Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
File:                     323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa (raw, json)
Hash identifier:          yM9i5BiQTKGonm04cwdWgLu5mVqZbgWOoSI8G5kR2Xg=
Subject key identifier:   8E:43:BB:9B:BC:78:33:4D:1F:94:9B:62:CE:D7:36:89:17:0E:46:0B
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       17D7FD111BB35D6173CEADDEF1E9529A7679FC82
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa
Signing time:             Mon 26 Aug 2024 19:22:24 +0000
ROA not before:           Mon 26 Aug 2024 19:17:24 +0000
ROA not after:            Mon 25 Aug 2025 19:22:24 +0000
asID:                     19330
IP address blocks:        2602:f9ba:aa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:fd:11:1b:b3:5d:61:73:ce:ad:de:f1:e9:52:9a:76:79:fc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:17:24 2024 GMT
            Not After : Aug 25 19:22:24 2025 GMT
        Subject: CN=8E43BB9BBC78334D1F949B62CED73689170E460B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:b5:a7:0d:9d:3c:f0:c9:61:83:db:67:b8:
                    85:af:91:30:18:ad:16:c9:43:f5:4f:49:77:ca:4c:
                    4c:a7:82:ae:8e:2b:c6:10:57:fe:37:c3:fc:f9:e7:
                    70:a2:f0:40:bb:fc:e6:e6:49:ee:d8:e6:67:41:8b:
                    9e:0e:6d:0e:93:bd:92:8f:e9:4c:70:9c:2c:18:94:
                    24:a9:c0:29:71:6d:45:0b:51:40:93:40:2b:21:26:
                    eb:42:07:8f:19:ba:35:26:9b:16:b4:14:9a:a8:53:
                    65:55:0e:fe:d8:ea:f5:ff:d5:7b:29:a7:c1:b4:e9:
                    6b:e1:5d:53:d4:55:fb:e4:75:32:b4:ca:7a:2e:51:
                    dd:63:3b:1f:18:70:69:50:86:00:1f:04:85:33:c8:
                    c2:27:c2:d4:56:80:b0:c5:7e:a3:e7:18:2e:e7:fd:
                    a5:0e:ca:38:83:0b:75:7b:f4:7c:82:10:31:2d:69:
                    70:17:4e:33:2a:26:76:3e:5a:5f:df:53:5f:ec:35:
                    05:0c:6f:99:af:22:59:67:cd:ac:33:2d:43:92:98:
                    61:1e:c7:88:55:5b:81:8c:08:5d:40:81:88:e9:d9:
                    90:88:97:1f:b0:26:e9:cc:d2:ac:b5:4d:80:f7:3f:
                    34:ee:77:3f:3c:22:33:b9:a5:0c:77:f6:bb:fd:2e:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:43:BB:9B:BC:78:33:4D:1F:94:9B:62:CE:D7:36:89:17:0E:46:0B
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61613a3a2f34382d3438203d3e203139333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:13:4e:ab:57:2f:7e:3f:7c:75:bd:82:95:af:70:73:ad:
         e1:13:4f:d5:3d:92:56:87:f3:6c:95:73:16:d4:45:02:ef:02:
         37:e1:41:aa:8f:82:9c:88:65:23:45:f8:69:97:eb:cc:40:5e:
         62:47:ac:87:99:dc:4c:0d:5d:be:ab:10:a6:d2:41:37:6b:39:
         6a:cd:c8:7a:55:51:fc:3c:38:1c:0b:e8:e8:96:cc:9c:82:b9:
         69:bd:09:7a:79:37:0a:b4:7c:ee:e0:21:67:ce:ec:17:eb:4e:
         e2:5c:09:93:78:c3:b9:5a:30:7e:94:b1:62:bf:89:a8:c0:83:
         8c:ff:05:c8:14:11:50:f4:fd:b6:b0:2b:f1:d8:a0:69:ca:cf:
         40:0a:5d:32:93:99:f5:90:23:6c:d6:ed:7d:4f:06:67:3d:b3:
         13:d2:69:17:1c:bd:38:31:68:3b:af:5d:4f:4f:df:b0:73:1b:
         cb:0e:29:8d:93:82:f3:ae:97:be:e5:b7:d2:54:87:22:07:43:
         c6:df:10:76:f7:7e:8f:e3:be:18:fc:ac:44:e2:08:20:b8:ea:
         ac:fa:95:06:41:c0:ab:20:4c:cf:8b:8d:1e:46:6a:6c:21:4d:
         ec:9f:d8:36:ad:a6:8c:17:c4:4d:53:74:98:97:ad:a1:64:2f:
         2f:23:b2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----