Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323030383636.roa
File:                     323630323a666364333a3162343a3a2f34382d3438203d3e20323030383636.roa (raw, json)
Hash identifier:          oGIWNIexiGy2TLKVVvkVjJztyqbMHAtrQSxsq/pC0vM=
Subject key identifier:   F7:A6:8F:8E:5F:AC:8E:8F:72:16:54:74:51:D3:56:1A:AE:23:7A:F4
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       48DFF6E7A05D13F37C143357F6AA90190FB1BD4B
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323030383636.roa
Signing time:             Sun 11 Dec 2022 23:59:55 +0000
ROA not before:           Sun 11 Dec 2022 23:54:55 +0000
ROA not after:            Sun 10 Dec 2023 23:59:55 +0000
asID:                     200866
IP address blocks:        2602:fcd3:1b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:df:f6:e7:a0:5d:13:f3:7c:14:33:57:f6:aa:90:19:0f:b1:bd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 11 23:54:55 2022 GMT
            Not After : Dec 10 23:59:55 2023 GMT
        Subject: CN=F7A68F8E5FAC8E8F7216547451D3561AAE237AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:18:29:9e:2c:2d:36:f2:0d:bc:5e:63:f8:
                    d6:b0:c5:30:36:59:2e:80:0a:a9:40:ae:c8:85:d5:
                    34:cc:36:7c:58:7b:b3:a8:03:9b:0a:cf:c4:bb:50:
                    3b:fa:d5:8a:cd:de:a0:85:10:f5:76:0b:f9:b4:a3:
                    a5:9d:15:3b:bb:31:ed:2f:3c:e2:02:ec:7b:a9:27:
                    60:8d:e0:60:a1:06:68:3f:31:93:c2:c7:b4:14:55:
                    39:e1:18:ce:a3:5d:a7:ef:d3:ac:d9:91:43:9e:1c:
                    f3:30:f5:cd:ce:f3:93:23:16:65:87:8a:84:78:49:
                    d8:4f:36:55:43:e9:13:71:86:8d:02:c8:27:ca:2a:
                    55:cb:c7:dd:6c:f9:0d:50:a9:78:4b:6a:bb:96:f8:
                    a2:da:83:cf:10:33:b8:79:df:70:d5:58:a6:7d:1b:
                    03:f9:ae:04:93:65:2f:0c:31:45:22:5f:9d:66:b0:
                    a9:cc:4e:91:e2:f8:76:63:53:f0:2c:47:3f:6c:01:
                    d1:65:96:4a:ef:36:c0:b9:f0:d4:27:02:9e:b5:3e:
                    7f:05:6c:73:66:57:f1:96:36:3e:2d:09:97:30:d6:
                    de:8b:1c:94:2b:50:8e:cf:33:7e:39:b1:bd:e6:1c:
                    2e:1e:3a:db:76:e3:6f:ac:65:71:58:39:cb:b1:cd:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:8F:8E:5F:AC:8E:8F:72:16:54:74:51:D3:56:1A:AE:23:7A:F4
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162343a3a2f34382d3438203d3e20323030383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c0:f8:fb:63:67:2e:17:d7:ab:4f:d0:16:19:23:e5:43:1c:
         54:30:3f:2c:30:fe:98:ee:5f:38:50:9a:40:8a:47:3b:9f:56:
         f2:e1:b4:01:06:e2:4b:dd:65:c0:f1:7f:36:53:13:51:f7:d0:
         c7:52:e0:a6:45:f1:7f:31:e3:c9:44:b4:b0:83:51:05:01:d9:
         8b:e9:b2:c1:10:a7:cb:01:5c:5b:a3:8d:42:69:80:51:09:30:
         7b:b7:1e:a8:04:4b:b0:06:93:18:8c:0d:c3:f6:a9:9d:52:83:
         84:a7:b2:66:f3:02:45:e2:38:5a:ae:d1:02:50:d0:c1:3f:cd:
         a3:5b:9a:5d:19:91:15:de:f9:6e:ce:27:33:60:5a:a7:30:8a:
         af:1b:46:69:df:ed:8b:20:bd:2c:e3:a2:3c:cc:a8:6d:2f:4a:
         6d:76:3a:9f:98:0e:43:45:16:08:b7:3f:9a:5c:93:1f:6a:29:
         be:1d:e8:1b:77:ca:c6:24:8c:7c:0f:1d:ff:e9:db:38:b6:83:
         66:4d:4c:e9:e7:bd:c4:9f:9a:d6:f1:ca:0a:47:da:88:52:6d:
         f1:0d:42:4f:68:bb:6f:c1:40:5a:d1:7e:4e:20:ba:c1:d3:53:
         64:ec:03:8e:a6:92:c7:7b:81:c7:4e:0c:fa:cc:1c:d6:f7:5e:
         f0:43:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----