Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          p9IFmDKOQ2r53I1aWsBSJWpul62K00AEF7s7zBLqpPU=
Subject key identifier:   F6:C7:5F:75:83:50:E1:3F:6C:43:03:33:3D:19:23:36:B5:61:28:68
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       02DB325262C07960F0A139EB32C8BB782BA2F8A9
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 09 Dec 2024 00:06:48 +0000
ROA not before:           Mon 09 Dec 2024 00:01:48 +0000
ROA not after:            Mon 08 Dec 2025 00:06:48 +0000
asID:                     215907
IP address blocks:        2602:817:1003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:db:32:52:62:c0:79:60:f0:a1:39:eb:32:c8:bb:78:2b:a2:f8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec  9 00:01:48 2024 GMT
            Not After : Dec  8 00:06:48 2025 GMT
        Subject: CN=F6C75F758350E13F6C4303333D192336B5612868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2d:a1:e5:04:e3:9a:64:a5:e1:a4:f8:82:31:
                    2c:c6:f8:89:2f:34:bd:25:09:a1:38:68:d7:90:b0:
                    9d:1f:f7:ec:09:42:ff:62:b9:b0:61:f0:69:4c:16:
                    45:a8:e9:12:26:fc:a9:5e:76:40:fb:b6:a9:a0:31:
                    08:f7:a3:d1:67:ad:b1:d0:9d:63:29:63:94:a3:04:
                    3b:e9:4b:a4:0a:2b:cf:a3:77:7b:5b:c5:8a:65:34:
                    54:a8:69:cc:7c:af:61:05:5d:2d:22:c2:2e:26:c5:
                    36:2d:fa:ac:8b:97:0e:0b:59:01:d8:93:ed:bb:63:
                    63:8c:1e:a8:57:78:7f:6d:bf:18:ec:66:2a:0f:5d:
                    5b:ef:43:b4:33:92:24:dd:a8:4e:d0:1a:92:19:d4:
                    24:c8:11:24:3d:70:60:55:ed:e1:04:61:19:11:4a:
                    d8:f7:03:8b:f1:38:7e:4c:a6:1b:34:ed:22:8b:fa:
                    fe:5f:11:45:5f:69:07:71:86:62:b0:65:65:b1:c5:
                    1b:4d:e9:20:5c:78:34:84:58:37:9c:c1:54:19:35:
                    39:76:ba:21:63:70:2d:51:07:5c:f8:0e:69:5a:7e:
                    c1:7e:5d:0a:44:13:91:01:6d:62:b3:0a:65:41:53:
                    63:a3:5a:e2:47:27:f5:c0:4f:a6:34:ef:7c:26:be:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:5F:75:83:50:E1:3F:6C:43:03:33:3D:19:23:36:B5:61:28:68
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:47:f5:81:d0:8c:64:5b:27:4a:79:83:b9:34:18:7d:a2:20:
         b8:59:92:11:80:6d:23:01:99:e4:bd:53:61:2f:24:9a:18:5b:
         43:7f:e3:52:ae:c5:d7:5c:c2:d0:f5:86:50:06:28:03:13:09:
         0e:2b:35:61:05:44:cb:25:b0:c3:4f:88:d7:6f:9a:80:8e:50:
         28:de:69:3c:d1:e3:8e:a0:a5:d8:98:5d:31:28:a9:dd:e8:10:
         11:2d:96:73:53:65:35:a9:c0:07:18:38:a1:01:1c:27:62:29:
         6a:50:49:cb:c3:bf:93:06:44:27:5f:55:00:4f:d6:da:09:75:
         d8:0f:dd:87:c5:a3:1e:c5:2e:26:a3:b9:bc:70:f7:6a:6b:8a:
         b7:6f:2e:f4:55:d8:a3:5d:75:68:cd:03:7f:4d:59:b2:4f:c2:
         de:e5:f4:4c:e7:60:3b:23:68:48:59:49:d1:f5:e5:86:1d:54:
         fc:6b:ad:4c:0a:5b:f9:b5:6d:d2:8f:64:b1:f5:da:ec:d8:7f:
         98:a5:ea:51:14:03:29:ee:e0:2e:86:fd:35:22:cf:bd:70:b6:
         a0:0c:a6:0e:e1:77:23:de:94:1e:fc:c9:19:10:6b:a6:55:36:
         c1:8a:04:87:47:c3:f2:ec:b3:6c:00:7d:b4:c9:e5:84:88:09:
         95:4a:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----