037343435.roa (raw, json)
Hash identifier:          VxT5YlfPDaxI9Bu80LAjzmDmpsbt31Uc+FAKnnwCDP8=
Subject key identifier:   53:64:BB:F8:D6:A0:CA:44:A4:C3:B7:90:D7:99:B9:EF:87:31:3E:DF
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       4D558024F664C5AF5270B34A6E931FA492594676
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3730303a3a2f34302d3438203d3e20323037343435.roa
Signing time:             Sat 29 Mar 2025 04:18:33 +0000
ROA not before:           Sat 29 Mar 2025 04:13:33 +0000
ROA not after:            Sat 28 Mar 2026 04:18:33 +0000
asID:                     207445
IP address blocks:        2602:f9ba:700::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:80:24:f6:64:c5:af:52:70:b3:4a:6e:93:1f:a4:92:59:46:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Mar 29 04:13:33 2025 GMT
            Not After : Mar 28 04:18:33 2026 GMT
        Subject: CN=5364BBF8D6A0CA44A4C3B790D799B9EF87313EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:d6:d5:de:23:9a:0c:46:9e:32:01:b9:b2:
                    5a:8b:d1:34:46:42:4e:30:f0:b4:56:d5:b4:cc:bc:
                    f5:e7:81:93:48:c1:d9:b6:7b:b1:33:4a:76:98:4a:
                    71:af:30:bc:3f:aa:39:d6:dc:64:93:08:1e:07:86:
                    dd:94:d2:3f:ea:cd:de:f8:ad:b0:c3:c1:c0:93:40:
                    3f:6e:6c:8e:f8:b5:45:da:2b:9c:72:a7:38:51:e1:
                    76:a9:c4:61:e3:33:43:9e:33:8d:b0:b6:25:47:9e:
                    32:c8:db:ca:6a:85:10:38:fc:3c:8b:65:40:45:ec:
                    0c:ef:e4:25:0c:7d:2d:64:ad:2d:a4:ce:e8:7a:53:
                    d0:15:9d:5f:21:47:bf:0c:77:0b:b0:c1:8a:d7:da:
                    4f:a4:f4:e1:ad:30:2e:07:31:f8:3b:f8:bb:96:3e:
                    77:56:ac:2a:c6:cb:25:b5:d7:be:61:f5:e7:15:1c:
                    93:c0:e5:c7:ff:43:59:ed:57:46:89:9a:79:a6:9f:
                    50:b9:cb:83:8b:d4:0a:6b:f1:5c:87:f9:12:cb:d5:
                    d8:50:4a:c1:95:8b:65:8a:0a:02:63:c9:9c:c1:6d:
                    97:e0:14:52:93:f8:f2:a9:36:03:a2:57:2e:4b:3c:
                    ef:73:b0:21:cb:d2:f2:d4:6b:5e:78:3c:e5:fa:57:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:BB:F8:D6:A0:CA:44:A4:C3:B7:90:D7:99:B9:EF:87:31:3E:DF
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3730303a3a2f34302d3438203d3e20323037343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:e8:ef:7b:f8:58:d7:fb:32:d5:af:14:22:1d:f1:6a:0e:
         b5:3c:80:a5:62:6f:a0:4d:67:67:00:92:92:31:cc:2f:46:d9:
         61:eb:a5:c2:90:33:7b:31:8a:88:6a:8e:58:03:88:51:2e:13:
         a6:42:d5:bb:0a:60:e4:e1:16:d1:7f:96:fd:62:c4:8e:4f:09:
         83:81:dd:10:4e:b4:18:05:5d:da:68:ad:fe:22:47:e8:8a:4a:
         d5:80:49:8b:ba:0d:ce:3d:e8:da:bf:e7:e0:ac:4e:fc:01:6b:
         07:30:a7:bc:22:8f:c6:47:09:f1:ac:6a:7a:6f:d3:1d:bb:72:
         30:04:a8:74:87:d7:ea:d6:41:39:63:10:f6:54:01:22:cd:ff:
         4e:d5:90:06:47:a8:3e:6c:43:c7:c4:07:b5:ba:e9:4b:1c:c1:
         a4:99:3c:05:9a:e2:a9:b5:f5:68:93:5f:e1:41:92:2b:ae:80:
         d1:ed:4c:30:25:02:6e:36:f8:c6:d7:63:e5:15:8b:0a:41:1e:
         70:9d:75:cd:36:ee:13:78:be:54:78:d7:92:6f:20:67:71:d6:
         52:96:30:c5:9c:1b:2f:6f:4f:b8:f2:98:8f:90:58:4e:e6:2e:
         f8:3e:4f:a0:de:3b:b3:6c:fc:6f:1d:59:87:6e:b7:85:ec:f6:
         ab:b9:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----