Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          ffS6+B0Ojtsy+cQdpDYEYf50atLIvPVlIE2QlNvI0pY=
Subject key identifier:   67:DE:CD:0C:EB:A1:51:53:56:02:F6:36:87:AF:89:8D:A7:E9:57:B9
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       17D7368A4630C535FC875C61D0A1B607DBE65CFB
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:08:04 +0000
ROA not before:           Fri 09 Dec 2022 16:03:04 +0000
ROA not after:            Fri 08 Dec 2023 16:08:04 +0000
asID:                     212934
IP address blocks:        2602:fcd3:103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:36:8a:46:30:c5:35:fc:87:5c:61:d0:a1:b6:07:db:e6:5c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:03:04 2022 GMT
            Not After : Dec  8 16:08:04 2023 GMT
        Subject: CN=67DECD0CEBA151535602F63687AF898DA7E957B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:d7:67:bd:6b:ec:30:55:80:09:db:ec:d1:
                    f5:55:29:45:76:36:b7:0e:55:36:dc:61:20:d2:8b:
                    e2:36:61:78:86:b5:e4:7c:34:5d:c0:ce:a1:a1:1c:
                    5a:e9:0b:ff:b8:37:40:7c:96:ce:66:7f:08:4a:a1:
                    0b:b8:01:3d:66:08:35:27:d5:e6:f5:46:f3:e2:4b:
                    bb:2c:09:9a:a4:45:17:84:12:1a:3a:a5:c8:40:02:
                    0c:eb:dc:4d:fc:e2:13:8f:91:92:9b:26:e5:48:e3:
                    95:6d:41:22:2f:67:06:b8:5d:b5:37:d7:01:be:d2:
                    61:16:79:0d:3c:c6:2c:6f:b7:c5:06:81:00:2e:d7:
                    3f:89:ab:3d:5c:f9:fa:97:18:0b:f8:27:df:50:c7:
                    f2:83:c9:e1:a1:f8:40:ab:1c:d6:11:38:98:2e:7f:
                    c3:4d:e5:f5:04:99:de:ee:51:c7:75:a2:3a:39:29:
                    53:cd:4c:d7:4f:ff:9a:15:25:3b:3d:63:7b:0f:7d:
                    51:79:1d:df:84:af:dd:2c:10:fc:30:df:5d:5b:10:
                    e9:19:4f:ff:e9:c5:31:d9:21:c1:f6:54:f6:f7:e7:
                    64:b4:bf:e4:0a:e4:ac:c5:19:8a:45:18:9b:ae:5e:
                    9a:61:c8:a3:ac:c9:34:5a:a3:85:ce:dc:d3:fe:ce:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:CD:0C:EB:A1:51:53:56:02:F6:36:87:AF:89:8D:A7:E9:57:B9
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130333a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:82:46:0b:86:3d:9e:c7:94:07:95:8d:81:ea:f0:75:d2:07:
         ff:8a:d3:72:eb:a3:86:84:ef:59:3a:60:f5:f9:c3:e4:b7:0b:
         6b:5e:ca:19:14:24:91:96:4e:15:ca:45:fd:fb:1b:45:9a:27:
         6a:57:ba:43:84:fe:4b:48:63:20:b6:29:18:3d:be:a5:23:e5:
         8a:e7:3e:0c:db:83:0f:0e:ee:93:fc:b2:5e:44:f5:57:e6:fb:
         1f:37:f0:88:ac:56:a0:0d:d5:5a:49:f2:35:48:3d:52:ad:ee:
         2b:23:b9:23:9c:ed:3b:f8:c5:2a:26:d3:01:93:f7:bc:ab:ce:
         2a:3b:43:92:8e:a8:2f:be:46:b7:dd:0f:6a:9f:32:f7:a3:3c:
         43:b2:6e:17:8b:b8:89:53:8e:d0:c5:27:fb:7f:07:18:f2:30:
         95:69:b8:95:a0:49:fb:1e:d2:16:0a:1f:dc:04:a2:03:75:5d:
         96:2a:06:04:c9:75:ac:ec:30:44:cd:3c:1c:1a:e0:9d:30:89:
         ac:be:a0:b7:00:0f:4f:93:aa:6c:80:9f:8e:b7:ca:c7:38:d5:
         5a:a2:72:1c:35:ec:d4:7f:05:4e:1b:8d:28:16:9c:2b:d0:39:
         4b:1a:91:3a:16:00:18:fb:9f:b2:e4:15:1f:7c:5d:bd:39:af:
         4a:84:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----