Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3134303a3a2f34382d3438203d3e20323033313639.roa
File:                     323630323a666364333a3134303a3a2f34382d3438203d3e20323033313639.roa (raw, json)
Hash identifier:          WjIT4jTVZ8Lbg26E9bgE5g1VJ6aH6ghiKB4EXAbekVw=
Subject key identifier:   E3:69:C8:A1:07:F4:7E:41:A3:7E:75:43:4B:38:8E:5B:B1:C1:F2:E0
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       7A4A9C3EE9218BB75437A0FBDFCDC02B5E741E9F
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3134303a3a2f34382d3438203d3e20323033313639.roa
Signing time:             Mon 06 Feb 2023 08:13:01 +0000
ROA not before:           Mon 06 Feb 2023 08:08:01 +0000
ROA not after:            Mon 05 Feb 2024 08:13:01 +0000
asID:                     203169
IP address blocks:        2602:fcd3:140::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4a:9c:3e:e9:21:8b:b7:54:37:a0:fb:df:cd:c0:2b:5e:74:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb  6 08:08:01 2023 GMT
            Not After : Feb  5 08:13:01 2024 GMT
        Subject: CN=E369C8A107F47E41A37E75434B388E5BB1C1F2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:bb:a8:62:44:c6:37:a9:2b:b3:55:23:cb:
                    f9:31:24:0f:13:27:3d:59:c9:2a:3a:27:87:0c:27:
                    81:1c:fc:d8:db:5e:d0:31:17:13:49:ef:d7:f5:82:
                    75:87:6a:c0:c8:21:65:cf:4b:dd:d4:dc:aa:54:9a:
                    33:fd:8e:48:08:17:ef:b9:9d:7b:30:e5:cb:3b:9c:
                    dd:09:78:73:f4:2d:47:08:97:4e:bd:db:51:6f:a6:
                    d4:9b:3f:ba:34:0d:14:60:ba:2d:6c:42:23:a2:0e:
                    67:94:f3:3c:d0:00:42:5e:c7:42:a6:2a:6f:4d:0a:
                    3c:eb:bb:0a:20:d8:dc:76:98:00:83:c7:7d:09:ed:
                    ae:a0:32:79:8d:be:e3:e5:84:73:e0:40:11:e0:67:
                    8a:a5:b1:cc:d2:52:b0:22:3c:29:e8:db:5e:d6:5a:
                    bc:15:51:ec:03:0e:d9:b1:5c:c7:d6:5a:ae:e2:77:
                    99:95:e3:c3:f4:f9:6b:03:62:e3:c9:64:9e:99:b6:
                    aa:cb:a8:0b:ab:70:28:f8:21:56:d1:9c:4a:44:8a:
                    76:31:bd:c7:03:b6:dc:ed:d4:63:cc:60:e2:fe:89:
                    08:c0:ee:88:e8:cb:e4:1b:0e:34:62:a9:ba:a1:9d:
                    6c:be:8d:c1:c2:4f:c7:14:34:9f:35:fc:66:6f:de:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:C8:A1:07:F4:7E:41:A3:7E:75:43:4B:38:8E:5B:B1:C1:F2:E0
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3134303a3a2f34382d3438203d3e20323033313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:29:52:cf:5c:2c:36:7a:64:08:13:3b:83:5a:c6:f9:1b:
         b9:35:71:a2:56:cb:cb:42:22:18:3c:6b:30:0e:13:1e:72:d5:
         4e:44:79:9f:4d:75:a5:d2:7d:f7:0f:ef:5f:e0:d4:eb:7b:5a:
         84:8c:a3:20:4e:9e:be:05:8b:d6:90:36:bb:07:17:02:73:6c:
         e8:f5:d3:54:1e:c8:95:1a:9d:c5:2a:00:92:e0:0d:5e:be:66:
         6a:82:03:4d:5c:9b:c1:3a:21:cc:a4:1a:e0:89:77:f2:17:f1:
         d2:b6:93:20:93:6a:2a:10:d8:f8:91:f0:d1:8c:a6:db:cd:c7:
         a4:b3:2d:f7:f4:a0:37:7c:5e:74:e8:2e:24:ea:55:0f:63:1b:
         29:7d:0d:8b:8a:7f:72:35:4a:98:a9:af:00:74:ad:3c:4e:43:
         40:db:df:24:51:9a:fb:c8:6d:cb:8b:26:12:97:10:eb:91:7f:
         0d:72:06:12:97:08:41:32:77:b3:3c:39:47:06:31:09:96:27:
         25:a5:c8:00:97:83:72:66:b9:b6:e3:30:9d:6c:47:37:2e:1e:
         b9:e1:7d:f6:94:fd:cc:d1:71:94:bf:d5:6b:78:b2:7f:be:ab:
         4f:e2:23:bb:b9:bd:c9:bc:09:fe:23:11:54:a7:a7:73:c7:df:
         ab:da:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----