Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa
File:                     323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa (raw, json)
Hash identifier:          KiO4UCIeM6NyKtSpZ9JmscuI/u2EysKkGSActPH8b3s=
Subject key identifier:   2B:E8:21:0B:ED:8C:CF:84:4D:F1:65:E9:C1:27:27:D9:C7:29:1C:D7
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       51F75950C6E74638DA5307AA64AA7BC94E39CE05
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa
Signing time:             Sat 04 Mar 2023 01:06:00 +0000
ROA not before:           Sat 04 Mar 2023 01:01:00 +0000
ROA not after:            Sat 02 Mar 2024 01:06:00 +0000
asID:                     136557
IP address blocks:        2602:fcd3:105::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:59:50:c6:e7:46:38:da:53:07:aa:64:aa:7b:c9:4e:39:ce:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar  4 01:01:00 2023 GMT
            Not After : Mar  2 01:06:00 2024 GMT
        Subject: CN=2BE8210BED8CCF844DF165E9C12727D9C7291CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:1c:21:97:7e:3d:2b:8d:9e:66:6a:1a:da:
                    f2:78:33:9b:c5:0b:b9:c4:cb:68:72:63:cc:34:ba:
                    a9:08:a5:b1:ac:7d:4e:60:db:96:c3:21:36:7b:00:
                    58:05:28:dc:2d:6a:d1:13:4d:c5:0b:e2:9c:ef:39:
                    22:68:16:db:6a:34:ef:91:6d:e6:b2:01:92:4c:1e:
                    8a:ba:dd:31:9c:ea:cc:58:f4:5d:4b:4d:53:6b:cf:
                    2f:8e:b7:9f:77:8e:d5:36:23:69:32:6f:50:e0:78:
                    3d:6e:f8:fd:54:f5:eb:c3:55:2f:81:7a:98:30:b5:
                    0b:88:98:bb:e4:70:24:61:61:37:3c:ed:74:a6:f4:
                    1f:0b:40:fb:86:6c:06:05:9d:7c:78:56:e0:70:ad:
                    6c:40:bd:65:77:e7:2b:14:c5:4d:00:69:e7:25:5f:
                    32:ba:e4:24:f9:44:00:06:90:74:3a:29:26:8b:1c:
                    b2:0b:1d:ad:9d:a4:12:60:da:ae:4f:ea:35:bb:99:
                    63:ef:43:a1:58:78:01:d2:bf:04:6a:20:6a:e2:1f:
                    7e:4b:a2:05:01:82:f4:5e:14:46:e6:58:f1:0c:b1:
                    4d:c9:ef:ef:2f:a6:c0:7f:bb:09:60:4a:69:64:1a:
                    11:03:e7:34:7b:5c:42:5c:17:8b:ce:ba:7f:67:fe:
                    c8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E8:21:0B:ED:8C:CF:84:4D:F1:65:E9:C1:27:27:D9:C7:29:1C:D7
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3130353a3a2f34382d3438203d3e20313336353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:89:62:51:97:fe:1e:7d:48:0a:4a:0c:5f:2d:e6:e5:9c:
         7f:76:9d:c5:4f:e7:d9:51:91:e2:76:a9:68:5b:ff:57:77:a1:
         32:2f:70:a8:de:44:e0:f5:7a:e7:95:f2:2b:4b:9a:af:e6:9b:
         85:56:45:9e:26:c9:8e:41:fd:8a:85:bc:db:c2:2b:e1:76:3f:
         33:06:4b:89:e9:90:67:a4:5a:ae:e0:7e:5e:36:a4:18:39:8b:
         7b:c9:56:9d:3f:4c:6d:6c:bb:96:31:fa:7c:1f:9f:61:cc:3f:
         67:fd:1d:60:31:6c:11:15:c9:12:fc:ad:7c:07:46:0b:71:dd:
         21:eb:4e:1c:8e:82:de:81:e2:11:e1:d7:01:b6:7f:60:67:5d:
         e6:8c:63:c1:8c:c9:ff:3e:6f:08:9c:64:eb:14:a8:db:58:25:
         b0:f1:32:21:b7:65:40:58:3c:ed:85:64:0b:d7:57:b2:50:c3:
         85:b8:17:b7:ce:f8:7c:5f:14:c7:8d:28:a5:ef:28:79:93:ba:
         d0:56:ea:43:d6:92:d9:ea:d1:68:6d:5b:ea:d6:58:7e:7f:8f:
         75:3d:2e:fc:d4:7d:45:51:77:f3:8d:5f:1e:9d:c7:eb:a6:9a:
         d6:92:6a:c4:f9:c7:8c:d1:5a:4a:1b:5f:e6:4c:82:d7:84:14:
         70:ea:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----