Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa
File:                     323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa (raw, json)
Hash identifier:          6dHyHYD6RqHY1ksJ4AtiRR6AGVtqWr4GEL098569MCA=
Subject key identifier:   BC:F3:83:0F:0B:33:18:9A:EB:E3:83:BA:ED:EF:DB:66:A5:D5:9D:E1
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       1F238765540ACCEEFE37DD6BDF082EB7BB8F167D
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa
Signing time:             Mon 06 Feb 2023 08:12:33 +0000
ROA not before:           Mon 06 Feb 2023 08:07:33 +0000
ROA not after:            Mon 05 Feb 2024 08:12:33 +0000
asID:                     213168
IP address blocks:        2602:fcd3:125::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:23:87:65:54:0a:cc:ee:fe:37:dd:6b:df:08:2e:b7:bb:8f:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb  6 08:07:33 2023 GMT
            Not After : Feb  5 08:12:33 2024 GMT
        Subject: CN=BCF3830F0B33189AEBE383BAEDEFDB66A5D59DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:45:38:c3:08:57:17:e3:0d:41:f9:04:8e:
                    9c:46:32:6d:71:10:0a:e5:94:38:aa:d9:5f:d9:c3:
                    98:54:09:29:7f:37:57:cd:19:0b:18:cb:cf:b3:5a:
                    21:5d:ba:aa:5a:9c:89:a7:4d:56:c2:f0:c0:7e:25:
                    6c:34:43:20:fa:4e:d5:18:f4:50:cb:4a:22:38:ad:
                    a6:27:41:60:ae:d9:06:45:0c:fe:3d:f9:30:a5:9c:
                    a0:92:c3:20:99:b6:1a:42:de:3b:3b:21:8c:17:07:
                    40:89:33:83:af:5e:74:7a:25:c4:ea:f4:79:2b:41:
                    11:92:ac:62:48:01:dc:0d:93:38:e3:80:4e:46:b4:
                    aa:80:fb:a7:a8:41:7a:29:58:14:a6:f2:b4:ad:54:
                    0c:91:0b:d4:72:47:d3:64:f6:f5:d4:28:da:04:e4:
                    fe:0c:2d:93:c3:db:93:af:82:17:b5:c9:a1:f3:09:
                    d9:8f:cd:58:74:5b:2e:d0:8d:d5:0f:b7:e6:84:1b:
                    7d:b5:3a:d3:fb:48:38:7d:e4:22:ab:3c:2a:28:eb:
                    e5:a8:5d:73:ec:ca:96:f5:63:88:ee:3a:81:86:7d:
                    4d:e4:7f:06:ce:87:a9:6c:0b:e4:83:17:aa:a7:c9:
                    78:8b:74:9b:a5:94:5f:1f:30:a2:b4:e2:c8:e3:57:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:83:0F:0B:33:18:9A:EB:E3:83:BA:ED:EF:DB:66:A5:D5:9D:E1
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3132353a3a2f34382d3438203d3e20323133313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:42:85:31:c0:1f:9d:cc:62:ed:39:b1:1a:f1:60:61:99:
         a7:55:08:dd:47:4e:45:16:81:a9:e8:2d:ae:aa:b6:9b:ad:2a:
         f5:4c:ce:79:5a:61:01:a7:a4:6a:f4:60:b5:14:89:01:68:7a:
         dc:1e:ea:49:98:a2:48:e3:d8:c4:0e:db:6f:2e:de:16:f3:40:
         43:a3:92:d9:10:4e:2e:0e:46:38:8b:c7:a7:3b:1a:fd:68:34:
         2b:d6:4e:d0:c4:39:59:13:17:90:15:2f:9a:4d:98:09:d0:92:
         47:45:96:83:f1:89:da:7b:df:d2:af:76:0c:58:da:62:42:1b:
         0a:0e:5a:2c:d4:36:ea:28:f6:b9:cb:c4:3e:3a:d2:1a:45:1d:
         99:31:c0:a1:59:4c:e6:94:83:16:52:51:14:12:9b:58:2d:40:
         3a:9f:e1:ef:9e:2b:60:e8:0a:7d:e4:ca:02:31:e9:92:bb:ef:
         04:83:40:26:bf:89:16:7b:2f:6d:c6:94:eb:04:eb:19:61:71:
         65:2b:9f:19:70:56:f4:8b:d8:99:2a:cf:07:1f:72:eb:2b:c3:
         c3:cf:68:b1:60:d2:8d:88:a8:e7:84:f7:95:6d:82:ad:08:32:
         70:0d:11:63:f3:f8:b1:36:69:db:22:e4:d8:af:fe:e5:1c:20:
         e4:a3:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----