Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          xZFwrc9PsiwjsMyy0o9elkjhiQqRNKNQSHZemHbqO4I=
Subject key identifier:   0E:4B:DA:7B:C4:8A:EC:33:BB:93:7B:F8:62:AA:4A:BF:75:89:17:D4
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       4BDDBD1BB289412701810D76C13ED1BB87B21813
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:15:42 +0000
ROA not before:           Thu 19 Dec 2024 14:10:42 +0000
ROA not after:            Thu 18 Dec 2025 14:15:42 +0000
asID:                     16909
IP address blocks:        2602:f78a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:bd:1b:b2:89:41:27:01:81:0d:76:c1:3e:d1:bb:87:b2:18:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:10:42 2024 GMT
            Not After : Dec 18 14:15:42 2025 GMT
        Subject: CN=0E4BDA7BC48AEC33BB937BF862AA4ABF758917D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:5d:59:bf:94:a9:4a:3d:be:e4:35:35:81:
                    cc:7c:5c:7b:48:0d:05:bb:1f:f7:6b:07:6e:b8:05:
                    53:95:59:e6:83:3c:b8:3c:0f:0a:a7:8b:d3:2c:82:
                    e7:e4:44:1b:cb:a3:0d:95:c1:9b:a8:14:1c:5c:ba:
                    0b:0f:f8:21:3d:06:46:0c:ab:80:4f:29:2e:d2:7a:
                    40:ac:28:29:f4:4d:d1:41:2c:9a:a3:48:a8:68:5f:
                    00:a5:6c:54:75:cd:c1:95:7b:cf:63:a9:5a:8d:1b:
                    ec:0c:4c:7c:86:c8:c8:e5:0b:e2:65:b7:59:3e:f0:
                    01:b5:16:7e:29:4b:86:4e:f7:5a:73:80:e8:bf:c3:
                    f2:7f:dd:43:04:d8:f8:7c:78:0b:71:71:e0:e0:c2:
                    a3:49:23:26:bc:7f:78:fa:58:24:35:59:89:be:e9:
                    cc:53:70:0d:c7:28:e2:ab:66:2e:12:6c:a6:59:9b:
                    c4:8e:b4:4f:1d:95:59:05:fc:0e:1e:6b:73:b0:77:
                    91:62:b4:ea:a7:2d:f5:27:9f:9e:3a:4c:fb:b5:ec:
                    df:0c:05:a9:1d:5d:37:99:48:09:e5:ac:02:cb:1e:
                    03:fe:b8:94:be:a9:4a:46:6e:8f:10:4d:a7:02:65:
                    c3:01:8e:ac:ce:01:96:05:c9:e8:57:ef:fc:f1:21:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:DA:7B:C4:8A:EC:33:BB:93:7B:F8:62:AA:4A:BF:75:89:17:D4
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:67:ce:2d:94:7d:19:90:41:64:31:62:53:11:55:00:30:
         9c:76:69:25:13:10:13:45:f8:5c:a8:c3:28:03:60:97:fe:ca:
         c7:5d:72:3f:21:1c:14:3f:f4:65:77:0c:bb:15:77:f4:94:91:
         b5:e7:58:98:21:02:85:61:01:4f:19:1a:90:7a:f2:4f:6b:96:
         7e:b4:ed:1c:ea:7d:d5:8c:af:22:98:d7:5e:42:e0:90:06:3c:
         73:31:78:03:aa:96:9d:5f:a5:8d:7e:63:67:9b:a8:89:4f:45:
         9a:05:6a:aa:06:53:2a:ad:d9:bb:d1:9a:27:0c:a3:60:e5:9e:
         e7:8c:9f:03:6e:1f:34:9b:ad:7a:2f:84:c9:51:57:b6:0a:44:
         18:f6:f7:7f:61:78:cd:7f:00:bc:15:c3:f4:ef:4c:2a:15:9c:
         8e:b3:c0:e2:40:b0:ad:65:3c:c7:ce:4e:c3:dd:8d:48:49:13:
         69:eb:24:94:44:3a:30:a9:41:8a:50:03:f7:1a:6c:1a:cf:f0:
         18:de:5c:92:b3:df:63:d8:10:8d:3f:33:17:85:2d:02:cc:e4:
         79:73:d4:7f:f3:0f:47:be:f7:95:ef:bc:dd:6f:55:23:43:13:
         bd:e2:70:03:63:8c:d2:56:e7:4d:a0:9f:dc:ef:3b:8f:b8:96:
         e1:6b:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----