Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030343a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030343a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          N4kJk51MBWZJTUynj+Ydf0XGKMvXfz7c5XnIXBc5Idw=
Subject key identifier:   07:12:AE:9F:41:8E:A1:9F:2C:86:36:A9:0C:A5:E8:C9:EC:02:C6:46
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       0744ABCF599C37B1DF5118C7469EAECAA8B318D7
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030343a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 09 Dec 2024 00:06:46 +0000
ROA not before:           Mon 09 Dec 2024 00:01:46 +0000
ROA not after:            Mon 08 Dec 2025 00:06:46 +0000
asID:                     215907
IP address blocks:        2602:817:1004::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:44:ab:cf:59:9c:37:b1:df:51:18:c7:46:9e:ae:ca:a8:b3:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec  9 00:01:46 2024 GMT
            Not After : Dec  8 00:06:46 2025 GMT
        Subject: CN=0712AE9F418EA19F2C8636A90CA5E8C9EC02C646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:d9:0b:92:30:51:3a:67:e5:77:7d:21:cc:
                    6b:3f:c9:36:ab:fa:31:72:63:2d:e5:44:e1:e5:44:
                    47:eb:f3:9e:3f:2c:c8:98:2a:37:a1:6a:87:05:d1:
                    41:a4:36:4c:5d:b6:88:23:89:ca:56:7a:14:73:93:
                    25:07:bf:c4:22:7d:ef:87:ad:2e:94:c4:14:ea:06:
                    4f:a2:22:e9:14:70:e0:e2:3d:9b:22:a2:a3:b5:3f:
                    b8:ee:26:41:f7:dd:df:c2:cf:61:9a:92:7b:a1:41:
                    a0:f8:10:60:fc:2a:05:42:f0:5a:89:e4:c7:d8:a0:
                    d4:f5:bb:3c:cc:48:83:45:51:ae:7f:69:6d:93:93:
                    9d:7b:2c:1d:74:57:99:17:7b:23:f0:b1:3c:b0:1f:
                    10:78:41:58:56:b3:55:0a:14:b5:38:f3:d3:20:3d:
                    c6:e8:8a:c0:7a:69:45:22:1a:07:76:08:bf:26:01:
                    11:bd:aa:20:11:3a:4a:31:dc:1b:35:86:43:39:7f:
                    55:d4:56:a4:ae:1a:27:c1:bd:2c:e1:33:32:21:08:
                    45:09:56:7e:e6:2a:4e:7f:a9:e8:61:39:4a:f8:45:
                    62:0b:6d:27:1e:5d:d2:0c:6c:06:10:92:a6:fa:ee:
                    80:a8:4c:93:68:c5:ec:f9:13:4a:49:65:04:0c:55:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:12:AE:9F:41:8E:A1:9F:2C:86:36:A9:0C:A5:E8:C9:EC:02:C6:46
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030343a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:f5:28:0e:49:01:b8:58:b9:58:66:4f:d4:a4:6e:ea:e1:10:
         e9:3d:f1:17:53:8c:e6:a9:a1:a6:84:76:9a:b1:6b:44:c2:bd:
         13:a7:fb:46:ad:b0:ce:9f:50:be:0e:3a:2f:3a:88:33:eb:b0:
         93:a9:d0:25:ee:b7:eb:c1:34:78:e8:35:02:40:d9:26:d6:8a:
         28:67:5c:e5:82:19:ec:fd:61:40:37:f9:dd:86:11:0f:fe:ff:
         a0:81:61:93:3b:4b:76:3a:51:26:b0:3f:6e:aa:1a:1a:19:72:
         dd:a9:96:01:46:4f:a1:da:06:74:a1:89:e9:a1:f6:69:99:b1:
         60:43:c0:4a:ea:bb:ae:d1:7f:bf:38:28:88:bd:f3:1a:17:07:
         85:a9:e6:5f:68:06:9e:80:89:bc:d9:e5:b5:73:e4:38:b4:2e:
         7d:a0:be:0f:ac:00:63:3d:2c:cc:21:07:69:ee:82:bd:c1:37:
         0e:46:1c:d3:b9:19:5b:c0:b9:4a:f9:ef:7d:34:24:47:d7:f7:
         24:13:e7:8e:1b:26:1b:a0:a4:8c:b8:02:a0:a0:90:20:54:6c:
         53:dd:ff:05:40:90:6d:63:9a:3f:2f:18:44:d4:bf:f3:4d:db:
         c8:2a:bd:c1:0a:95:75:c4:f4:09:8b:fd:ef:4c:e8:da:aa:18:
         84:b1:92:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----