Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          mUKwFgXRliWQvnRWJ10cm9ecHoce9hCm6vMZxF+qHoI=
Subject key identifier:   0D:5D:91:1B:C6:EB:44:4B:70:37:BE:C9:87:CC:66:77:6F:99:5D:30
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       3AD6AE32C21253F7BFAF2E3634E01D6EE9C2B4E0
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Mon 06 Jan 2025 14:43:20 +0000
ROA not before:           Mon 06 Jan 2025 14:38:20 +0000
ROA not after:            Mon 05 Jan 2026 14:43:20 +0000
asID:                     152368
IP address blocks:        2602:fac2:11::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d6:ae:32:c2:12:53:f7:bf:af:2e:36:34:e0:1d:6e:e9:c2:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jan  6 14:38:20 2025 GMT
            Not After : Jan  5 14:43:20 2026 GMT
        Subject: CN=0D5D911BC6EB444B7037BEC987CC66776F995D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:8d:bb:9d:11:01:17:c3:ff:4c:21:40:91:
                    98:b2:40:be:f1:32:67:73:16:47:df:a6:82:e7:e3:
                    db:4f:ea:c7:87:1a:07:47:b8:4a:30:a1:eb:76:b8:
                    f8:01:f7:f7:3a:73:cf:54:17:4a:ca:5e:cb:b3:4b:
                    11:62:b9:30:55:13:e6:d4:72:bc:69:e5:6a:da:d5:
                    a8:34:bb:07:91:a5:f8:24:3a:b0:78:52:d8:31:2a:
                    0a:e6:8c:f0:93:9f:32:d0:2b:66:c5:40:65:4d:98:
                    91:70:bb:55:34:72:14:80:45:c6:ad:ff:64:e7:15:
                    52:28:4c:18:18:1e:36:d4:66:a2:f8:d1:53:ec:7e:
                    9f:4e:f3:9e:3d:79:ab:53:14:2f:9a:5b:97:9b:49:
                    84:a2:7d:10:84:8c:79:58:dd:04:59:c7:11:69:9d:
                    e4:0b:e7:a7:d0:9d:7d:86:93:a7:ec:ef:7d:09:13:
                    00:fc:2b:d6:fa:d9:bd:83:37:88:e1:65:5c:56:4f:
                    07:9f:2b:72:3e:70:45:8f:91:93:ca:4a:3d:99:12:
                    f3:81:c2:81:c6:15:7a:ed:aa:ff:ee:12:9c:e1:b9:
                    f3:ae:b1:26:c9:10:00:9b:31:1a:1f:82:b7:ad:5e:
                    de:c3:47:6b:bd:7e:b3:8a:0b:9b:a0:c9:56:45:14:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:91:1B:C6:EB:44:4B:70:37:BE:C9:87:CC:66:77:6F:99:5D:30
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:09:ec:f5:c3:25:06:73:11:e5:f7:fc:88:c0:53:93:19:2d:
         c2:97:f2:7d:fe:64:71:4c:a3:e0:b8:83:b2:44:be:62:d7:20:
         1a:3b:b0:92:e6:26:56:e4:cb:3b:44:65:6f:aa:77:cf:40:d4:
         c9:6e:f9:81:5a:c7:a8:72:ee:b1:e3:6a:3f:ed:6a:d1:9b:86:
         2c:7f:94:2e:c5:f4:48:e9:00:dc:74:6e:88:1a:51:05:53:98:
         d3:37:bb:45:56:f0:0d:20:42:66:ff:99:99:3f:02:1b:33:9d:
         70:09:61:de:9f:d7:45:53:0d:c1:7e:9d:17:f5:94:a5:4c:83:
         b9:9b:66:05:40:28:88:ce:8a:ed:d4:f2:88:a9:b9:c6:7a:ca:
         33:25:af:25:14:e3:d3:af:1f:97:4c:a2:e6:f1:45:0f:b0:45:
         3b:54:25:68:56:ca:4f:65:1b:86:bf:4b:75:fc:c5:c9:a5:08:
         2b:eb:2a:ef:14:6b:bd:01:5c:f6:2d:44:23:15:35:f9:74:3f:
         8d:5c:a7:7a:55:e4:9f:c8:da:de:01:4b:b2:27:6a:5e:8c:bc:
         c7:2b:02:c0:3d:f9:2c:03:e9:2c:c0:bf:7f:38:97:a2:e7:e6:
         79:5a:eb:6b:8c:8a:83:91:b0:53:24:34:98:f3:2a:50:92:1a:
         37:84:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:33:55 2025 by rpki-client