Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
File:                     323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa (raw, json)
Hash identifier:          /8t2a4GmVcmFbwsuRktFjY5ErNXIYxVe9A6mhXlHGF0=
Subject key identifier:   A4:9D:6D:18:C0:66:73:D8:CF:F2:67:31:29:8F:EE:6F:F1:33:6E:91
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       3134103347FF40061F30AAF9DB242CDB1D7BA90C
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa
Signing time:             Wed 09 Apr 2025 12:52:24 +0000
ROA not before:           Wed 09 Apr 2025 12:47:24 +0000
ROA not after:            Wed 08 Apr 2026 12:52:24 +0000
asID:                     215855
IP address blocks:        2602:f9ba:a10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:34:10:33:47:ff:40:06:1f:30:aa:f9:db:24:2c:db:1d:7b:a9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Apr  9 12:47:24 2025 GMT
            Not After : Apr  8 12:52:24 2026 GMT
        Subject: CN=A49D6D18C06673D8CFF26731298FEE6FF1336E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:b5:4e:ab:7d:48:1d:58:7a:8e:10:98:6d:
                    7a:43:7b:95:3b:76:18:32:64:07:64:80:dc:12:6e:
                    ff:e8:07:bd:99:ef:ff:a4:22:59:c1:02:ea:36:88:
                    f2:36:ca:af:f1:b3:2a:e2:b1:0c:cf:5d:02:8d:ec:
                    29:55:0c:89:91:0b:56:46:65:66:95:a0:d8:35:78:
                    12:37:06:67:d2:96:32:4e:52:32:5e:05:90:ac:a1:
                    b3:3c:2e:b9:c0:cf:42:0a:40:81:47:ce:e0:a2:ce:
                    db:53:8a:67:70:01:23:04:bd:ff:6c:f4:88:c8:3d:
                    a1:7f:f5:5e:a1:17:54:b4:8f:ed:54:b5:c8:cf:0e:
                    8b:ac:77:19:e2:93:42:14:85:b2:58:2d:0b:42:78:
                    69:43:8a:ba:c7:4d:d7:f8:05:0a:62:db:a9:a9:d3:
                    9f:75:72:50:5a:9b:7d:ef:92:23:15:1a:ad:3f:83:
                    31:f3:22:07:64:79:1b:d4:c4:39:74:5b:e7:e8:b4:
                    e7:83:1d:78:b9:d1:19:82:95:3f:84:95:1b:7d:3f:
                    9e:d0:77:41:d5:2b:36:f3:c5:31:da:44:1d:ef:35:
                    c0:65:64:10:1e:2e:d0:d8:6e:04:bd:86:48:b4:e9:
                    1b:a4:88:16:cf:b9:99:85:48:86:d4:6d:f3:b8:73:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9D:6D:18:C0:66:73:D8:CF:F2:67:31:29:8F:EE:6F:F1:33:6E:91
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6131303a3a2f34382d3438203d3e20323135383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:2e:05:47:95:cb:36:50:f5:ce:af:02:1b:32:91:d1:c0:
         99:57:8e:07:5a:0e:d2:1e:0c:7b:3a:4f:cc:9d:bf:39:25:42:
         d5:d9:b6:a2:55:79:27:df:59:d4:6c:cc:bc:39:67:85:4b:66:
         46:9c:75:14:d7:21:e0:39:97:20:8a:f5:a1:f4:44:a5:cc:cc:
         e3:4a:dd:aa:5e:bf:47:78:fc:41:b9:15:c0:5c:33:7b:9a:00:
         9d:c6:ed:fb:24:fa:d9:e5:c2:d1:52:e4:01:70:6b:0d:17:d6:
         9c:f8:a7:9d:ba:5f:5f:c5:83:f4:c0:a0:d8:e8:b6:ce:94:64:
         89:37:40:91:4c:06:a8:04:b5:5f:32:cb:05:6f:be:04:64:f2:
         2a:18:ff:6a:8d:b1:ff:0f:44:6d:ca:e5:4c:34:5a:9d:50:3f:
         59:01:17:f6:a8:0f:5b:91:9e:86:0f:7b:0f:39:7f:38:aa:a3:
         c5:de:6c:95:1e:98:83:01:b3:08:41:53:e7:4c:37:88:19:68:
         ba:0b:d4:1b:fb:8a:59:af:87:16:37:27:77:a8:a5:48:57:c4:
         52:2d:03:a2:4f:c2:1d:7f:b3:e7:7d:35:96:b3:9e:b4:a6:9f:
         d7:0b:32:1c:df:f1:a6:84:a3:4e:12:35:25:2a:aa:b1:38:88:
         9b:5b:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----