Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa
File:                     323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa (raw, json)
Hash identifier:          DAwlzgJBEuC3ZcBdMCWRoH7RBrQ0Nx6fgR7ZFbtngmY=
Subject key identifier:   92:CE:10:CE:1E:60:72:F1:EB:A5:20:40:9A:9E:CD:08:5A:2B:35:04
Certificate issuer:       /CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
Certificate serial:       3797CB5E7DB4A39A9C4D218D35F85D2D1D85E2AF
Authority key identifier: 2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa
Signing time:             Thu 10 Apr 2025 08:02:29 +0000
ROA not before:           Thu 10 Apr 2025 07:57:29 +0000
ROA not after:            Thu 09 Apr 2026 08:02:29 +0000
asID:                     13852
IP address blocks:        2602:f7ff:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:cb:5e:7d:b4:a3:9a:9c:4d:21:8d:35:f8:5d:2d:1d:85:e2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
        Validity
            Not Before: Apr 10 07:57:29 2025 GMT
            Not After : Apr  9 08:02:29 2026 GMT
        Subject: CN=92CE10CE1E6072F1EBA520409A9ECD085A2B3504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bd:c2:f1:2f:a6:3b:f0:13:af:a6:d5:54:ff:
                    5a:29:1c:36:48:ed:06:9a:55:3c:b5:ac:cd:ac:1e:
                    e8:b5:03:3e:d6:1c:28:12:09:95:43:04:2b:c6:2c:
                    07:74:a8:cd:19:05:c9:b4:b9:97:6b:c2:4b:76:4a:
                    af:95:16:2b:a7:43:0a:be:ff:b4:c9:f0:ec:b9:53:
                    10:e0:f0:b7:54:83:80:1a:f0:31:b4:b3:63:82:9e:
                    87:33:a5:11:e7:78:2f:cf:05:f8:d4:94:ed:dd:1c:
                    42:38:6a:73:32:d9:fc:a2:5f:2d:b3:e0:64:75:cd:
                    65:85:d9:3c:1a:90:bb:27:b6:24:bc:39:c7:a9:0b:
                    6e:08:8a:f5:c3:93:55:3d:3a:04:c1:ba:67:62:c7:
                    35:fe:51:0f:6e:f5:c3:f9:ae:d0:59:65:3d:76:d0:
                    32:98:58:09:d3:fe:d6:ca:c1:6a:f3:8c:40:70:0b:
                    98:ac:c5:a1:bd:31:17:4e:f5:6d:eb:bc:e4:34:b4:
                    63:e4:75:60:43:e5:0b:68:1a:a7:0a:cb:02:98:09:
                    4a:47:48:6e:8d:24:10:b0:43:fe:92:20:c5:0a:c8:
                    85:cd:0c:61:b0:9d:cc:60:12:f4:36:78:c3:30:f3:
                    8f:16:d7:2e:c3:82:58:70:05:80:58:88:67:cd:9d:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CE:10:CE:1E:60:72:F1:EB:A5:20:40:9A:9E:CD:08:5A:2B:35:04
            X509v3 Authority Key Identifier:
                keyid:2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ff:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:53:5f:ac:83:67:4d:c2:92:21:ef:b9:39:29:fa:99:f8:3b:
