Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          AsvGKlNeWvVEaAdjLoKFEmZlf9xAyThqoExR1ooVpp8=
Subject key identifier:   46:A3:A2:85:55:0C:4B:6A:66:01:63:13:A6:83:87:F0:D8:02:B0:CA
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       27A4950238F757E5E050F1099B041375EC3DBB1A
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa
Signing time:             Thu 08 Oct 2026 11:43:44 +0000
ROA not before:           Thu 08 Oct 2026 11:38:44 +0000
ROA not after:            Thu 07 Oct 2027 11:43:44 +0000
asID:                     11358
IP address blocks:        2602:f97e:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:95:02:38:f7:57:e5:e0:50:f1:09:9b:04:13:75:ec:3d:bb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Oct  8 11:38:44 2026 GMT
            Not After : Oct  7 11:43:44 2027 GMT
        Subject: CN=46A3A285550C4B6A66016313A68387F0D802B0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:2e:0b:6f:40:11:cd:fa:45:32:ef:fe:b8:
                    e2:d6:82:fa:2c:7a:2d:55:0b:0e:d7:3d:79:97:95:
                    5f:34:62:6d:af:3f:25:a3:ef:76:ee:07:e1:da:b2:
                    c7:f3:31:3d:7b:df:81:03:71:b7:21:21:df:82:39:
                    aa:a8:14:75:d7:fd:79:34:3a:d4:05:4b:c4:55:f2:
                    41:1a:93:b6:f8:28:81:5e:d9:03:44:1b:3d:a1:9f:
                    f0:ab:92:3e:81:9b:29:be:e3:32:cf:ca:e7:4d:17:
                    7a:17:3a:5b:c7:51:71:77:b4:26:ef:89:cc:46:55:
                    47:16:6e:76:16:1d:97:e8:c8:5f:06:b0:21:aa:3a:
                    af:0f:78:f0:48:3b:cc:dc:c1:da:2c:09:91:1a:b3:
                    fa:0e:60:43:34:b9:b4:15:0e:2e:e9:c4:37:74:6c:
                    1b:7a:08:4c:8a:e5:c8:6e:c9:87:05:60:16:d4:76:
                    1b:5f:17:2e:b9:be:1e:ec:ef:7b:85:84:2e:06:67:
                    78:1b:5e:a5:fd:3a:e6:7c:3c:64:e1:e6:0a:56:f1:
                    f4:fd:2c:3c:b4:61:6b:7c:81:21:d9:94:1b:1b:df:
                    b8:1f:1c:30:4a:0e:7d:b0:9c:3b:e9:92:c7:7b:34:
                    d9:62:c1:97:2e:5e:cf:9e:30:5a:46:8c:b2:42:97:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A3:A2:85:55:0C:4B:6A:66:01:63:13:A6:83:87:F0:D8:02:B0:CA
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a313a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:db:04:9f:21:d6:0b:af:3d:45:51:5b:ec:71:67:7e:e9:8f:
         b0:55:0f:2e:9b:b8:eb:7c:6d:49:98:d9:82:eb:b5:07:e6:7d:
         c6:f4:2e:28:9e:d1:8a:21:27:79:02:11:5f:5f:1d:45:b4:12:
         2d:4e:4e:28:97:0b:ff:72:1a:6e:5b:c2:ab:b2:fa:7b:76:11:
         3d:9a:b5:c8:2d:c0:cf:8a:60:85:aa:b0:95:f4:48:43:2d:11:
         6c:4d:7d:31:c3:55:2a:e9:c4:a5:ee:e8:d7:1c:5b:0f:85:96:
         7f:f3:f8:37:59:c8:af:5d:ca:20:e5:f5:68:bb:cb:0d:9d:af:
         3a:42:7e:c9:de:6f:ef:65:be:d9:16:95:be:f6:be:f8:61:6f:
         b5:26:50:9d:28:47:7e:27:54:38:1e:18:31:85:93:e6:f9:0b:
         c0:b2:86:f8:29:94:94:8f:e3:7a:a4:d6:6c:03:11:88:c2:a5:
         8e:e2:5c:a7:3d:bc:43:7f:1a:92:b5:2b:e5:f1:64:92:e5:be:
         4e:c1:88:01:ce:37:9b:81:da:26:7d:9f:c6:23:f2:90:89:7c:
         13:c0:ec:dc:38:70:7c:83:1b:6c:d3:01:38:d9:4c:67:4d:39:
         36:16:0e:a4:6a:9f:a2:30:dd:cd:dd:43:f4:fa:76:4e:9e:8a:
         98:6d:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----