Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          883EhwF3J8ZF0FodQ0Caat94NcC0MKBUMENu6CBDzMI=
Subject key identifier:   95:13:3C:DD:39:CE:42:6E:61:D7:EC:20:3D:F7:B9:85:F6:57:EA:7F
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       31A8EF2330BD012EDBEE46B1A6AE8A02B0454B08
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 09 Dec 2024 00:06:47 +0000
ROA not before:           Mon 09 Dec 2024 00:01:47 +0000
ROA not after:            Mon 08 Dec 2025 00:06:47 +0000
asID:                     215907
IP address blocks:        2602:817:1005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a8:ef:23:30:bd:01:2e:db:ee:46:b1:a6:ae:8a:02:b0:45:4b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec  9 00:01:47 2024 GMT
            Not After : Dec  8 00:06:47 2025 GMT
        Subject: CN=95133CDD39CE426E61D7EC203DF7B985F657EA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:c8:19:d3:14:41:30:fb:e0:67:09:83:ec:
                    a5:0f:4a:02:01:81:2b:08:cb:8d:11:c7:bc:bb:b1:
                    a1:59:d6:48:f1:a5:37:e6:f0:15:45:d1:bb:c6:84:
                    7e:c4:90:c7:08:66:45:a8:bb:3c:6f:0f:da:68:25:
                    dc:ef:a6:52:c8:74:53:c6:9d:e1:5d:ca:aa:83:71:
                    e7:bf:26:05:d2:72:f6:cd:d7:e2:20:d8:b1:88:29:
                    a7:b6:17:73:a2:f0:f1:ea:3a:b8:50:1a:e7:87:55:
                    06:c9:2b:f3:99:34:60:6e:4f:b7:83:e2:fd:cb:07:
                    24:af:b9:ad:18:85:ab:4f:a6:8a:9b:f7:2a:50:2e:
                    cf:a9:32:ee:39:a0:5a:dc:e6:9e:e6:e7:b8:16:ba:
                    93:ff:0b:7c:9a:72:ee:da:ac:d1:05:a6:fc:53:9a:
                    c8:8a:df:aa:c5:82:3b:79:5a:53:db:37:79:b7:5d:
                    aa:7e:56:5e:bc:43:df:92:63:4f:a3:b1:eb:6e:d2:
                    70:8c:43:d3:c5:27:90:39:f9:d8:65:cc:f3:a1:0d:
                    6b:51:cf:63:ec:6b:8c:dc:8d:06:66:35:26:67:8e:
                    58:24:be:54:62:ce:75:37:76:62:f5:5c:a0:26:20:
                    4c:08:7c:ef:aa:ca:88:bb:e4:07:33:0d:56:d1:28:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:13:3C:DD:39:CE:42:6E:61:D7:EC:20:3D:F7:B9:85:F6:57:EA:7F
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:e9:bc:55:58:da:af:82:59:38:9f:48:54:90:70:eb:4b:
         81:9a:ac:92:96:00:e2:af:ea:2c:4d:5d:29:0c:bf:5c:89:2d:
         93:8f:84:07:0c:f1:b1:62:38:fe:fc:b2:be:f3:68:38:76:13:
         c5:06:69:11:6b:1b:03:8a:e3:9f:3b:79:a9:a1:01:cf:9f:97:
         6b:90:a9:49:5b:61:de:4b:56:2b:33:dd:8b:69:06:0c:1a:1e:
         6d:f4:d8:90:a6:e2:41:08:11:43:26:3b:1b:f4:63:1e:5a:cc:
         47:26:99:ae:b6:d8:dc:e3:92:9d:6b:e9:00:cb:f2:cd:39:f7:
         7e:a7:cd:54:38:96:bd:94:be:7f:6a:c1:4a:72:b5:a2:a1:68:
         de:c2:6e:68:c0:2b:f9:65:ba:a7:ca:01:fa:34:a4:ca:6c:38:
         04:b3:f7:7a:f1:76:ea:0d:e7:5f:2f:86:9f:e6:38:5c:8e:5e:
         71:1f:e1:58:ff:03:58:a8:c7:75:8d:a5:da:56:ce:45:b0:0e:
         d4:91:e8:d4:84:18:bf:58:ae:0a:2c:bf:30:37:44:75:87:56:
         1d:c1:85:bb:84:82:95:d3:48:48:5f:51:2a:9a:0f:6b:80:a8:
         f6:ef:6a:57:ed:7a:41:65:bb:6e:dd:8f:32:01:72:0f:36:eb:
         61:49:5c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----