Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa
File:                     323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa (raw, json)
Hash identifier:          P1h67qDBvQAs9Xn7pwEpw3oyiXHa7LLJeQFctNpebGY=
Subject key identifier:   A3:C1:8E:88:77:81:F7:C7:B3:95:42:04:22:EA:50:C2:81:2F:AF:55
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       4EDC07554D40457DF68752CE8A4F934A0404306E
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa
Signing time:             Tue 11 Apr 2023 23:24:12 +0000
ROA not before:           Tue 11 Apr 2023 23:19:12 +0000
ROA not after:            Tue 09 Apr 2024 23:24:12 +0000
asID:                     19318
IP address blocks:        2602:fcd3:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dc:07:55:4d:40:45:7d:f6:87:52:ce:8a:4f:93:4a:04:04:30:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Apr 11 23:19:12 2023 GMT
            Not After : Apr  9 23:24:12 2024 GMT
        Subject: CN=A3C18E887781F7C7B395420422EA50C2812FAF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:76:1a:89:16:0b:b7:ae:4f:93:d4:4b:30:
                    c0:05:dd:10:ab:2b:8f:4a:b7:47:de:81:54:49:97:
                    a0:31:a0:d9:8d:04:29:78:a4:c1:9f:46:b0:63:58:
                    59:3d:a3:c4:00:b6:62:d2:c7:2e:ae:1f:37:99:d3:
                    2f:d7:6f:8d:af:c9:6d:12:a4:f0:88:49:57:e1:46:
                    7d:9c:fe:9d:37:7c:e1:6c:d6:25:5c:f7:b2:f2:ce:
                    a0:82:84:2f:a6:a6:8f:89:af:0c:b9:4c:6d:22:12:
                    c6:d2:8d:67:28:8e:cb:a4:0b:2d:43:04:8e:d0:b3:
                    c5:94:5b:32:e1:07:ce:65:dd:da:d7:eb:e7:61:6f:
                    04:6b:ca:51:40:86:10:4b:c7:c3:f4:b0:ad:07:9e:
                    57:93:a4:b2:90:45:3d:b0:e0:de:70:d2:b2:a6:bf:
                    2e:24:88:d8:79:8c:60:5f:23:03:e2:e0:c8:54:58:
                    58:67:b4:43:55:de:50:28:78:29:8f:57:48:ed:6f:
                    21:f6:6f:28:a2:e0:d4:27:cb:d7:fc:af:02:17:fe:
                    e3:5f:6a:ce:7c:67:f7:1c:e8:78:a8:80:25:25:4c:
                    85:e5:16:a1:5b:c6:e8:ee:82:09:88:a3:41:07:b6:
                    c6:da:3b:cd:60:9c:e3:b2:59:09:21:18:71:13:e7:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C1:8E:88:77:81:F7:C7:B3:95:42:04:22:EA:50:C2:81:2F:AF:55
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:09:49:ed:9f:e1:5d:d4:f4:14:df:9a:70:bb:f2:5d:2e:76:
         64:30:f0:f8:bd:4f:46:f9:3c:74:64:7c:5b:eb:d5:e5:c4:cd:
         b7:a4:e5:05:a0:55:70:69:18:46:e5:96:79:38:c4:bb:68:4a:
         93:b8:7a:1e:08:0c:61:bd:83:25:96:6e:36:b0:54:f2:43:eb:
         4e:26:f0:16:60:4d:3b:b0:b2:2b:91:bb:5d:66:a6:6b:44:ac:
         66:8e:94:23:ec:bb:7f:34:86:36:4b:02:9b:46:3a:f6:05:f8:
         6f:63:9a:63:b6:e5:55:b5:2f:18:ba:95:89:35:17:2a:94:76:
         cd:9f:f7:7d:2d:51:cf:14:0a:42:df:6c:1e:e0:e3:90:2f:ac:
         33:f7:b7:bb:aa:2f:27:c1:aa:d5:2f:7f:b9:b0:71:b6:ad:0a:
         f7:04:88:fc:9a:b3:38:a6:b2:85:52:0d:f2:b9:9f:ca:ef:b8:
         e7:02:f1:33:f6:1a:fd:f1:a6:23:04:2c:94:d9:9a:d1:4f:e2:
         68:2a:9c:63:39:2b:b6:71:78:55:58:1b:88:18:35:fe:41:7d:
         b2:45:90:a9:22:65:3f:17:42:e9:cd:da:ee:92:dd:1d:02:4f:
         38:b1:06:6b:35:1a:f3:73:fe:2a:c4:62:6d:fe:ec:09:ab:32:
         a9:8e:ad:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----