Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa
File:                     323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa (raw, json)
Hash identifier:          G3rWHX5tERXKYo4hKGor8QhcRYmygB3uoNUTEp/1aCo=
Subject key identifier:   09:3F:49:25:0B:25:34:89:E8:B4:B5:56:39:0A:3E:D9:6D:02:AB:6B
Certificate issuer:       /CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
Certificate serial:       08A73877B5D3AC57400D25D92CCF55DA862AD486
Authority key identifier: 2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa
Signing time:             Thu 10 Apr 2025 08:02:39 +0000
ROA not before:           Thu 10 Apr 2025 07:57:39 +0000
ROA not after:            Thu 09 Apr 2026 08:02:39 +0000
asID:                     13852
IP address blocks:        2602:f7ff:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a7:38:77:b5:d3:ac:57:40:0d:25:d9:2c:cf:55:da:86:2a:d4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
        Validity
            Not Before: Apr 10 07:57:39 2025 GMT
            Not After : Apr  9 08:02:39 2026 GMT
        Subject: CN=093F49250B253489E8B4B556390A3ED96D02AB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:3b:55:37:4c:f1:9d:4f:b6:64:44:23:fb:
                    12:83:d3:66:ed:95:e5:20:fd:ed:44:8b:75:49:98:
                    9b:fa:40:d6:43:ca:93:fe:a8:42:50:1e:34:04:fd:
                    95:8c:f5:11:35:76:73:42:82:ad:72:fa:bc:0e:a6:
                    c1:20:80:12:48:aa:cb:3e:19:f4:87:25:70:d5:62:
                    6f:52:5b:66:95:47:78:83:9c:4e:16:e8:9a:c7:e6:
                    e7:11:c5:02:b9:30:c9:e1:cd:2f:e3:02:d8:b2:db:
                    c8:1e:e5:c8:4e:7d:0b:d7:b9:53:11:b8:9e:9d:3d:
                    48:44:64:d3:5b:07:54:7c:41:54:67:8b:e8:cf:ce:
                    47:3b:21:69:99:61:76:9e:93:25:3f:58:5e:f3:3e:
                    9d:21:9b:3c:86:e1:39:b8:03:ee:79:94:21:94:56:
                    7b:c4:ef:0f:cb:c5:91:79:71:50:c2:64:96:bc:29:
                    55:09:d6:ca:a5:92:a9:ac:66:0a:50:5e:a0:a0:0f:
                    1d:f3:12:12:2e:73:5c:0b:18:df:ab:9a:2d:91:fe:
                    8b:b8:84:96:9a:00:2b:50:e8:79:ff:ce:e8:69:ed:
                    e7:a6:b5:33:1f:0e:9d:b4:a7:35:42:f5:66:ec:80:
                    82:cd:4e:3d:eb:b5:d8:33:dc:48:aa:d4:7f:72:00:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:49:25:0B:25:34:89:E8:B4:B5:56:39:0A:3E:D9:6D:02:AB:6B
            X509v3 Authority Key Identifier:
                keyid:2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:3a:55:ee:bd:1b:43:bd:2e:f9:c3:d6:bb:16:3e:03:7a:
         b2:0a:b3:87:a1:df:24:a3:0f:96:2b:90:5b:be:9b:17:d1:e8:
         7a:e5:64:8a:53:ed:be:d8:75:74:90:7f:6c:93:a3:a8:67:01:
         9a:cd:fe:57:90:aa:94:56:ad:f9:15:44:61:fe:40:0e:ce:45:
         c8:c5:ff:55:cd:d5:41:6b:41:24:18:cd:5c:6f:fd:8a:a0:19:
         0f:00:66:94:e5:6b:86:18:aa:06:02:3d:2a:ad:6b:22:6e:c1:
         f6:bc:79:22:a0:41:01:cd:c9:dc:d0:df:62:b0:85:53:3a:9f:
         4c:e9:80:ba:3e:c9:b6:42:c7:fb:3b:e7:e8:ad:a2:41:96:14:
         6d:56:7a:54:35:8e:6b:85:da:37:69:25:39:90:a9:fd:95:e4:
         79:bd:0d:cc:f0:1b:3b:d8:7f:7e:52:d2:3d:8b:6a:37:e9:0c:
         6c:5a:36:19:9e:7a:2d:ab:7e:8d:bc:f9:02:68:33:6c:12:32:
         57:b5:9f:e8:0b:06:b4:c3:a5:0b:8f:4e:53:38:e9:7e:51:bb:
         44:8a:7f:dc:78:c7:6a:65:7a:0c:1d:0f:3b:a3:15:61:7c:9f:
         63:c4:44:0e:52:5e:64:f5:ca:3a:ad:b5:62:e4:14:cc:45:5f:
         9e:49:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net