Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
File:                     323630343a6361303a3a2f33322d3332203d3e20343031363832.roa (raw, json)
Hash identifier:          5CAexOLHW7KGBDIhsjeSe6gbxM2MbRh9uS/XozXmyeo=
Subject key identifier:   C3:8D:DE:AA:BB:5D:F4:F8:24:52:1D:27:E9:8B:FA:B0:1D:C9:A1:78
Certificate issuer:       /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial:       60E744B9D03F8353ED0C9A6941EFBCEDF48DC230
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa
Signing time:             Tue 27 May 2025 02:16:44 +0000
ROA not before:           Tue 27 May 2025 02:11:44 +0000
ROA not after:            Tue 26 May 2026 02:16:44 +0000
asID:                     401682
IP address blocks:        2604:ca0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:44:b9:d0:3f:83:53:ed:0c:9a:69:41:ef:bc:ed:f4:8d:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
        Validity
            Not Before: May 27 02:11:44 2025 GMT
            Not After : May 26 02:16:44 2026 GMT
        Subject: CN=C38DDEAABB5DF4F824521D27E98BFAB01DC9A178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:93:36:0f:ad:97:96:cf:89:b3:ea:70:45:
                    ad:56:67:f1:51:3f:bc:bc:a6:a7:1e:10:30:77:40:
                    3e:82:32:62:71:4a:35:fb:eb:41:ee:d7:d6:76:c8:
                    16:de:d7:5d:ec:37:f2:bb:37:12:9a:54:94:1e:19:
                    79:e0:a8:05:23:5b:a8:7e:64:11:e1:c4:4d:f2:95:
                    7e:3c:5a:f2:6d:47:ae:04:f5:db:68:0c:eb:fc:92:
                    57:64:ba:42:35:96:79:3b:3b:4a:e1:8d:54:89:a0:
                    b1:f0:85:45:dc:33:ac:b2:38:3f:8a:6e:b5:5a:36:
                    58:f4:db:18:9e:7e:0b:71:a3:74:d6:70:99:37:12:
                    19:f5:e4:1a:48:a2:99:c4:cf:40:b2:4e:30:10:4e:
                    89:3a:e3:5d:16:03:8e:3a:80:a1:77:8b:f0:ff:82:
                    3a:b5:a9:b4:1f:e7:df:3f:5a:94:01:4d:71:82:98:
                    d7:7a:6a:0d:b6:88:56:c0:0b:d5:26:b9:61:4a:ae:
                    1f:2f:cc:5a:61:f3:09:99:86:41:2b:c2:42:82:1d:
                    d5:ba:5c:15:af:d0:79:2a:d7:ab:60:5e:7e:73:65:
                    81:8a:1d:12:26:89:6c:43:e0:11:b1:f8:35:ff:86:
                    93:0d:a7:2e:ff:f6:c5:b9:71:bb:bb:59:53:94:62:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:DE:AA:BB:5D:F4:F8:24:52:1D:27:E9:8B:FA:B0:1D:C9:A1:78
            X509v3 Authority Key Identifier:
                keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3a2f33322d3332203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:25:fc:78:23:c6:5b:00:48:98:d0:f8:5f:29:3e:e0:9a:e1:
         3d:61:c0:ea:36:cf:45:5b:b7:e5:01:84:4c:dc:ba:95:3c:00:
         ac:8e:e4:b5:78:85:bd:da:64:ce:68:21:c1:1e:43:5d:2b:33:
         08:c0:8d:35:86:8b:51:de:05:1f:6b:0d:98:7f:49:94:ec:21:
         ab:50:4c:67:b4:95:5d:43:fd:4e:47:e6:30:1e:cf:8b:b5:4f:
         78:e1:3a:31:4d:7c:01:7b:92:ee:f6:58:c8:60:01:a1:a4:87:
         cf:dc:e2:08:b3:4c:6c:30:72:6e:94:e2:29:c7:ac:7a:c8:ed:
         42:96:ed:8b:a0:3f:42:6f:a9:17:10:59:55:3f:b8:d5:7f:83:
         77:fe:6f:41:56:71:ef:b5:fd:b8:8c:3e:37:08:56:a6:90:95:
         70:06:08:20:fa:ee:99:fe:be:4e:64:f3:20:d7:1c:cd:16:87:
         f8:5c:dc:ce:97:c7:9b:85:3b:af:2e:d2:fc:b0:d2:65:7c:aa:
         e0:37:22:64:73:a1:63:84:1c:7e:37:b1:1f:ce:02:1a:ce:7c:
         94:32:5a:d1:7d:d0:88:c4:e2:a4:18:d4:ba:25:ad:1c:c7:24:
         a7:55:44:c1:3e:e8:b3:01:4e:3e:61:1f:31:f9:c7:dd:d3:9f:
         3a:85:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----