         03:33:5a:0f:d8:f2:5b:35:61:a2:94:eb:f6:8b:43:57:7a:40:
         a8:4b:3d:cc:ab:d0:e2:98:fd:3f:a8:60:71:4a:a4:5a:7c:b1:
         68:68:8e:5f:86:af:a1:4c:18:2f:6e:7b:0b:d1:a0:40:fc:23:
         91:68:52:d7:8e:2d:13:04:d8:e7:9c:f3:39:b4:bd:81:c3:51:
         44:8f:ed:8f:44:3f:a3:5a:e2:bf:c9:2a:fd:14:c7:ee:73:ec:
         d5:d4:8f:93:89:17:65:04:a0:53:92:cd:5d:ce:2c:68:3b:58:
         9c:e9:74:95:08:b6:aa:23:5b:80:d5:63:fa:6f:f5:bf:03:93:
         ee:56:04:cf:84:4c:67:69:f4:86:3b:64:80:6d:c5:ab:28:02:
         fc:b1:18:eb:83:4d:3f:4d:b6:7f:53:3b:7c:d5:20:64:ec:01:
         b7:66:1f:87:6a:2d:d6:02:3b:80:af:b4:db:75:25:7e:c7:74:
         f1:8a:9c:0a:3a:3d:7b:20:77:db:78:85:98:74:62:4a:a3:f3:
         68:59:6d:ae:36:20:9d:66:09:f5:9d:18:6d:98:39:e7:e2:70:
         a9:b3:90:f5:b3:b6:7e:ca:09:2b:2b:f6:15:91:af:bc:a8:ff:
         b6:48:b6:2d
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUN5fLXn20o5qcTSGNNfhdLR2F4q8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDM1NWI0N2Q4N2YxM2YxYjY4MDAyYmI0
YjBmMTkxZWYwZTYyNzk4YWMwHhcNMjUwNDEwMDc1NzI5WhcNMjYwNDA5MDgwMjI5
WjAzMTEwLwYDVQQDEyg5MkNFMTBDRTFFNjA3MkYxRUJBNTIwNDA5QTlFQ0QwODVB
MkIzNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L3C8S+mO/AT
r6bVVP9aKRw2SO0GmlU8tazNrB7otQM+1hwoEgmVQwQrxiwHdKjNGQXJtLmXa8JL
dkqvlRYrp0MKvv+0yfDsuVMQ4PC3VIOAGvAxtLNjgp6HM6UR53gvzwX41JTt3RxC
OGpzMtn8ol8ts+Bkdc1lhdk8GpC7J7YkvDnHqQtuCIr1w5NVPToEwbpnYsc1/lEP
bvXD+a7QWWU9dtAymFgJ0/7WysFq84xAcAuYrMWhvTEXTvVt67zkNLRj5HVgQ+UL
aBqnCssCmAlKR0hujSQQsEP+kiDFCsiFzQxhsJ3MYBL0NnjDMPOPFtcuw4JYcAWA
WIhnzZ3qHwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFJLOEM4eYHLx66UgQJqezQha
KzUEMB8GA1UdIwQYMBaAFC4IODu9+J4KTJrA3zPc0Buhm6sBMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzAyNmNlNGQzYTU0ZjRhMTFhZTVhYmE5ODMzNDEwNzAxLzAv
MkUwODM4M0JCREY4OUUwQTRDOUFDMERGMzNEQ0QwMUJBMTlCQUIwMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzZlODNmYmYyLWI2NGItNGM1NS1iYTI4LWNhODRhZDBhZjVhYi9mOWQ0
YmQ4M2VkMzU1YjQ3ZDg3ZjEzZjFiNjgwMDJiYjRiMGYxOTFlZjBlNjI3OThhYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8wMjZjZTRkM2E1NGY0YTExYWU1YWJh
OTgzMzQxMDcwMS8wLzMyMzYzMDMyM2E2NjM3NjY2NjNhMzYzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTMzMzgzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3/wAGMA0GCSqGSIb3
DQEBCwUAA4IBAQBCU1+sg2dNwpIh77k5KfqZ+DsDM1oP2PJbNWGilOv2i0NXekCo
Sz3Mq9DimP0/qGBxSqRafLFoaI5fhq+hTBgvbnsL0aBA/CORaFLXji0TBNjnnPM5
tL2Bw1FEj+2PRD+jWuK/ySr9FMfuc+zV1I+TiRdlBKBTks1dzixoO1ic6XSVCLaq
I1uA1WP6b/W/A5PuVgTPhExnafSGO2SAbcWrKAL8sRjrg00/TbZ/Uzt81SBk7AG3
Zh+Hai3WAjuAr7TbdSV+x3TxipwKOj17IHfbeIWYdGJKo/NoWW2uNiCdZgn1nRht
mDnn4nCps5D1s7Z+ygkrK/YVka+8qP+2SLYt
-----END CERTIFICATE-----