Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          dEo+BoxYNEUSN2wT+TO5ZHlYlvpNiayi++KZw9uznbM=
Subject key identifier:   A9:A2:9A:C2:DA:F1:88:14:EA:62:39:79:3D:6C:E0:BC:33:95:61:32
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       1BD881C8D675C5CA389512FE118901F14FD77C95
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Tue 26 Nov 2024 09:43:16 +0000
ROA not before:           Tue 26 Nov 2024 09:38:16 +0000
ROA not after:            Tue 25 Nov 2025 09:43:16 +0000
asID:                     50224
IP address blocks:        2602:fac2:6::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:81:c8:d6:75:c5:ca:38:95:12:fe:11:89:01:f1:4f:d7:7c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov 26 09:38:16 2024 GMT
            Not After : Nov 25 09:43:16 2025 GMT
        Subject: CN=A9A29AC2DAF18814EA6239793D6CE0BC33956132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:d4:e3:49:57:8b:f9:96:e2:15:04:3a:5b:
                    90:a0:c5:17:f8:4e:b4:31:b5:9f:f9:97:72:a1:35:
                    e1:97:ad:5e:f5:85:43:a8:df:90:98:63:68:30:ba:
                    d8:6c:26:03:08:0e:fb:0b:b1:f9:b4:f2:6f:cf:09:
                    eb:9c:92:96:d0:01:83:95:7d:65:15:99:cd:ae:dc:
                    bc:78:71:dd:d9:11:97:3b:18:5c:e9:65:36:c5:89:
                    97:79:1f:40:ca:5e:5a:77:87:cb:35:c5:de:5e:48:
                    ed:b0:94:3b:72:3b:62:38:f5:66:e2:81:c9:d3:d9:
                    01:13:65:16:6f:76:fd:a7:2d:55:af:00:a7:5f:83:
                    bd:05:95:c8:41:3c:ca:57:02:55:59:84:88:64:a1:
                    d1:53:f4:f7:56:73:cd:69:d1:b1:95:84:b0:13:c3:
                    f2:8a:c9:21:53:a5:ea:a8:7e:e6:20:5d:75:7a:f1:
                    b9:8e:03:9c:b3:e1:1c:45:d7:ae:81:8b:2b:36:42:
                    5b:f1:e2:de:ae:80:ec:5c:9d:2a:97:ab:ea:d9:99:
                    c8:9c:59:e4:4f:66:23:8f:3f:07:bd:f8:db:d4:c4:
                    77:c8:13:1b:e3:1d:f0:39:b9:24:25:bb:44:60:bd:
                    80:f3:10:f3:8f:78:f3:1a:da:35:60:c1:c7:47:c8:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A2:9A:C2:DA:F1:88:14:EA:62:39:79:3D:6C:E0:BC:33:95:61:32
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:41:d2:7b:82:cc:69:37:9b:ab:f3:3d:87:fc:a6:e6:d2:5e:
         c7:77:af:98:09:58:35:9a:4c:18:39:a9:b8:57:f6:c7:c3:7b:
         6a:e5:6f:cc:31:54:93:39:40:6b:d5:b8:46:5d:3d:9a:ba:1d:
         ce:7b:1f:88:15:4e:e0:63:b3:5a:cf:2a:9f:46:ec:cc:8a:7f:
         02:e4:f7:9a:f4:5a:43:18:75:48:89:b9:17:28:03:99:9b:c6:
         42:7e:37:59:3f:3c:1a:e1:da:da:62:e8:a6:bd:89:aa:a8:0e:
         27:a8:c4:5a:63:64:02:6d:a1:ee:95:b5:79:e1:4c:77:1f:4d:
         c7:d3:a5:fb:ba:b0:4d:86:9c:3a:49:8b:eb:2e:1f:c9:7d:39:
         22:3f:fb:7a:09:e1:be:8a:c9:e1:b7:7f:18:ab:36:83:59:9f:
         89:00:f0:5c:84:20:93:33:2a:a3:2d:ac:68:cf:52:6a:6c:4e:
         e2:1f:b6:cf:87:21:47:fc:45:a4:56:1c:8a:3b:4a:c6:b3:a2:
         af:11:c7:16:d3:a6:e8:30:fb:88:82:d5:45:5f:02:e7:c9:25:
         b6:69:e4:7f:e9:db:07:7e:0f:f1:0e:62:4d:d2:5d:16:90:b6:
         ea:b4:d9:dc:f2:73:2e:9d:94:dc:da:72:2e:26:39:6d:39:a4:
         79:2f:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:18:20 2025 by rpki-client