Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030383a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030383a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          r29DB0R/kObh0fBpCr7tzOwy1+3SDIG7XN3C98nqzzM=
Subject key identifier:   07:F0:F1:3C:77:35:35:3A:8B:8D:C5:D8:BA:E5:05:82:57:C6:5D:53
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       68C7FB15D1CEEB6424CF2A944459AAAD6249775A
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030383a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Wed 25 Dec 2024 03:06:59 +0000
ROA not before:           Wed 25 Dec 2024 03:01:59 +0000
ROA not after:            Wed 24 Dec 2025 03:06:59 +0000
asID:                     215907
IP address blocks:        2602:817:1008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:fb:15:d1:ce:eb:64:24:cf:2a:94:44:59:aa:ad:62:49:77:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec 25 03:01:59 2024 GMT
            Not After : Dec 24 03:06:59 2025 GMT
        Subject: CN=07F0F13C7735353A8B8DC5D8BAE5058257C65D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:3e:7e:20:2c:96:c9:6a:b6:12:41:6e:f0:
                    a9:1c:c1:e9:09:d8:45:a1:62:b8:c6:05:43:f2:5d:
                    a2:c1:5d:b9:78:7e:d0:d4:18:e2:0a:cd:31:31:ef:
                    83:03:b1:22:27:35:1e:c7:0c:08:92:fc:05:bb:96:
                    15:eb:1c:c7:6c:7f:a5:87:66:99:e9:0e:c4:72:f9:
                    79:73:af:54:d2:29:3c:09:37:85:c6:42:04:bb:8e:
                    c1:89:c5:e4:34:f1:4f:3e:5b:51:79:67:d1:c5:c2:
                    4d:a1:31:9a:15:e7:d9:ac:75:94:06:75:e4:49:0d:
                    18:07:7a:0e:75:95:a9:55:dd:70:dc:fa:72:b4:8c:
                    39:88:cd:9a:cf:c3:5b:36:f7:e4:2b:54:80:db:b8:
                    2f:2d:9e:21:7a:08:13:fe:49:81:f7:e9:42:0d:61:
                    09:27:4d:c9:2d:71:36:df:2c:a6:e9:bd:ec:ee:78:
                    20:f6:1e:09:10:55:22:14:34:48:10:49:5b:ba:33:
                    f0:4e:ad:ff:bd:ad:84:79:31:05:bf:9b:7b:33:b3:
                    64:73:35:f0:88:7a:8c:72:30:11:7b:7f:7e:17:f8:
                    a1:bf:02:fa:79:be:41:d2:80:cd:d7:50:dd:1e:32:
                    1f:1c:bb:78:11:6d:2d:06:7c:c6:53:26:26:9b:10:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:F1:3C:77:35:35:3A:8B:8D:C5:D8:BA:E5:05:82:57:C6:5D:53
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030383a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1008::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:62:e9:b6:99:82:e1:7e:a7:bd:ae:9d:b7:9e:6a:36:c2:
         91:15:04:03:02:9e:27:b1:39:5c:91:cd:4e:f9:e1:62:b3:13:
         c0:81:4d:bd:60:22:4d:d0:4c:73:55:dd:16:08:b1:c5:4a:78:
         fd:b3:6b:41:b9:2f:6b:20:bc:30:e6:8d:06:bd:a2:ac:ef:9f:
         06:20:37:93:8b:7e:9a:29:19:d4:57:d4:03:cd:e9:c9:20:c3:
         fc:cd:97:a3:65:28:fc:70:cb:01:7f:2b:a0:90:72:6d:5a:4e:
         40:71:21:a2:da:6e:29:b9:b2:76:72:ac:9a:9c:a6:e2:c3:ed:
         82:68:91:9d:2a:0a:03:3a:ae:c4:4a:18:03:28:39:cc:4c:a7:
         f5:0b:7f:a5:1c:12:f4:5e:70:17:1b:fa:61:b8:4a:cf:0c:a8:
         ec:00:56:24:ba:7b:f4:24:85:bf:4d:3c:b9:27:8b:48:cb:28:
         7f:57:f0:98:b2:cb:f0:8f:9b:c9:3d:f2:83:73:3d:c2:1f:e3:
         69:6b:2a:32:30:36:d6:47:c8:e4:4c:40:e9:2f:22:99:fa:ef:
         84:6e:c7:70:54:6e:f0:56:65:44:4d:0f:2b:c2:9d:0c:8e:59:
         e8:95:19:9e:40:30:01:ec:2c:6d:a5:e1:07:53:48:b1:8a:a4:
         3e:c0:57:2f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUaMf7FdHO62QkzyqURFmqrWJJd1owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk
NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjQxMjI1MDMwMTU5WhcNMjUxMjI0MDMwNjU5
WjAzMTEwLwYDVQQDEygwN0YwRjEzQzc3MzUzNTNBOEI4REM1RDhCQUU1MDU4MjU3
QzY1RDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Q+fiAslslq
thJBbvCpHMHpCdhFoWK4xgVD8l2iwV25eH7Q1BjiCs0xMe+DA7EiJzUexwwIkvwF
u5YV6xzHbH+lh2aZ6Q7Ecvl5c69U0ik8CTeFxkIEu47BicXkNPFPPltReWfRxcJN
oTGaFefZrHWUBnXkSQ0YB3oOdZWpVd1w3PpytIw5iM2az8NbNvfkK1SA27gvLZ4h
eggT/kmB9+lCDWEJJ03JLXE23yym6b3s7ngg9h4JEFUiFDRIEElbujPwTq3/va2E
eTEFv5t7M7NkczXwiHqMcjARe39+F/ihvwL6eb5B0oDN11DdHjIfHLt4EW0tBnzG
UyYmmxA4xwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFAfw8Tx3NTU6i43F2LrlBYJX
xl1TMB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv
NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk
ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj
ZjJjODM1NGI1Mi8wLzMyMzYzMDMyM2EzODMxMzczYTMxMzAzMDM4M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM1MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFxAIMA0G
CSqGSIb3DQEBCwUAA4IBAQCeVGLptpmC4X6nva6dt55qNsKRFQQDAp4nsTlckc1O
+eFisxPAgU29YCJN0ExzVd0WCLHFSnj9s2tBuS9rILww5o0GvaKs758GIDeTi36a
KRnUV9QDzenJIMP8zZejZSj8cMsBfyugkHJtWk5AcSGi2m4pubJ2cqyanKbiw+2C
aJGdKgoDOq7EShgDKDnMTKf1C3+lHBL0XnAXG/phuErPDKjsAFYkunv0JIW/TTy5
J4tIyyh/V/CYssvwj5vJPfKDcz3CH+NpayoyMDbWR8jkTEDpLyKZ+u+EbsdwVG7w
VmVETQ8rwp0MjlnolRmeQDAB7CxtpeEHU0ixiqQ+wFcv
-----END CERTIFICATE-----