Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          v+6akF7QAB4CFJB0Z34HCXK9dKSRnt4PyOXyFsie+PI=
Subject key identifier:   9E:8D:F2:1C:40:EB:C0:78:3C:48:DC:D2:FF:08:8A:D4:D0:AC:12:00
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       67714915E2B77D83E9557E5335B87FF360E47C9E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:10 +0000
ROA not before:           Thu 30 May 2024 12:24:10 +0000
ROA not after:            Thu 29 May 2025 12:29:10 +0000
asID:                     13213
IP address blocks:        2602:ff62:12b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:71:49:15:e2:b7:7d:83:e9:55:7e:53:35:b8:7f:f3:60:e4:7c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:10 2024 GMT
            Not After : May 29 12:29:10 2025 GMT
        Subject: CN=9E8DF21C40EBC0783C48DCD2FF088AD4D0AC1200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:4d:b6:d6:c8:92:c7:3f:8a:96:49:41:8a:
                    98:d1:4f:27:05:7b:2e:af:fb:02:63:cd:bc:04:0c:
                    05:4a:bf:e0:6d:25:fe:23:9e:b2:e1:4e:fa:72:71:
                    d9:cd:4c:3e:5d:40:f3:6b:b3:02:4b:28:52:35:5d:
                    25:85:21:d1:77:5f:5f:ac:0b:be:22:d0:ea:e0:aa:
                    44:20:b5:82:78:cb:f8:6c:94:56:8a:d2:bc:af:8d:
                    e8:c7:22:ad:23:a8:1a:fb:43:d7:4c:4d:01:8f:87:
                    04:79:14:cb:96:7f:70:e7:e9:67:10:7f:57:5d:3e:
                    be:82:21:06:e6:a8:99:ad:2f:c7:9f:85:00:a5:a2:
                    98:27:f6:47:09:93:33:b4:cb:b2:51:c0:a8:51:df:
                    a5:92:d2:e1:d9:db:3a:fe:ee:b6:90:ee:06:19:96:
                    e9:5a:56:44:9a:88:08:5e:bd:ec:25:67:77:f4:2f:
                    a6:bd:b6:f4:96:a8:33:2e:c1:6f:1a:5e:01:16:d2:
                    33:1c:8e:87:89:6a:f3:55:3e:f4:fa:f4:0d:78:62:
                    9e:37:3e:d0:2f:83:54:0e:5c:3b:9d:3e:48:8f:7d:
                    b1:9a:93:1d:e9:98:13:f8:ab:b5:7b:bf:7b:1b:f9:
                    16:15:33:8d:aa:59:82:31:7a:f5:7c:cb:bb:be:8d:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8D:F2:1C:40:EB:C0:78:3C:48:DC:D2:FF:08:8A:D4:D0:AC:12:00
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3f:eb:c8:98:c6:b0:bf:0a:1b:1f:c6:da:ac:bd:08:7d:69:
         fa:af:85:e2:f7:ea:b6:51:32:09:43:c9:4e:30:3f:27:ee:fc:
         3c:4e:4e:49:d9:9a:07:ea:4c:d3:51:3c:ee:34:c1:6a:6e:ed:
         b9:f7:94:23:85:6a:5f:f4:cc:4e:b9:90:18:fa:79:65:09:66:
         88:37:46:86:f7:59:1d:47:0d:d0:78:f1:0c:bf:9d:42:44:cd:
         a6:02:ae:3a:82:2b:80:07:31:47:d8:75:9c:b6:30:bd:18:43:
         ba:d7:37:65:66:b3:3d:b0:cb:5f:a4:51:df:a8:06:b4:1d:1b:
         f9:68:57:bf:12:06:c7:54:f8:d2:28:29:a5:31:8e:9c:a6:52:
         73:d2:22:04:a2:96:d8:c8:70:c7:4b:16:22:00:fd:ba:c7:9d:
         18:d8:f4:58:30:e2:f8:1c:8c:65:d8:70:af:0d:bb:f2:e2:f2:
         8c:76:9f:3d:bc:16:86:c6:92:ed:07:16:3a:e9:66:80:83:28:
         77:d7:3f:d6:71:56:82:f3:d1:18:da:de:3f:e5:52:b2:42:54:
         8e:a6:bb:a4:f1:5a:f4:a7:09:da:ef:b7:95:2d:54:f6:02:e6:
         35:ef:56:bf:f6:53:00:52:8b:b8:67:3b:ba:c1:1c:89:90:c0:
         e1:1c:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----