Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131303a3a2f34382d3438203d3e203230343733.roa
File:                     323630323a666364333a3131303a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          dDrioNrp+GaZuUyr6LKNgXisU2A9Ao5Sjcf1XwfGIBU=
Subject key identifier:   8C:76:C2:5C:F7:01:70:A3:C9:69:C4:47:68:18:62:85:74:77:5F:6A
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       71B616CFF6692E979559756DBE765B07F74E1507
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131303a3a2f34382d3438203d3e203230343733.roa
Signing time:             Sat 04 Mar 2023 02:21:23 +0000
ROA not before:           Sat 04 Mar 2023 02:16:23 +0000
ROA not after:            Sat 02 Mar 2024 02:21:23 +0000
asID:                     20473
IP address blocks:        2602:fcd3:110::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b6:16:cf:f6:69:2e:97:95:59:75:6d:be:76:5b:07:f7:4e:15:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar  4 02:16:23 2023 GMT
            Not After : Mar  2 02:21:23 2024 GMT
        Subject: CN=8C76C25CF70170A3C969C4476818628574775F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:0a:e6:22:f1:8c:93:b8:60:97:d5:35:76:
                    5f:6a:f6:84:62:90:46:11:5f:11:5e:57:12:80:c1:
                    40:9b:9c:7c:7d:01:0f:d5:08:fa:8f:41:da:b6:16:
                    46:c0:85:d5:33:dd:0f:05:f1:1e:2b:30:bb:ee:0e:
                    2c:ef:b3:76:83:ce:0e:77:ac:eb:e8:ba:c2:e5:23:
                    06:74:0c:04:67:c3:77:ec:58:f6:0c:c8:c0:97:86:
                    d5:8a:7e:74:73:a9:bb:e0:95:72:0b:88:c6:96:d3:
                    62:d6:0a:59:32:bc:2d:12:04:d2:94:e0:76:ca:33:
                    ae:a9:2c:4a:07:13:41:fe:29:83:74:9a:17:c8:4c:
                    a3:de:49:8a:d7:d3:87:b7:65:da:bd:9f:2e:e7:b6:
                    78:55:ee:c4:6c:35:79:a1:a6:37:dc:d9:f3:66:67:
                    2a:2c:b4:55:f8:b1:d7:c9:c4:ff:e3:7e:94:1a:cc:
                    5b:31:94:0f:9f:e5:27:92:58:9c:c0:87:d3:c6:7a:
                    a8:ec:80:e6:ac:d4:9d:b8:86:3c:d7:9b:43:29:69:
                    27:54:15:80:d2:56:7f:45:9c:12:8d:33:96:69:24:
                    51:28:4f:ad:99:e7:1a:25:96:ca:a6:1f:88:b0:f7:
                    99:d0:b7:4b:44:11:69:bd:01:89:1d:28:4e:68:f4:
                    c0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:C2:5C:F7:01:70:A3:C9:69:C4:47:68:18:62:85:74:77:5F:6A
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131303a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:3f:0a:8e:80:71:08:56:6b:38:0d:4c:01:12:81:f7:d3:
         66:ff:e8:d0:42:48:73:7a:91:5b:47:db:7e:6d:ab:dc:5e:8a:
         33:4a:22:ae:b9:98:e6:d0:86:94:22:22:df:3d:da:12:ed:4b:
         52:f5:18:2f:4a:00:49:81:a8:08:f4:4e:4a:a1:d0:7b:03:34:
         ac:2f:ee:4e:ad:c1:a3:14:48:87:22:72:4b:04:e2:07:1f:00:
         6b:82:d4:e4:2d:99:ff:8b:e8:cb:24:a7:13:cf:a1:01:04:99:
         7e:95:72:bd:01:c7:e6:e3:ce:7a:bd:15:05:04:7c:04:a4:a4:
         0b:7a:93:1a:11:60:82:fc:ed:67:05:52:6e:9b:f6:1c:b5:71:
         58:d3:3a:7e:8d:50:5e:e9:d1:cd:45:0a:38:6b:f8:84:30:b2:
         ed:4b:b9:1a:d0:5d:84:45:ca:5a:14:88:5d:55:80:3e:f7:6e:
         41:ab:00:37:1c:5d:68:8d:57:45:9b:5c:92:8f:f1:68:a0:33:
         7f:e4:a2:1a:e7:74:2c:0d:c6:e1:6d:f2:ce:e5:03:27:5d:62:
         03:c3:b2:01:8c:70:bd:a9:5c:b8:36:4f:51:5c:6e:4e:3d:7d:
         6a:1b:de:c7:90:45:22:04:c7:f7:47:ba:60:5b:c8:16:72:8e:
         d2:c8:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----