Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa
File:                     323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          SnRmFzko2NlaD/lrZagU6tT5jmPrk31lhtp0kbn8Dj8=
Subject key identifier:   85:AB:41:6E:DE:06:1C:34:6F:73:06:7D:54:29:ED:85:51:C1:72:EF
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       6A9246233CFF4871F2E0A4581E342FDE7C2F4977
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Fri 11 Apr 2025 14:30:06 +0000
ROA not before:           Fri 11 Apr 2025 14:25:06 +0000
ROA not after:            Fri 10 Apr 2026 14:30:06 +0000
asID:                     216311
IP address blocks:        2602:f72e:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:92:46:23:3c:ff:48:71:f2:e0:a4:58:1e:34:2f:de:7c:2f:49:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Apr 11 14:25:06 2025 GMT
            Not After : Apr 10 14:30:06 2026 GMT
        Subject: CN=85AB416EDE061C346F73067D5429ED8551C172EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:63:0c:96:90:ac:9c:9e:07:03:d2:10:40:
                    59:da:f1:20:38:32:93:62:5f:47:8a:51:0e:e9:ec:
                    ec:93:73:2a:25:2f:4b:4d:55:41:a7:0c:c6:b5:68:
                    c9:b2:b0:ec:0a:57:ee:c1:49:a1:c6:ba:e2:42:d0:
                    35:36:a9:dc:20:d4:c6:0d:9e:15:df:3e:f0:86:c4:
                    7e:a1:5c:d5:e8:ec:d1:08:f2:1b:a1:0f:40:de:81:
                    b8:cf:ed:dd:2d:ab:15:80:ae:0f:65:63:96:6b:a1:
                    a4:92:bd:64:fd:92:a0:bb:40:4e:9d:b7:16:45:60:
                    64:95:f2:8e:11:26:96:cd:c3:0b:1c:e8:ea:c8:33:
                    01:42:69:ff:9a:6b:fd:ac:ce:d8:0d:30:fb:70:65:
                    b1:ab:1b:01:18:fd:87:e7:82:12:b0:0b:bf:78:29:
                    9f:32:7e:00:23:39:0a:2f:1d:80:35:db:ee:de:70:
                    67:fb:3b:bc:d7:d3:d6:cb:38:ed:37:e6:f9:44:db:
                    18:bd:13:15:53:5c:84:c8:8c:a2:b6:7e:7c:31:9f:
                    64:ff:8c:be:7e:ca:5d:29:41:b8:71:fd:a0:80:7c:
                    b6:90:9b:01:f6:fe:02:b9:e8:4f:09:70:71:eb:4c:
                    5d:26:a9:f4:63:d2:de:fe:9d:94:90:bc:1b:82:94:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:41:6E:DE:06:1C:34:6F:73:06:7D:54:29:ED:85:51:C1:72:EF
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a383a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:32:fe:f6:3b:45:ab:a7:44:ef:8f:19:cb:42:49:fe:eb:b5:
         30:0f:d0:af:24:67:51:d8:86:26:1a:9f:72:77:9b:c7:26:30:
         7b:68:e4:b7:57:a6:c7:bf:ea:fe:66:0a:e2:84:38:e3:76:f4:
         9a:e8:5a:11:d7:75:a5:15:95:05:1a:97:a8:68:94:50:5a:a2:
         aa:d7:36:d7:3f:79:02:8c:bc:51:04:7d:b1:59:4c:5f:f5:45:
         a7:24:2d:9f:63:f9:7e:84:69:78:4e:0e:42:04:f7:4d:87:8c:
         bc:78:bd:0d:7e:56:86:f7:0e:f5:39:78:61:14:03:1d:69:44:
         bb:50:92:c3:8a:bb:71:36:76:c0:99:5e:37:f2:ef:f2:be:71:
         b6:63:25:6e:32:96:27:e0:89:ac:ae:37:52:55:29:76:25:92:
         6e:81:97:d0:4e:b9:a7:3c:ed:c8:1c:eb:75:5f:05:26:99:72:
         e7:9a:63:fe:8d:76:7a:1e:89:1f:9a:e3:32:59:03:11:32:75:
         9c:8a:94:5a:13:3f:d9:1a:08:38:22:ef:4e:bd:d5:cd:18:a6:
         ea:b0:ce:c6:7b:14:c7:bd:74:2f:d7:db:dd:dd:b0:e1:86:d7:
         78:35:ec:29:c9:1c:8d:ef:71:59:89:94:2b:12:b1:95:1f:e4:
         94:a4:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----