Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
File:                     323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa (raw, json)
Hash identifier:          7S6axnvF8x64T/g3W6POWmK++B8t9TG+dUF5kEclQWI=
Subject key identifier:   81:E0:3F:EE:A0:C3:17:95:35:99:AA:6C:51:26:CB:93:59:EF:EE:7F
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       327BB96BEFD11F0C2C871A88C82B6B4F16B32621
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
Signing time:             Fri 06 Dec 2024 12:43:16 +0000
ROA not before:           Fri 06 Dec 2024 12:38:16 +0000
ROA not after:            Fri 05 Dec 2025 12:43:16 +0000
asID:                     19521
IP address blocks:        2602:fac2:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7b:b9:6b:ef:d1:1f:0c:2c:87:1a:88:c8:2b:6b:4f:16:b3:26:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec  6 12:38:16 2024 GMT
            Not After : Dec  5 12:43:16 2025 GMT
        Subject: CN=81E03FEEA0C317953599AA6C5126CB9359EFEE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:a5:fc:e0:bd:94:7f:5b:6b:80:cf:18:22:
                    5c:31:96:7c:54:a6:67:b4:00:bb:d1:9e:53:b1:63:
                    5b:e6:0a:83:98:d7:e1:f5:fa:a9:35:ed:95:a4:2a:
                    40:fb:81:f2:7a:7a:ac:10:97:dd:b8:b5:76:f5:87:
                    35:26:ce:98:aa:cb:b5:87:e1:35:9d:83:ff:54:39:
                    5b:06:09:03:32:fc:6d:20:d6:d8:5b:20:ea:f2:ee:
                    cc:a1:dc:4b:fb:59:7b:3d:da:6f:e4:45:81:65:9c:
                    21:ce:56:b8:f7:92:1e:ab:d5:b2:cb:ca:3a:7c:6f:
                    8c:dc:97:40:11:a0:95:4e:a7:af:79:08:20:f3:7b:
                    88:42:08:50:cd:3d:b9:5c:66:48:cf:bf:bf:16:31:
                    4c:4d:78:e9:2b:35:66:dd:14:19:4e:ab:b5:8e:3d:
                    08:f4:32:83:fa:9c:37:82:1c:0e:4e:9d:84:fa:a5:
                    41:74:b6:4f:36:21:23:72:9f:78:fc:1a:75:93:f7:
                    01:07:48:2b:b3:d1:7c:d9:5e:00:a6:f2:13:06:1a:
                    02:6d:67:c8:75:e4:fd:71:63:2e:0b:6e:78:14:18:
                    cb:07:c8:db:ba:ee:99:da:1d:95:de:9b:c5:f4:1e:
                    dd:38:b2:88:42:f7:50:4a:21:69:62:3e:d3:7d:a9:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E0:3F:EE:A0:C3:17:95:35:99:AA:6C:51:26:CB:93:59:EF:EE:7F
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:79:06:fc:d5:dd:41:ef:36:4d:a2:3e:3f:f6:bd:49:85:18:
         b9:ab:5a:11:96:08:7f:e2:7a:1c:b1:84:5e:09:70:04:f3:18:
         4e:27:32:ab:c6:3d:af:32:5a:dc:ce:26:d8:90:71:f7:82:17:
         89:c5:3d:d0:77:33:34:e6:1d:22:e7:d0:89:04:f3:cf:8e:eb:
         a5:ef:82:e9:38:3a:7c:39:de:ce:bd:2e:9e:e3:5b:f9:cf:77:
         90:9d:a0:40:b2:00:7a:c8:1a:dd:42:ee:63:b2:a5:85:0a:92:
         52:8c:d8:73:9e:7f:9a:19:8a:78:ff:0c:0d:0b:fb:35:d2:bf:
         a6:63:1b:70:55:d5:9e:9a:24:f8:0b:9f:eb:32:47:22:c6:a1:
         26:7d:b1:3e:6d:83:a2:38:7c:53:ff:63:59:a8:eb:4b:d8:5a:
         57:f5:a3:fe:60:3e:6c:71:47:65:40:b7:62:80:cf:4e:c9:e0:
         b0:89:d1:24:0e:f4:5c:5c:ef:2f:9f:ff:c6:6b:94:ec:60:b4:
         77:30:29:7f:c2:8d:7c:c1:6c:58:a5:96:d6:5a:bc:fe:44:b3:
         8f:10:df:65:93:a6:40:1a:89:bc:f2:5d:47:b9:51:25:d7:49:
         58:96:fd:f1:f5:61:6f:12:ff:a2:eb:50:e6:2f:35:6c:ba:f7:
         e5:7f:2f:f2
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUMnu5a+/RHwwshxqIyCtrTxazJiEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjQxMjA2MTIzODE2WhcNMjUxMjA1MTI0MzE2
WjAzMTEwLwYDVQQDEyg4MUUwM0ZFRUEwQzMxNzk1MzU5OUFBNkM1MTI2Q0I5MzU5
RUZFRTdGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9il/OC9lH9b
a4DPGCJcMZZ8VKZntAC70Z5TsWNb5gqDmNfh9fqpNe2VpCpA+4HyenqsEJfduLV2
9Yc1Js6Yqsu1h+E1nYP/VDlbBgkDMvxtINbYWyDq8u7ModxL+1l7Pdpv5EWBZZwh
zla495Ieq9Wyy8o6fG+M3JdAEaCVTqeveQgg83uIQghQzT25XGZIz7+/FjFMTXjp
KzVm3RQZTqu1jj0I9DKD+pw3ghwOTp2E+qVBdLZPNiEjcp94/Bp1k/cBB0grs9F8
2V4ApvITBhoCbWfIdeT9cWMuC254FBjLB8jbuu6Z2h2V3pvF9B7dOLKIQvdQSiFp
Yj7Tfal1MQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFIHgP+6gwxeVNZmqbFEmy5NZ
7+5/MB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzYzMDMyM2E2NjYxNjMzMjNhMzIzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM5MzUzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6wgACMA0GCSqGSIb3
DQEBCwUAA4IBAQCFeQb81d1B7zZNoj4/9r1JhRi5q1oRlgh/4nocsYReCXAE8xhO
JzKrxj2vMlrczibYkHH3gheJxT3QdzM05h0i59CJBPPPjuul74LpODp8Od7OvS6e
41v5z3eQnaBAsgB6yBrdQu5jsqWFCpJSjNhznn+aGYp4/wwNC/s10r+mYxtwVdWe
miT4C5/rMkcixqEmfbE+bYOiOHxT/2NZqOtL2FpX9aP+YD5scUdlQLdigM9OyeCw
idEkDvRcXO8vn//Ga5TsYLR3MCl/wo18wWxYpZbWWrz+RLOPEN9lk6ZAGom88l1H
uVEl10lYlv3x9WFvEv+i61DmLzVsuvflfy/y
-----END CERTIFICATE-----