Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135313a3a2f34382d3438203d3e20323130363134.roa
File:                     323630323a666364333a3135313a3a2f34382d3438203d3e20323130363134.roa (raw, json)
Hash identifier:          pJHMSvMfl0bvLlLTzSND4SxFmgNOO1OCx+Rho3gkcK0=
Subject key identifier:   FA:E8:6D:3B:C8:74:9C:D1:CC:E4:31:14:21:D9:9B:C9:13:3C:D9:34
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       7CA007732235B18AD13EB3B6E0A1217E8AA637D6
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135313a3a2f34382d3438203d3e20323130363134.roa
Signing time:             Sun 25 Dec 2022 23:15:17 +0000
ROA not before:           Sun 25 Dec 2022 23:10:17 +0000
ROA not after:            Sun 24 Dec 2023 23:15:17 +0000
asID:                     210614
IP address blocks:        2602:fcd3:151::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a0:07:73:22:35:b1:8a:d1:3e:b3:b6:e0:a1:21:7e:8a:a6:37:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 25 23:10:17 2022 GMT
            Not After : Dec 24 23:15:17 2023 GMT
        Subject: CN=FAE86D3BC8749CD1CCE4311421D99BC9133CD934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:be:42:b1:a2:0f:d4:a5:7a:fa:0f:e4:68:
                    0e:8b:79:2b:6d:94:69:f7:db:95:53:20:26:48:55:
                    18:a4:fd:31:c2:10:18:ed:c4:4a:a8:06:13:77:8a:
                    f4:3c:eb:65:15:c5:8b:9f:23:45:48:7a:ba:bb:4b:
                    4c:88:43:14:21:f8:90:56:9f:bf:52:6d:a8:fb:51:
                    9b:d8:3d:a5:fe:40:50:ca:a2:f9:1c:1b:11:f8:68:
                    d5:72:81:f7:94:e9:cb:aa:c0:19:49:52:2a:46:84:
                    f5:2f:ee:bd:22:e5:71:5a:db:12:12:b2:4e:e6:ef:
                    2d:fc:8a:96:e7:29:5e:1f:63:b0:6b:e3:96:c6:e5:
                    2a:f3:a2:e7:19:37:5c:33:7d:29:e5:cd:a8:15:0a:
                    56:e3:8d:a6:b9:ed:fa:4e:3b:2a:2a:14:a0:61:a5:
                    68:8d:b0:e3:b1:ca:39:d5:13:b3:33:f0:de:39:30:
                    41:0c:bd:41:71:75:23:25:1a:05:2c:aa:de:68:f9:
                    61:b2:bc:96:92:b2:2e:88:38:9f:1b:2f:8c:f1:96:
                    10:0b:0a:a2:8e:6a:98:7e:1e:d4:d3:d8:14:69:39:
                    12:57:fa:09:c1:70:d1:97:4e:e8:fd:89:68:b3:67:
                    a9:39:8a:79:28:bd:8b:31:26:a2:43:3b:15:82:7b:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:6D:3B:C8:74:9C:D1:CC:E4:31:14:21:D9:9B:C9:13:3C:D9:34
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3135313a3a2f34382d3438203d3e20323130363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:151::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:b8:55:a2:cb:8e:82:29:03:35:80:ac:4d:15:10:be:21:
         40:ab:36:9e:80:30:37:be:02:73:85:bc:11:23:c1:82:00:75:
         2b:48:3f:e7:23:82:3c:89:a1:ae:f4:93:e6:5d:e0:8c:ff:f6:
         22:e9:b3:57:a9:cb:d9:80:b6:8a:5f:3c:58:8c:60:09:5e:f0:
         63:6d:78:62:22:70:30:9c:fb:16:79:e3:9e:cb:2c:b7:c0:f8:
         9a:60:ae:7a:42:b7:1b:ab:9d:89:af:55:1b:49:a8:a6:b9:aa:
         dd:46:86:98:83:63:bd:56:d7:61:81:ca:d5:d1:ff:13:83:e3:
         f4:a5:55:d8:f7:72:06:80:4e:5c:bd:76:a3:ae:b5:72:53:b1:
         0b:a5:2d:b9:be:e5:b9:e0:9e:53:30:a2:7c:90:8d:34:0e:44:
         2b:fd:5c:5f:57:36:e4:fb:f6:36:1e:66:f2:c7:a0:55:52:fd:
         f5:2d:be:a7:a9:26:df:c8:14:29:b0:ab:ee:4a:3b:ee:ef:51:
         a0:a7:75:ba:d2:8a:7d:0c:ef:44:90:80:1c:4f:0e:6b:21:a4:
         54:c5:cd:39:31:8b:b3:0c:cb:fc:62:7a:5b:ec:2c:a1:67:44:
         3a:7d:bb:8b:b3:ef:e2:5d:e1:6b:23:44:2b:68:79:22:ae:64:
         a6:58:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----