Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
File:                     323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa (raw, json)
Hash identifier:          hPnxrHVFUGWb3ERf8nVx+0h2JEsV+705W2T496VaoQY=
Subject key identifier:   19:C3:24:F1:84:38:6D:A8:E9:49:0A:D6:34:A1:B5:62:07:A2:92:73
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       0B3E23C96D5133203B7B8AF24F4D1A6D2698D096
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa
Signing time:             Wed 29 Mar 2023 02:57:14 +0000
ROA not before:           Wed 29 Mar 2023 02:52:14 +0000
ROA not after:            Wed 27 Mar 2024 02:57:14 +0000
asID:                     212780
IP address blocks:        2602:fcd3:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:23:c9:6d:51:33:20:3b:7b:8a:f2:4f:4d:1a:6d:26:98:d0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar 29 02:52:14 2023 GMT
            Not After : Mar 27 02:57:14 2024 GMT
        Subject: CN=19C324F184386DA8E9490AD634A1B56207A29273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:6e:82:ff:3f:2b:e6:14:94:8f:3e:d9:c0:
                    d5:9b:b5:7c:4f:46:48:b5:40:01:b9:19:74:32:dc:
                    67:17:66:72:d3:0a:7d:5b:9b:45:4f:81:dc:1c:27:
                    29:8e:30:60:81:3b:98:44:68:72:e3:51:54:29:fa:
                    77:ed:c4:d8:30:1a:f7:40:d1:ee:3d:97:70:43:64:
                    f2:2d:67:a1:d3:5f:f7:0f:b0:af:65:7f:7e:51:a7:
                    55:ed:cc:fe:9e:b2:34:c4:f9:ca:58:25:3a:5d:96:
                    7b:de:8c:1e:b4:cc:48:4f:a9:6f:e8:06:40:40:21:
                    95:68:a1:6d:b7:b4:33:a7:e9:e2:99:65:0f:d4:0f:
                    13:3f:ab:82:31:1f:d1:72:71:c2:6e:ab:16:49:2e:
                    55:49:9e:fb:6f:35:24:f5:c3:3b:b0:e0:34:7d:83:
                    22:27:41:39:9a:88:32:ec:2f:44:4c:de:f5:c1:ac:
                    d9:5d:b4:2e:9e:06:c9:f1:17:77:7b:e9:fe:5f:63:
                    7d:6a:96:74:6c:38:6a:dc:0d:cc:2c:10:a9:9c:a3:
                    85:b7:f6:19:fd:a7:0e:90:24:13:72:95:cb:88:69:
                    e1:dd:ae:fc:d2:18:15:8b:9a:f8:e1:ad:97:2a:6a:
                    9f:27:72:ad:b7:29:5a:7b:72:4a:9d:1e:a7:bf:59:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:24:F1:84:38:6D:A8:E9:49:0A:D6:34:A1:B5:62:07:A2:92:73
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3131313a3a2f34382d3438203d3e20323132373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:31:5d:46:8d:7a:5e:dc:28:e1:e4:58:09:e6:45:a4:67:
         75:6d:ba:86:f8:8f:93:4c:fb:af:95:fd:d7:ce:0e:c4:38:bd:
         2e:71:a2:cf:b7:b0:0f:c4:39:b6:13:66:2f:44:e1:78:1b:c1:
         16:0c:c6:59:83:66:cd:98:3d:90:41:2c:d0:5a:12:ff:52:69:
         e4:3c:26:7e:d5:e6:47:b7:53:f3:b7:84:a2:0c:0c:a8:47:0c:
         28:d2:00:b8:60:40:7a:b9:18:86:91:95:ea:4f:ba:82:60:36:
         67:98:3f:66:54:67:13:cd:b6:d9:5d:cd:88:67:9c:a3:99:4f:
         52:d9:0b:60:40:6a:5a:b8:55:8f:fe:26:80:57:3c:1f:02:7d:
         ab:4d:d6:dd:a1:9f:b6:78:6e:f8:8e:ed:ee:a4:90:8c:aa:63:
         58:06:36:14:8b:3c:b1:fd:b2:1c:59:14:7b:fb:38:e5:eb:8e:
         ef:54:53:2d:b0:fe:76:20:6c:1c:fd:25:46:ae:88:83:3a:97:
         75:d4:ac:0f:60:de:96:54:bd:d5:f8:f2:0f:c4:45:c6:ce:0f:
         7f:de:eb:2d:e3:ea:57:be:d4:5b:1b:55:2f:a1:97:7d:62:a4:
         40:4c:8b:08:12:31:be:5f:64:66:15:8e:11:a7:6d:5f:82:90:
         c8:0e:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----