Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          7qyvT70EeyrF8a71YZ/U9asNDtENZj1XqPNKAQfHApI=
Subject key identifier:   E1:F3:50:52:96:59:97:93:21:3E:49:2C:F8:B4:A2:8F:51:4C:44:4E
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       4D07E2E3AC5DF34EA6E030BEB585F69D60371544
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Fri 04 Apr 2025 12:19:50 +0000
ROA not before:           Fri 04 Apr 2025 12:14:50 +0000
ROA not after:            Fri 03 Apr 2026 12:19:50 +0000
asID:                     152368
IP address blocks:        2602:fac2:9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:07:e2:e3:ac:5d:f3:4e:a6:e0:30:be:b5:85:f6:9d:60:37:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Apr  4 12:14:50 2025 GMT
            Not After : Apr  3 12:19:50 2026 GMT
        Subject: CN=E1F3505296599793213E492CF8B4A28F514C444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:ff:88:fa:c5:f3:ec:9c:bf:f5:60:5d:ed:
                    e1:cd:d0:82:dd:ab:ba:a4:5b:43:69:f9:c1:87:7c:
                    e2:f3:76:ad:29:a7:4a:0d:32:18:cc:df:af:09:f4:
                    01:da:e7:32:e6:8e:e2:c9:d5:f0:4d:f8:ab:7a:b3:
                    1e:7e:32:bc:55:ca:b1:96:78:3a:a4:62:92:9f:ef:
                    ce:c8:0c:5f:fe:95:05:62:1d:1a:62:19:af:90:7e:
                    4f:79:73:ff:6f:94:23:20:23:f2:ef:0a:81:26:66:
                    54:36:fd:aa:b8:21:35:d8:47:a8:3f:0f:7b:ab:cd:
                    9b:78:52:9c:02:dd:27:c3:20:86:f4:37:e8:36:50:
                    a6:b5:6f:a8:cb:92:29:95:c8:4e:e1:21:ef:c3:15:
                    c6:58:8f:39:27:95:55:e6:c4:03:57:e4:1f:4d:fb:
                    d7:db:87:49:40:b7:28:bc:ae:f5:92:eb:a2:39:a3:
                    22:17:71:92:0c:fd:9a:77:32:a8:94:ae:30:73:e4:
                    c4:6e:8b:67:ae:b3:58:b3:4b:3b:fe:58:e4:c7:4d:
                    4c:22:c5:55:a3:ad:eb:4d:d5:0c:dc:ee:61:24:16:
                    be:bd:f1:97:c8:f1:42:9f:50:4e:ef:b4:1e:fa:0d:
                    ab:da:7e:97:14:e7:82:f5:ef:93:66:18:9d:1a:79:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:50:52:96:59:97:93:21:3E:49:2C:F8:B4:A2:8F:51:4C:44:4E
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:b7:69:e3:8e:02:91:8e:d8:3e:6b:7d:e0:e4:53:7a:78:
         6b:2c:02:73:55:ea:2c:99:fd:76:51:01:33:17:f8:29:e7:cb:
         5e:c7:2e:32:35:75:08:43:42:cb:43:33:70:ed:0a:0a:d9:d9:
         bc:35:8a:b5:ea:05:b9:d1:0b:30:5f:a4:1b:0d:e3:14:52:85:
         0e:4f:3b:f4:9b:1f:b3:6b:29:19:f8:3e:17:36:ec:0b:46:63:
         2e:0c:15:38:57:0b:90:bf:e8:97:16:a9:89:a2:b4:7e:ba:f1:
         ff:c6:63:7d:74:71:56:d2:e3:d0:27:99:52:f6:ac:d5:d7:26:
         5c:64:7c:76:9a:38:6b:14:84:f6:ee:d7:81:44:3a:bc:00:9f:
         f5:2e:c9:ae:cc:8e:49:46:04:8d:0f:b1:7c:cf:b7:5d:e0:da:
         e6:b1:99:33:8e:ce:b1:61:ef:88:9f:b0:ad:56:f6:02:05:6c:
         97:b7:a7:82:7f:0a:8d:c3:09:f4:27:ae:fc:1d:59:21:81:85:
         44:1f:86:ff:1b:6d:f0:4a:3f:78:1e:6f:ea:b3:17:2a:42:5f:
         50:c9:1e:76:dc:62:43:83:46:84:07:89:86:d2:8b:9a:5a:fb:
         ab:e3:2c:ab:32:e7:8c:0f:99:a4:29:14:1e:e6:fd:f0:a7:76:
         3b:95:5b:d2
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUTQfi46xd806m4DC+tYX2nWA3FUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYTE0OGNjMDUyMmViNzI3YTRhYTVjYzg3
ZDNkMDE0OWM3ZjA3MzQ1MmYwHhcNMjUwNDA0MTIxNDUwWhcNMjYwNDAzMTIxOTUw
WjAzMTEwLwYDVQQDEyhFMUYzNTA1Mjk2NTk5NzkzMjEzRTQ5MkNGOEI0QTI4RjUx
NEM0NDRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Hz/iPrF8+yc
v/VgXe3hzdCC3au6pFtDafnBh3zi83atKadKDTIYzN+vCfQB2ucy5o7iydXwTfir
erMefjK8Vcqxlng6pGKSn+/OyAxf/pUFYh0aYhmvkH5PeXP/b5QjICPy7wqBJmZU
Nv2quCE12EeoPw97q82beFKcAt0nwyCG9DfoNlCmtW+oy5IplchO4SHvwxXGWI85
J5VV5sQDV+QfTfvX24dJQLcovK71kuuiOaMiF3GSDP2adzKolK4wc+TEbotnrrNY
s0s7/ljkx01MIsVVo63rTdUM3O5hJBa+vfGXyPFCn1BO77Qe+g2r2n6XFOeC9e+T
ZhidGnmOpQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOHzUFKWWZeTIT5JLPi0oo9R
TEROMB8GA1UdIwQYMBaAFOJxrlUmi4jB6XKn7oWxRZ2N0hAsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
RTI3MUFFNTUyNjhCODhDMUU5NzJBN0VFODVCMTQ1OUQ4REQyMTAyQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhMTQ4Y2MwNTIyZWI3MjdhNGFhNWNjODdkM2QwMTQ5YzdmMDczNDUyZi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzYzMDMyM2E2NjYxNjMzMjNhMzkzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM1MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvrCAAkwDQYJKoZI
hvcNAQELBQADggEBAI1Nt2njjgKRjtg+a33g5FN6eGssAnNV6iyZ/XZRATMX+Cnn
y17HLjI1dQhDQstDM3DtCgrZ2bw1irXqBbnRCzBfpBsN4xRShQ5PO/SbH7NrKRn4
Phc27AtGYy4MFThXC5C/6JcWqYmitH668f/GY310cVbS49AnmVL2rNXXJlxkfHaa
OGsUhPbu14FEOrwAn/Uuya7MjklGBI0PsXzPt13g2uaxmTOOzrFh74ifsK1W9gIF
bJe3p4J/Co3DCfQnrvwdWSGBhUQfhv8bbfBKP3geb+qzFypCX1DJHnbcYkODRoQH
iYbSi5pa+6vjLKsy54wPmaQpFB7m/fCndjuVW9I=
-----END CERTIFICATE-----