Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162303a3a2f34382d3438203d3e203233343730.roa
File:                     323630323a666364333a3162303a3a2f34382d3438203d3e203233343730.roa (raw, json)
Hash identifier:          KVOXPOyX+cEwdCRLVZbPh5aED5bGmRmlEHC/tLiZGT8=
Subject key identifier:   1A:81:0B:CD:FD:2C:EB:07:40:3E:63:3F:DA:E4:E3:D9:F8:6E:E7:99
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       6F9E4E44514BC8D414FB561F016808C2EFC6D741
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162303a3a2f34382d3438203d3e203233343730.roa
Signing time:             Fri 09 Dec 2022 16:07:01 +0000
ROA not before:           Fri 09 Dec 2022 16:02:01 +0000
ROA not after:            Fri 08 Dec 2023 16:07:01 +0000
asID:                     23470
IP address blocks:        2602:fcd3:1b0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9e:4e:44:51:4b:c8:d4:14:fb:56:1f:01:68:08:c2:ef:c6:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:01 2022 GMT
            Not After : Dec  8 16:07:01 2023 GMT
        Subject: CN=1A810BCDFD2CEB07403E633FDAE4E3D9F86EE799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b0:92:0e:95:f8:e3:ba:3f:3b:22:87:7b:3a:
                    0f:79:eb:d2:3e:13:b1:de:c5:5b:b1:b2:c7:e3:83:
                    39:62:35:49:67:dc:52:bb:db:69:e0:36:c6:c0:6c:
                    1f:dc:97:e2:39:cd:fa:97:aa:a5:cb:ca:89:c5:d4:
                    e7:67:88:92:9d:a5:22:db:2f:c5:83:d0:82:89:18:
                    dd:16:4c:37:c0:1e:f5:fc:57:47:41:10:11:11:1e:
                    bd:e3:9d:4a:25:a2:91:8c:94:53:10:a4:17:f0:b5:
                    3c:4c:86:0c:fc:31:4f:b6:44:1b:7b:06:28:c0:58:
                    84:0b:9b:76:06:4b:f9:36:fb:66:e5:df:a4:aa:8d:
                    c0:c7:f2:bb:58:04:50:32:20:94:73:ea:42:c1:4b:
                    ce:7b:12:0b:67:e6:6c:03:12:dd:e9:d3:57:d2:13:
                    4c:c3:e3:d5:83:57:1b:90:d6:70:e7:1a:4d:cf:3d:
                    16:1e:06:8a:83:6c:b8:3f:0d:4d:5d:80:21:b7:45:
                    5c:07:ed:12:0c:11:c6:f6:d5:eb:a9:67:f4:87:c4:
                    83:d4:d8:e6:44:5c:8d:2c:30:5a:33:cc:95:93:06:
                    1a:7c:35:57:10:fe:24:90:c2:11:5a:05:63:70:d6:
                    e3:5d:a0:0c:59:fa:23:09:fb:02:24:b9:69:5c:c3:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:0B:CD:FD:2C:EB:07:40:3E:63:3F:DA:E4:E3:D9:F8:6E:E7:99
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162303a3a2f34382d3438203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:d5:f7:3c:3d:4d:db:64:a5:4e:a6:1b:ef:e6:2b:4c:b5:
         9c:2b:b3:d3:e1:77:f5:a4:61:c9:31:4c:f5:00:85:f2:ec:89:
         43:9d:2d:ab:89:ae:26:f9:33:35:42:dd:05:59:ec:8b:38:1b:
         99:c4:39:86:5b:7c:11:c0:66:1d:29:d0:90:02:88:49:56:1b:
         f6:b6:94:40:40:72:84:0c:c8:ec:95:c3:68:ad:14:11:09:f9:
         da:58:b5:58:d1:32:b2:1d:e1:f6:e0:09:fc:40:ce:99:74:96:
         50:87:62:8a:6b:bb:73:1b:fe:f6:11:4f:0c:3f:5c:4f:ed:61:
         f9:89:36:d9:29:91:81:b4:39:94:9e:80:62:35:66:92:06:4a:
         79:2c:76:e7:7b:c1:9e:16:31:a9:1a:30:9a:e3:6f:29:36:3d:
         8e:d3:62:5f:b1:f6:5f:05:ba:fb:00:26:1b:45:f3:61:ef:a8:
         cc:06:a3:4b:79:ef:45:7a:6e:ac:7c:a1:b4:c5:0d:0a:b4:ba:
         9f:fb:5d:69:5d:be:e9:9a:ba:3b:63:67:d7:79:c5:6d:34:4c:
         8c:b1:c5:b2:7a:84:68:1a:31:7d:45:05:ec:3d:e5:1a:91:3e:
         d2:f0:0e:14:03:ce:e6:0a:e4:21:a9:50:23:2b:5b:0c:ed:9f:
         c5:2e:52:a6
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUb55ORFFLyNQU+1YfAWgIwu/G10EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjIxMjA5MTYwMjAxWhcNMjMxMjA4MTYwNzAx
WjAzMTEwLwYDVQQDEygxQTgxMEJDREZEMkNFQjA3NDAzRTYzM0ZEQUU0RTNEOUY4
NkVFNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77CSDpX447o/
OyKHezoPeevSPhOx3sVbsbLH44M5YjVJZ9xSu9tp4DbGwGwf3JfiOc36l6qly8qJ
xdTnZ4iSnaUi2y/Fg9CCiRjdFkw3wB71/FdHQRARER69451KJaKRjJRTEKQX8LU8
TIYM/DFPtkQbewYowFiEC5t2Bkv5Nvtm5d+kqo3Ax/K7WARQMiCUc+pCwUvOexIL
Z+ZsAxLd6dNX0hNMw+PVg1cbkNZw5xpNzz0WHgaKg2y4Pw1NXYAht0VcB+0SDBHG
9tXrqWf0h8SD1NjmRFyNLDBaM8yVkwYafDVXEP4kkMIRWgVjcNbjXaAMWfojCfsC
JLlpXMOFjQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFBqBC839LOsHQD5jP9rk49n4
bueZMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzYzMDMyM2E2NjYzNjQzMzNhMzE2MjMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMzM0MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/NMBsDANBgkq
hkiG9w0BAQsFAAOCAQEAIcDV9zw9TdtkpU6mG+/mK0y1nCuz0+F39aRhyTFM9QCF
8uyJQ50tq4muJvkzNULdBVnsizgbmcQ5hlt8EcBmHSnQkAKISVYb9raUQEByhAzI
7JXDaK0UEQn52li1WNEysh3h9uAJ/EDOmXSWUIdiimu7cxv+9hFPDD9cT+1h+Yk2
2SmRgbQ5lJ6AYjVmkgZKeSx253vBnhYxqRowmuNvKTY9jtNiX7H2XwW6+wAmG0Xz
Ye+ozAajS3nvRXpurHyhtMUNCrS6n/tdaV2+6Zq6O2Nn13nFbTRMjLHFsnqEaBox
fUUF7D3lGpE+0vAOFAPO5grkIalQIytbDO2fxS5Spg==
-----END CERTIFICATE-----