Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135303a3a2f34382d3438203d3e203537343530.roa
File:                     323630323a666364333a3135303a3a2f34382d3438203d3e203537343530.roa (raw, json)
Hash identifier:          4mrvuXz2OD6dykngSdQyGtk0d8DNXKMV+FuR7uCPurw=
Subject key identifier:   6E:9C:8D:24:8D:61:55:5D:22:25:48:28:F4:EB:CF:9C:A7:8F:3B:AD
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       393BC2D8D5E6534ABED70332CFBD7DF59F055C9A
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135303a3a2f34382d3438203d3e203537343530.roa
Signing time:             Mon 06 Feb 2023 08:14:30 +0000
ROA not before:           Mon 06 Feb 2023 08:09:30 +0000
ROA not after:            Mon 05 Feb 2024 08:14:30 +0000
asID:                     57450
IP address blocks:        2602:fcd3:150::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3b:c2:d8:d5:e6:53:4a:be:d7:03:32:cf:bd:7d:f5:9f:05:5c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb  6 08:09:30 2023 GMT
            Not After : Feb  5 08:14:30 2024 GMT
        Subject: CN=6E9C8D248D61555D22254828F4EBCF9CA78F3BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:a6:8f:37:20:50:53:8f:82:47:88:46:26:
                    22:ac:43:57:bd:d6:86:6e:20:31:10:60:cf:76:32:
                    00:a7:e5:06:d6:1a:ee:ac:62:c4:05:5a:0c:dd:6b:
                    c7:7d:74:d7:81:82:44:e9:8d:b3:bd:09:47:9c:1c:
                    0d:f5:3e:96:a3:b1:3b:92:1c:14:7e:cf:ee:ac:76:
                    15:b2:73:b0:b9:80:27:c9:bc:f5:9e:f6:f5:0b:1b:
                    2d:da:be:9a:24:a0:8b:2d:ab:c6:21:73:48:c7:52:
                    8c:49:07:37:8f:d0:a2:b5:90:2b:a5:47:22:19:a4:
                    df:9f:63:2a:8a:82:d7:ed:51:9b:1e:e5:3b:dc:c3:
                    78:23:de:f4:eb:cb:23:2d:09:24:be:6e:f6:fb:67:
                    8b:cf:51:bf:b5:af:21:47:3d:50:56:1d:5f:a5:5f:
                    92:7d:cb:05:2a:3a:eb:d9:fe:76:58:53:24:2f:30:
                    3f:5b:2c:4c:96:5c:4a:a1:1b:95:a4:71:26:17:d7:
                    76:60:c2:7c:6c:f0:5e:2d:d6:68:53:c3:8b:0f:c5:
                    0d:e3:b8:bd:dc:b5:de:96:8b:16:d5:8b:f6:3c:1a:
                    51:8f:2e:d4:df:84:a1:ed:6e:bf:9d:9d:75:16:f6:
                    4d:54:70:88:81:3c:ff:59:8b:e4:43:dc:3c:bf:b6:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9C:8D:24:8D:61:55:5D:22:25:48:28:F4:EB:CF:9C:A7:8F:3B:AD
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135303a3a2f34382d3438203d3e203537343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:28:23:40:b1:b2:19:ed:12:23:a6:ef:6a:f0:fb:96:0d:
         2e:73:bf:1e:7a:03:b6:5a:3a:a6:1d:2e:1b:4a:46:15:44:d6:
         c5:23:b9:10:85:ea:f5:86:07:70:a7:55:5e:7e:f8:91:56:75:
         f6:f7:51:96:91:10:cf:bd:19:93:03:6a:ff:de:ff:c4:5a:d5:
         d4:c6:7c:77:78:65:90:cd:c7:35:95:c8:5b:75:56:db:be:0a:
         c7:71:b3:e2:dd:30:67:e6:84:4d:2c:8c:7c:5f:e0:ec:05:d7:
         24:ff:b2:8d:ce:74:af:6f:cf:31:0f:56:ce:dd:3e:48:25:14:
         39:54:d9:bc:74:26:9a:b8:a1:af:46:d9:b6:73:64:6c:09:60:
         95:c8:b7:8b:82:ca:6f:e8:17:4f:ab:a6:84:6f:bb:74:3d:c8:
         d9:1e:45:6d:9b:39:d1:12:f6:3a:43:9c:a1:e1:63:7a:c7:7c:
         c7:ea:57:2e:25:27:63:9a:8d:85:47:16:6c:25:00:73:6f:fd:
         f9:6b:e2:48:1d:7f:94:4e:3c:c9:22:c9:cd:fc:6e:65:8e:a3:
         b3:8a:b2:59:8c:9d:9b:03:16:74:67:b5:7a:b6:00:60:18:f2:
         7b:9e:d3:ae:e3:9e:85:9d:f2:35:ef:74:ce:f6:02:89:0a:c9:
         88:fd:d9:5f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUOTvC2NXmU0q+1wMyz7199Z8FXJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjMwMjA2MDgwOTMwWhcNMjQwMjA1MDgxNDMw
WjAzMTEwLwYDVQQDEyg2RTlDOEQyNDhENjE1NTVEMjIyNTQ4MjhGNEVCQ0Y5Q0E3
OEYzQkFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI6mjzcgUFOP
gkeIRiYirENXvdaGbiAxEGDPdjIAp+UG1hrurGLEBVoM3WvHfXTXgYJE6Y2zvQlH
nBwN9T6Wo7E7khwUfs/urHYVsnOwuYAnybz1nvb1Cxst2r6aJKCLLavGIXNIx1KM
SQc3j9CitZArpUciGaTfn2MqioLX7VGbHuU73MN4I97068sjLQkkvm72+2eLz1G/
ta8hRz1QVh1fpV+SfcsFKjrr2f52WFMkLzA/WyxMllxKoRuVpHEmF9d2YMJ8bPBe
LdZoU8OLD8UN47i93LXelosW1Yv2PBpRjy7U34Sh7W6/nZ11FvZNVHCIgTz/WYvk
Q9w8v7YAiwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFG6cjSSNYVVdIiVIKPTrz5yn
jzutMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzYzMDMyM2E2NjYzNjQzMzNhMzEzNTMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzNzM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/NMBUDANBgkq
hkiG9w0BAQsFAAOCAQEAYcIoI0CxshntEiOm72rw+5YNLnO/HnoDtlo6ph0uG0pG
FUTWxSO5EIXq9YYHcKdVXn74kVZ19vdRlpEQz70ZkwNq/97/xFrV1MZ8d3hlkM3H
NZXIW3VW274Kx3Gz4t0wZ+aETSyMfF/g7AXXJP+yjc50r2/PMQ9Wzt0+SCUUOVTZ
vHQmmrihr0bZtnNkbAlglci3i4LKb+gXT6umhG+7dD3I2R5FbZs50RL2OkOcoeFj
esd8x+pXLiUnY5qNhUcWbCUAc2/9+WviSB1/lE48ySLJzfxuZY6js4qyWYydmwMW
dGe1erYAYBjye57TruOehZ3yNe90zvYCiQrJiP3ZXw==
-----END CERTIFICATE-----