Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a3162353a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          98pKzGX9TACPcsb43riPu8lDK/Y1vRNXjVHcff169KM=
Subject key identifier:   8A:D6:3C:8A:49:3D:B7:57:48:4E:30:40:2E:44:2D:5D:34:D8:CD:84
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       E6D8FE7971E132FEE421861925806D5801326E
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 11 Dec 2022 12:26:12 +0000
ROA not before:           Sun 11 Dec 2022 12:21:12 +0000
ROA not after:            Sun 10 Dec 2023 12:26:12 +0000
asID:                     212934
IP address blocks:        2602:fcd3:1b5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e6:d8:fe:79:71:e1:32:fe:e4:21:86:19:25:80:6d:58:01:32:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 11 12:21:12 2022 GMT
            Not After : Dec 10 12:26:12 2023 GMT
        Subject: CN=8AD63C8A493DB757484E30402E442D5D34D8CD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:e6:0f:67:be:1f:42:2f:99:7c:97:6d:d2:
                    1e:df:ff:c5:26:51:ad:3b:ba:66:62:5d:f9:0a:22:
                    4e:ea:63:9e:0b:02:8d:a4:c0:08:a8:d1:ca:96:d6:
                    65:8a:70:3f:e2:c0:2f:7d:6a:1e:2b:dd:b1:0e:24:
                    7e:79:62:62:6b:08:ae:37:af:cf:a0:4a:72:e3:f3:
                    d0:4b:3b:f2:80:ea:a0:1b:c7:d1:c7:b9:a2:b2:72:
                    84:1a:2b:d8:4a:13:03:45:21:4d:e9:70:92:50:fc:
                    f7:6c:59:19:89:48:7b:06:dd:b1:e9:2d:06:d1:5f:
                    c5:b0:15:6a:89:17:41:4e:f6:fa:b2:86:29:5d:e6:
                    54:f8:06:9b:cf:be:b1:c1:83:3f:80:2d:bc:ee:11:
                    74:bd:52:0d:69:a3:e4:50:93:70:18:24:f1:f7:76:
                    9d:fb:f6:c5:86:06:3a:2e:65:88:54:ae:2c:f3:02:
                    a6:31:c8:64:59:65:16:d2:44:a4:b7:ea:25:b1:68:
                    19:34:dc:97:58:99:2c:bb:05:41:08:58:88:16:ec:
                    05:74:49:42:30:ba:8a:25:c4:0e:5c:e1:91:ff:84:
                    4a:f6:54:0b:2c:95:86:35:a7:28:73:e6:9b:54:2a:
                    71:e4:a7:0a:5b:91:9c:ef:cd:e1:83:88:26:d7:51:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:3C:8A:49:3D:B7:57:48:4E:30:40:2E:44:2D:5D:34:D8:CD:84
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:4f:70:df:8a:04:e4:43:02:34:02:26:25:20:50:d7:ea:a1:
         3c:ae:12:89:e9:ea:c1:85:7c:27:3d:2a:13:3a:76:6f:25:83:
         99:e8:5d:fd:4e:d6:ed:48:24:b1:f6:0c:2d:f3:87:c1:9d:73:
         fa:22:d3:26:0c:f6:78:49:7a:a0:63:4e:fc:eb:ce:e2:ae:5b:
         0b:bf:94:58:30:fd:43:ce:d1:1e:80:6f:27:f2:a5:67:5d:5b:
         7b:32:8e:70:5b:a9:02:c5:de:e7:5d:41:c6:e5:35:1d:03:e9:
         20:84:5f:d6:ff:af:cd:3e:c6:59:15:b8:dc:5a:6a:77:c2:2d:
         4e:71:e6:ba:8d:0c:e2:5a:3e:c9:03:3b:98:85:a6:ba:d5:17:
         10:32:a4:a0:bf:99:81:e7:20:15:62:83:7b:83:b9:34:d1:63:
         d7:f8:1c:66:8d:00:af:8b:d1:f3:4d:de:2a:f9:c2:00:f8:b5:
         39:20:a7:52:25:bc:12:5d:06:cf:9b:f1:6c:7a:8d:c5:b1:f3:
         18:37:9d:1c:95:31:c8:3c:3b:b7:2b:74:fc:69:10:eb:58:86:
         2c:8d:ba:6d:2b:e1:36:19:ec:55:1b:fa:92:ad:b2:a2:df:8f:
         eb:f1:54:22:8f:d0:9a:a2:91:be:05:e6:94:10:61:f2:1e:1c:
         2e:e3:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----