Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132343a3a2f34382d3438203d3e203537383730.roa
File:                     323630323a666364333a3132343a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          +v4cY9GeCiTBVT4Hb4fWlw41dXXh6OQeXn4u7xsiE+4=
Subject key identifier:   C3:A8:87:75:FC:E2:1E:3C:19:DC:E7:FD:12:52:5B:E0:2F:F3:E3:63
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       722F5F4FFF2E7FC0EAA9B5A19D000BEB92960DE4
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132343a3a2f34382d3438203d3e203537383730.roa
Signing time:             Mon 03 Apr 2023 02:13:33 +0000
ROA not before:           Mon 03 Apr 2023 02:08:33 +0000
ROA not after:            Mon 01 Apr 2024 02:13:33 +0000
asID:                     57870
IP address blocks:        2602:fcd3:124::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2f:5f:4f:ff:2e:7f:c0:ea:a9:b5:a1:9d:00:0b:eb:92:96:0d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Apr  3 02:08:33 2023 GMT
            Not After : Apr  1 02:13:33 2024 GMT
        Subject: CN=C3A88775FCE21E3C19DCE7FD12525BE02FF3E363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:a3:bc:fa:d8:e1:8f:1e:07:fe:c3:57:63:
                    33:31:4d:2e:7b:cb:f7:40:02:9d:ab:ee:f4:96:ba:
                    6d:5a:4a:9c:9d:18:6f:18:fc:70:63:41:98:bd:93:
                    df:e7:a4:e1:6d:42:b8:a1:33:a7:f7:cb:88:5c:a5:
                    bd:5f:f2:a8:ce:e0:e4:53:38:90:39:37:8a:6e:57:
                    67:85:0e:f3:04:0d:ed:dc:d2:88:1f:7e:ea:d5:5f:
                    d8:2f:f8:2a:4d:54:00:d6:54:88:a6:a9:5d:c5:55:
                    87:53:10:7a:bc:ec:3a:c1:98:0f:f8:58:8c:98:c3:
                    c6:39:6a:09:89:5b:89:96:31:99:79:3e:54:07:5e:
                    2a:91:92:20:c6:23:9f:77:c3:03:84:87:c6:af:0b:
                    d5:b0:15:d2:b3:fd:6b:77:cf:8c:be:98:1c:f2:c1:
                    70:0a:49:2d:88:17:97:c2:5d:f2:94:af:7c:d4:bc:
                    52:7b:41:80:d7:43:ba:42:43:75:94:bd:b7:f8:ae:
                    68:b9:bc:c5:7c:45:9b:da:0b:7b:ca:3e:af:0a:61:
                    0b:b8:08:9d:1d:b0:7a:2f:54:27:f7:0b:b8:7e:bb:
                    7c:13:f9:71:84:73:87:df:ca:7e:b0:dd:ae:a4:2c:
                    a5:81:0e:84:0b:18:87:2d:d4:e6:32:79:48:71:80:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:87:75:FC:E2:1E:3C:19:DC:E7:FD:12:52:5B:E0:2F:F3:E3:63
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132343a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:e5:59:22:4f:e8:b3:68:01:9e:fd:9f:d3:a4:02:50:93:97:
         10:95:fe:c1:b6:95:a5:69:e1:b4:b7:a7:02:62:71:fd:ca:4f:
         4f:f8:6f:9e:1f:37:61:00:29:61:d5:46:0c:de:23:81:29:28:
         bd:7b:88:f1:ca:1a:e0:26:5b:8c:14:2d:47:3f:0c:74:20:c9:
         8c:f2:f1:9c:5c:32:fc:b0:73:cd:58:b8:80:91:46:f6:1c:53:
         1f:5d:f6:b9:cd:5b:b0:47:7e:ea:fc:5d:07:f7:90:f5:ef:5d:
         7e:ad:b2:3b:bf:c6:72:ba:6a:71:cf:15:fe:0f:98:50:00:e4:
         75:50:bd:66:39:93:13:63:63:b9:06:0d:95:d6:8d:0b:06:fd:
         0f:48:5f:65:bc:6a:8e:3e:9c:54:cb:22:47:dc:2b:45:0a:41:
         5f:29:f7:2b:cb:23:c7:35:eb:bf:41:ee:30:db:b9:54:20:2b:
         8f:6b:40:35:e8:d8:53:72:9b:ea:5f:22:aa:a6:ec:92:66:91:
         c9:16:a1:70:3f:68:40:4f:11:94:9a:01:e7:c3:d7:d2:f7:46:
         02:bc:f8:ef:d0:1a:97:22:9a:cf:36:dd:a2:0c:2a:72:d8:38:
         5c:ac:52:c1:4b:bb:07:42:cf:dc:cf:57:55:a6:b5:11:76:d8:
         79:fd:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----