Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030323a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030323a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          hLUPEJ0lIV1w0caws7pT5u4xxfFquGjvqyENx65RIq4=
Subject key identifier:   C6:43:B9:44:ED:F8:F4:3B:FB:10:6E:70:0C:3D:E2:A4:6B:52:05:FA
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       79C144368BC4E1F0728AD5E771EE67B7979EE779
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030323a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 09 Dec 2024 00:06:46 +0000
ROA not before:           Mon 09 Dec 2024 00:01:46 +0000
ROA not after:            Mon 08 Dec 2025 00:06:46 +0000
asID:                     215907
IP address blocks:        2602:817:1002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c1:44:36:8b:c4:e1:f0:72:8a:d5:e7:71:ee:67:b7:97:9e:e7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec  9 00:01:46 2024 GMT
            Not After : Dec  8 00:06:46 2025 GMT
        Subject: CN=C643B944EDF8F43BFB106E700C3DE2A46B5205FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:54:a1:90:74:82:41:2a:72:0a:fd:b2:5d:
                    79:ad:37:88:21:ad:83:8b:0d:20:71:63:91:60:8d:
                    27:85:b0:7a:ee:e7:d2:51:08:55:2f:92:d0:0d:7c:
                    da:0d:2e:e8:1f:b6:4b:4d:ec:ec:89:16:24:58:da:
                    b9:bd:78:80:d9:47:57:99:ce:e7:b7:9e:91:65:2e:
                    64:8d:10:c6:63:c5:09:14:91:78:aa:01:2a:60:8e:
                    6c:24:14:a2:15:40:62:e2:3c:d2:57:eb:45:aa:23:
                    c0:a5:85:9c:9e:e5:97:34:e0:bf:53:bb:95:f2:1e:
                    29:6d:36:b7:c1:92:56:f4:29:f3:63:15:04:9c:6c:
                    09:64:0e:2e:2a:e9:56:41:d9:47:9b:04:96:eb:a8:
                    8f:d2:25:ca:e3:39:5b:c0:47:47:5e:3c:8b:c5:78:
                    20:fc:2f:64:bd:07:bf:a0:e8:1a:0d:7d:fb:02:89:
                    03:79:57:52:61:13:d3:31:a6:e8:ff:cb:e5:69:08:
                    88:b3:22:f3:a0:20:a1:c1:ba:d1:42:5c:c5:a8:ce:
                    c2:4d:ff:60:32:2f:ee:f0:49:1d:ad:b4:28:75:50:
                    bd:d4:40:ac:92:53:ce:b9:69:8f:25:4c:d4:79:bb:
                    2e:6d:15:81:ff:bf:6e:99:68:c9:fe:a7:57:8d:6c:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:B9:44:ED:F8:F4:3B:FB:10:6E:70:0C:3D:E2:A4:6B:52:05:FA
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030323a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:d7:4f:e5:9c:48:d8:f7:53:b7:7e:5f:1a:b6:e6:2e:4a:33:
         a3:5a:48:b5:83:4b:f6:27:1f:fd:02:43:80:be:fb:9d:8d:50:
         c2:0d:3a:fe:da:68:d5:92:98:0b:01:5a:36:44:51:ce:fe:68:
         1a:6e:05:87:7a:97:95:27:f7:28:73:1e:bd:f6:b7:74:f2:89:
         81:65:ec:99:b6:24:d1:72:77:e1:7d:92:3f:07:28:f0:b9:2c:
         29:aa:c1:50:11:2c:35:ba:02:9b:54:7e:b9:68:be:aa:09:8e:
         69:b8:af:60:0a:f0:ed:26:61:61:2b:11:a2:95:c0:fe:41:12:
         e6:23:c1:18:5c:4a:a5:23:36:d1:41:09:fe:30:8d:24:2c:a7:
         db:42:3a:9e:8a:cc:40:0e:d5:33:bb:5c:6f:47:a9:ab:ce:fd:
         26:91:81:0a:da:e4:9e:c1:6c:95:d2:55:f4:50:9e:0c:a4:84:
         b4:0f:50:9d:ec:c9:b6:0d:8c:33:e2:78:91:ef:61:0c:ad:03:
         8b:5f:08:67:01:bc:a6:74:08:21:a1:69:b8:a1:85:2e:44:82:
         c5:69:97:0a:ba:b6:6c:30:30:95:b9:cf:5a:16:9a:71:f0:2d:
         04:dc:a1:e6:71:67:cd:89:65:ad:df:52:e2:b5:e1:cd:59:74:
         17:f8:24:a8
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUecFENovE4fByitXnce5nt5ee53kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk
NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjQxMjA5MDAwMTQ2WhcNMjUxMjA4MDAwNjQ2
WjAzMTEwLwYDVQQDEyhDNjQzQjk0NEVERjhGNDNCRkIxMDZFNzAwQzNERTJBNDZC
NTIwNUZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH9UoZB0gkEq
cgr9sl15rTeIIa2Diw0gcWORYI0nhbB67ufSUQhVL5LQDXzaDS7oH7ZLTezsiRYk
WNq5vXiA2UdXmc7nt56RZS5kjRDGY8UJFJF4qgEqYI5sJBSiFUBi4jzSV+tFqiPA
pYWcnuWXNOC/U7uV8h4pbTa3wZJW9CnzYxUEnGwJZA4uKulWQdlHmwSW66iP0iXK
4zlbwEdHXjyLxXgg/C9kvQe/oOgaDX37AokDeVdSYRPTMabo/8vlaQiIsyLzoCCh
wbrRQlzFqM7CTf9gMi/u8EkdrbQodVC91ECsklPOuWmPJUzUebsubRWB/79umWjJ
/qdXjWzIqwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMZDuUTt+PQ7+xBucAw94qRr
UgX6MB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv
NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk
ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj
ZjJjODM1NGI1Mi8wLzMyMzYzMDMyM2EzODMxMzczYTMxMzAzMDMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM1MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFxACMA0G
CSqGSIb3DQEBCwUAA4IBAQAB10/lnEjY91O3fl8atuYuSjOjWki1g0v2Jx/9AkOA
vvudjVDCDTr+2mjVkpgLAVo2RFHO/mgabgWHepeVJ/cocx699rd08omBZeyZtiTR
cnfhfZI/ByjwuSwpqsFQESw1ugKbVH65aL6qCY5puK9gCvDtJmFhKxGilcD+QRLm
I8EYXEqlIzbRQQn+MI0kLKfbQjqeisxADtUzu1xvR6mrzv0mkYEK2uSewWyV0lX0
UJ4MpIS0D1Cd7Mm2DYwz4niR72EMrQOLXwhnAbymdAghoWm4oYUuRILFaZcKurZs
MDCVuc9aFppx8C0E3KHmcWfNiWWt31LiteHNWXQX+CSo
-----END CERTIFICATE-----