Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
File:                     323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa (raw, json)
Hash identifier:          8d0SX1dQar412jFtgwk96pzX/0Vc/tplk29PRDtnCCo=
Subject key identifier:   E6:9E:9E:5B:56:D3:F8:09:C9:E7:7E:5E:AB:40:C0:41:13:B4:4E:EE
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       51AB0B735B2CC7D20779B0D9C4801651D9F0B2AD
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa
Signing time:             Tue 14 Mar 2023 00:34:35 +0000
ROA not before:           Tue 14 Mar 2023 00:29:35 +0000
ROA not after:            Tue 12 Mar 2024 00:34:35 +0000
asID:                     200570
IP address blocks:        2602:fcd3:131::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ab:0b:73:5b:2c:c7:d2:07:79:b0:d9:c4:80:16:51:d9:f0:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar 14 00:29:35 2023 GMT
            Not After : Mar 12 00:34:35 2024 GMT
        Subject: CN=E69E9E5B56D3F809C9E77E5EAB40C04113B44EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:7a:dc:e0:3f:dc:5d:d2:9b:52:ed:6e:38:
                    5b:52:b2:dd:b7:4d:f7:d1:f2:b2:c8:fa:ab:93:7f:
                    03:68:41:c8:e3:5f:62:73:f9:46:07:8d:4d:89:1f:
                    e0:f3:97:fe:23:95:ba:80:b3:7d:87:ba:ad:5d:1d:
                    78:23:02:23:fa:01:b8:36:18:31:83:06:ce:fe:2d:
                    da:12:d4:cb:83:ab:87:00:ed:0e:de:81:a2:3b:38:
                    e4:08:51:e1:d3:4c:b4:3d:b5:f1:47:56:6f:f0:70:
                    b3:b5:3d:ff:95:a4:69:2d:03:c9:c2:3a:bd:8b:89:
                    b6:06:fb:e1:07:3a:52:ae:d7:5c:65:30:0f:4d:9d:
                    b4:cd:d6:db:b6:a8:5b:06:b9:03:0c:77:47:ff:fa:
                    3d:7f:59:bb:28:7a:fc:a2:91:2a:12:b9:51:ee:40:
                    71:b6:e1:8d:2f:13:1f:e7:e4:c3:7f:30:25:44:11:
                    eb:37:ae:c5:49:f2:5c:90:18:9b:d0:48:a2:4d:55:
                    f2:1e:d0:97:53:66:57:47:11:39:1b:0a:3b:f4:40:
                    a5:f7:df:58:18:dd:a3:81:33:d4:12:0a:c5:43:21:
                    38:48:0a:62:08:9e:f4:23:80:22:ef:40:3d:4e:3c:
                    f0:42:1c:6a:94:58:62:81:00:38:f4:2d:47:72:37:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:9E:5B:56:D3:F8:09:C9:E7:7E:5E:AB:40:C0:41:13:B4:4E:EE
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3133313a3a2f34382d3438203d3e20323030353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:131::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:b9:bd:d0:ae:8b:77:2a:a1:af:41:72:b9:61:05:57:43:e4:
         ed:1f:57:1c:6d:6d:fe:96:25:d1:b4:8f:46:d0:e7:3d:58:ae:
         c7:9c:f8:0b:17:7a:83:a3:14:79:98:5a:be:44:93:50:16:c3:
         8b:8c:84:24:ba:b5:bf:5f:09:af:5c:11:60:21:3d:39:22:33:
         5d:02:72:6b:85:67:e4:59:82:eb:0e:f9:34:75:08:9a:62:4a:
         80:e1:08:59:27:83:28:e4:ec:1a:75:35:89:9e:f4:68:74:6f:
         d8:2b:be:84:fd:8c:2f:ec:af:03:20:be:25:cc:bf:ac:b4:0c:
         ec:0f:17:0d:de:d2:cd:4f:67:08:5c:19:eb:0f:62:33:04:71:
         c4:3b:86:25:74:1c:74:b9:80:fa:17:ff:6d:15:cc:93:14:6b:
         e1:c2:15:06:4e:73:7e:5b:7c:a5:a9:d2:96:98:a7:4d:a4:59:
         a4:b3:bb:a8:b9:a2:b6:48:ab:de:ae:e0:78:7a:7f:1c:51:39:
         b5:25:75:11:2f:5d:ca:88:4c:72:cf:51:74:62:ee:f9:f3:74:
         ee:b0:3c:3a:f9:08:14:51:7f:ec:00:26:0b:ea:02:90:4e:30:
         4b:b4:a4:ac:0e:dd:07:29:f6:3b:8c:f8:d6:42:94:e5:98:a4:
         c2:71:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----