Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          2XcP7iwAY7Xy+MY6Ol8KIrrLGhpwzafsgC4DW9fmcJE=
Subject key identifier:   00:C9:CF:4A:AB:99:0D:05:49:DD:DF:2B:3E:F5:E8:7D:22:E4:74:62
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       313B70119E5CB3B89D1C289FDA18BB40626A3C2C
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     10103
IP address blocks:        2607:74c0:100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3b:70:11:9e:5c:b3:b8:9d:1c:28:9f:da:18:bb:40:62:6a:3c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=00C9CF4AAB990D0549DDDF2B3EF5E87D22E47462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:cf:b4:cb:8d:6c:8d:91:fc:2e:b0:37:a3:
                    99:33:a4:b6:7f:c2:6d:ce:a5:16:d8:86:b3:b3:3b:
                    8e:b6:ed:de:94:ec:b1:05:c3:11:37:0e:07:4c:a5:
                    da:dd:b2:f4:66:96:03:4d:23:a0:1d:f6:a7:cb:a2:
                    9b:33:8c:35:d5:9e:93:b8:ea:0b:55:19:31:a6:01:
                    0c:dd:65:75:7d:ca:48:3d:5e:e8:7e:e8:f7:98:00:
                    1c:ee:b1:9c:d4:41:5e:2c:01:e6:62:5f:32:81:95:
                    74:33:43:a2:19:18:b4:36:75:ec:30:ed:af:f6:93:
                    a0:2f:dc:84:61:1a:4c:e4:d1:71:a5:f8:45:53:9c:
                    d1:59:b1:57:c7:78:be:5b:81:2f:33:9c:68:5a:4c:
                    3c:29:88:18:10:84:aa:a7:33:f6:08:3d:33:f5:0d:
                    9d:dd:fc:69:4d:f7:7b:25:d3:7e:cb:43:15:6b:b6:
                    9a:fe:ba:81:3d:e5:9c:b6:09:d4:5c:f6:43:31:08:
                    8d:ca:d5:7f:9a:33:ff:5e:4b:35:7b:3a:00:20:c2:
                    74:16:7c:05:72:06:2f:95:98:56:cb:f7:62:d2:52:
                    1f:3f:6e:97:d0:4b:43:1a:1d:7e:1c:dc:16:9d:a7:
                    1d:7b:a2:a0:be:90:9d:13:37:2a:2c:e9:5f:1b:22:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C9:CF:4A:AB:99:0D:05:49:DD:DF:2B:3E:F5:E8:7D:22:E4:74:62
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3130303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:25:11:a1:45:2f:b9:25:90:cd:2b:0e:f1:9b:3f:e1:b5:37:
         66:6f:34:c0:6b:89:46:d1:39:fc:4a:ed:7c:77:e9:f3:ff:23:
         06:26:95:a5:17:8d:b6:70:65:9d:38:86:88:72:88:06:e4:0f:
         1c:fe:91:af:28:1e:31:e1:28:4e:f0:e2:97:68:4e:65:98:24:
         31:75:9f:6d:8d:2e:47:55:91:40:cb:20:5c:2e:94:5e:71:d6:
         cf:83:8e:aa:7b:51:71:af:7a:2c:b8:35:db:27:8d:23:38:02:
         54:fd:44:3e:b6:48:8d:e2:07:da:1f:9a:0f:99:23:78:45:d5:
         f0:88:f3:8d:9a:39:21:62:48:5e:0a:f6:8f:5c:b6:b9:69:db:
         e8:bd:3e:e0:a2:62:1e:dc:57:a4:0f:74:3e:28:1d:52:d9:dd:
         51:8f:ac:5f:e9:5e:4e:58:73:3d:47:3c:24:87:76:97:00:c1:
         e6:6d:34:8c:a6:dd:f5:41:ab:2c:4e:ec:64:35:3a:35:e1:bc:
         ff:75:e4:36:a7:ee:ea:9f:68:4d:ae:5c:3c:b7:01:a5:15:1d:
         06:34:de:c6:e9:47:2d:e7:6b:3c:8a:49:6f:37:44:7b:30:87:
         2f:ef:71:50:61:27:d3:3b:df:5f:11:ea:07:b2:e7:d8:f8:56:
         f1:7b:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----