Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa
File:                     323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa (raw, json)
Hash identifier:          rhJsWpp8h/tY/4ErosWBRvmmIiOE8sbgM0rqsTJ0GE8=
Subject key identifier:   57:AB:71:E6:71:11:43:6B:AA:00:AD:7C:80:30:BC:97:79:04:DB:0A
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       67767A92FB1B5FC5E251549CD96317FB5309400C
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa
Signing time:             Wed 01 Mar 2023 00:37:52 +0000
ROA not before:           Wed 01 Mar 2023 00:32:52 +0000
ROA not after:            Wed 28 Feb 2024 00:37:52 +0000
asID:                     26930
IP address blocks:        2602:fcd3:104::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:76:7a:92:fb:1b:5f:c5:e2:51:54:9c:d9:63:17:fb:53:09:40:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar  1 00:32:52 2023 GMT
            Not After : Feb 28 00:37:52 2024 GMT
        Subject: CN=57AB71E67111436BAA00AD7C8030BC977904DB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:1b:15:4f:ae:5f:3d:4b:61:75:2e:93:b5:
                    6a:7c:cd:4e:03:7b:c1:51:14:13:3f:3e:3f:b3:b2:
                    5e:0c:c2:75:b0:57:2e:4a:a2:bc:e7:7f:23:ee:8a:
                    66:87:9e:f5:ca:ec:80:18:bf:8e:e5:e7:85:ba:c2:
                    f3:4e:14:a8:7d:0b:a7:7b:cc:6b:ef:ce:e2:89:7a:
                    92:9b:12:dc:d4:82:d9:44:53:f9:d0:2b:34:63:c7:
                    b0:63:f2:de:6e:fe:e8:01:8d:9b:56:0c:3c:54:c7:
                    f1:5a:da:c2:56:40:55:b7:8d:a7:20:cc:1e:0f:78:
                    04:8e:5f:6f:ea:3d:d8:20:d0:06:ff:9e:ec:16:ba:
                    0c:36:c8:0b:c4:fb:49:0a:4e:3a:1c:bf:ee:ea:bc:
                    e0:4c:7d:7b:46:01:2b:d6:43:07:85:5f:aa:ca:c8:
                    8a:97:b7:dd:b8:da:5e:d1:3c:da:84:8d:c5:1c:d2:
                    b1:eb:95:9c:53:80:b6:97:67:e8:9e:2a:4e:9b:51:
                    fd:3e:99:8c:d9:38:0c:ed:b6:29:b0:b9:b3:00:4b:
                    a8:ed:a5:14:2b:0f:02:91:ed:3c:37:6f:53:3f:67:
                    6b:37:c3:84:47:fa:bf:ba:1b:54:62:0d:9b:ff:9b:
                    7f:37:8e:ac:50:94:b7:60:23:06:15:ef:d9:8f:2b:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:71:E6:71:11:43:6B:AA:00:AD:7C:80:30:BC:97:79:04:DB:0A
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130343a3a2f34382d3438203d3e203236393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:9a:64:7a:4e:15:01:e8:ac:b4:d6:67:a7:29:c4:2b:49:
         bb:c1:b4:7a:19:fd:20:80:db:9a:82:86:b2:d2:0f:7c:30:7e:
         04:11:9d:c1:f3:60:27:3a:2d:ba:6b:88:26:65:33:41:e4:b6:
         ca:19:0a:e1:31:89:6e:d6:91:1d:af:58:2e:2d:ad:11:69:6d:
         9f:fa:ac:f1:29:f9:d6:98:d5:86:5e:41:97:44:f4:1e:6f:91:
         b8:cd:95:c0:dd:4d:b4:a3:6c:cf:72:96:59:63:8f:bf:2a:3c:
         e9:70:de:c0:d1:c9:3e:26:7d:12:bb:6f:21:ae:b8:87:20:f0:
         00:e9:db:c9:8d:20:cc:d1:2e:0b:6b:dd:c6:22:db:8e:c1:d9:
         25:43:d0:1c:56:b0:09:d7:cd:41:7d:dd:dd:95:ae:f3:e1:d6:
         c1:bf:cc:45:91:c7:7f:45:d1:a8:a0:90:5a:07:d7:f3:63:ce:
         b4:25:f5:aa:d1:f0:e9:8b:b5:ea:e7:31:80:bb:68:9c:d1:49:
         a2:c4:a1:24:39:a3:35:e3:2e:82:5e:19:3c:6b:04:b8:f1:cb:
         f0:0e:24:4d:32:82:f0:c2:3e:5a:61:ec:2b:6b:ba:c3:94:d3:
         fe:91:99:0b:43:03:d9:1a:7e:3d:6e:5f:f8:87:08:12:72:e4:
         ef:19:d0:30
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZ3Z6kvsbX8XiUVSc2WMX+1MJQAwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjMwMzAxMDAzMjUyWhcNMjQwMjI4MDAzNzUy
WjAzMTEwLwYDVQQDEyg1N0FCNzFFNjcxMTE0MzZCQUEwMEFEN0M4MDMwQkM5Nzc5
MDREQjBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU4bFU+uXz1L
YXUuk7VqfM1OA3vBURQTPz4/s7JeDMJ1sFcuSqK8538j7opmh571yuyAGL+O5eeF
usLzThSofQune8xr787iiXqSmxLc1ILZRFP50Cs0Y8ewY/Lebv7oAY2bVgw8VMfx
WtrCVkBVt42nIMweD3gEjl9v6j3YINAG/57sFroMNsgLxPtJCk46HL/u6rzgTH17
RgEr1kMHhV+qysiKl7fduNpe0TzahI3FHNKx65WcU4C2l2fonipOm1H9PpmM2TgM
7bYpsLmzAEuo7aUUKw8Cke08N29TP2drN8OER/q/uhtUYg2b/5t/N46sUJS3YCMG
Fe/Zjyvd9wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFFerceZxEUNrqgCtfIAwvJd5
BNsKMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzYzMDMyM2E2NjYzNjQzMzNhMzEzMDM0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzNjM5MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/NMBBDANBgkq
hkiG9w0BAQsFAAOCAQEACiOaZHpOFQHorLTWZ6cpxCtJu8G0ehn9IIDbmoKGstIP
fDB+BBGdwfNgJzotumuIJmUzQeS2yhkK4TGJbtaRHa9YLi2tEWltn/qs8Sn51pjV
hl5Bl0T0Hm+RuM2VwN1NtKNsz3KWWWOPvyo86XDewNHJPiZ9ErtvIa64hyDwAOnb
yY0gzNEuC2vdxiLbjsHZJUPQHFawCdfNQX3d3ZWu8+HWwb/MRZHHf0XRqKCQWgfX
82POtCX1qtHw6Yu16ucxgLtonNFJosShJDmjNeMugl4ZPGsEuPHL8A4kTTKC8MI+
WmHsK2u6w5TT/pGZC0MD2Rp+PW5f+IcIEnLk7xnQMA==
-----END CERTIFICATE-----