Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162333a3a2f34382d3438203d3e20323033373538.roa
File:                     323630323a666364333a3162333a3a2f34382d3438203d3e20323033373538.roa (raw, json)
Hash identifier:          fV8KCqs+TF3idBuBz4zFuubFt1lIeXeRdtoe+zMPcGc=
Subject key identifier:   2A:15:A1:FB:E4:15:0F:07:D7:8F:72:A4:A3:3F:84:78:D2:C5:82:06
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       4EF9ED886375C5ED5E3F1D6DEE1E2F5B3EF61EA7
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162333a3a2f34382d3438203d3e20323033373538.roa
Signing time:             Fri 09 Dec 2022 16:07:44 +0000
ROA not before:           Fri 09 Dec 2022 16:02:44 +0000
ROA not after:            Fri 08 Dec 2023 16:07:44 +0000
asID:                     203758
IP address blocks:        2602:fcd3:1b3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f9:ed:88:63:75:c5:ed:5e:3f:1d:6d:ee:1e:2f:5b:3e:f6:1e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:44 2022 GMT
            Not After : Dec  8 16:07:44 2023 GMT
        Subject: CN=2A15A1FBE4150F07D78F72A4A33F8478D2C58206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:05:02:fd:7c:35:ce:18:ec:5d:13:2e:63:
                    60:8b:9e:e6:db:30:4d:86:af:17:c2:84:ed:cf:1c:
                    c6:7c:78:d2:2c:18:7d:80:6d:f6:d9:2d:a2:7c:a3:
                    83:39:ee:b1:fc:39:0e:1e:8e:90:4a:f0:8d:0d:ce:
                    89:89:3e:e2:47:b1:43:28:c1:a5:d2:6f:20:9d:67:
                    fe:41:26:9d:e3:e4:35:ca:f1:7f:58:78:7e:84:46:
                    44:41:3c:d9:0b:43:68:ac:95:60:a2:b5:5d:9d:06:
                    43:50:3e:dd:c9:52:7b:01:7b:5a:71:19:34:ac:a1:
                    2b:b7:a7:43:70:8d:f1:10:a0:38:5b:26:42:9f:77:
                    97:cd:e8:70:11:49:5e:8e:a5:f1:49:27:8f:e1:70:
                    c3:27:4d:11:1b:d7:b9:54:d9:c1:22:df:f6:9f:5a:
                    25:af:47:1d:08:87:94:be:b1:81:73:45:fa:b4:61:
                    21:9b:b9:82:f3:83:1b:04:b8:76:2c:6a:00:6b:97:
                    fc:97:94:5e:d4:51:da:b6:77:71:6c:27:3c:22:a3:
                    30:9b:25:a0:2c:7c:3a:b8:ad:9c:39:64:0b:ba:09:
                    af:e2:e8:75:4f:2f:fd:07:bc:5c:7e:01:4f:ac:34:
                    4b:9a:7a:f0:06:3e:4b:b8:73:fe:b7:b6:8a:04:1e:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:15:A1:FB:E4:15:0F:07:D7:8F:72:A4:A3:3F:84:78:D2:C5:82:06
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162333a3a2f34382d3438203d3e20323033373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:26:16:c1:92:ab:bc:08:1a:e9:28:0f:3f:cd:5a:25:c2:78:
         59:cb:12:e2:3b:a6:a2:65:cc:a5:eb:cd:1f:04:66:2e:54:8c:
         cb:a7:1e:f6:8a:88:ba:8f:25:3e:22:81:aa:98:92:3e:7c:62:
         de:9c:85:cd:4e:28:6b:b5:45:d9:01:a2:7b:09:d3:fb:21:eb:
         f2:84:cc:47:81:0e:91:41:87:d4:c2:e8:ad:02:11:81:da:6f:
         8c:4a:d3:45:ee:d0:90:29:6d:c4:ce:68:a0:d6:fb:75:c2:09:
         2a:c2:8c:5d:0d:97:87:7c:4a:28:8a:23:9a:6c:e4:16:e4:e4:
         eb:92:b4:64:84:6e:12:ab:70:55:1b:32:6f:ce:d9:3b:f8:74:
         9f:00:81:33:d6:32:b4:0c:70:e5:51:48:ba:0b:3a:5b:c5:15:
         a6:b2:ab:99:05:e6:80:7c:bd:83:cc:fa:0e:94:7d:e0:14:8a:
         95:5f:36:d3:31:71:8d:55:f6:2b:3a:15:38:fc:30:bd:43:50:
         23:00:6e:26:17:f6:f7:1f:0c:16:6a:28:6a:19:e0:3f:22:e9:
         25:65:12:b8:2d:4d:69:9d:c4:50:af:4a:7d:c5:e6:85:18:8b:
         de:ae:1a:12:be:d5:0b:de:79:35:ea:b6:7a:39:d6:51:98:4e:
         14:b8:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----