Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          N1qs6BtkD81bpic4t4cL9DR216wBAdRp52gAdv8wwbY=
Subject key identifier:   5B:AF:A5:69:19:F6:04:D1:F4:72:BA:83:AC:89:68:C0:B7:92:04:73
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       68158EE2E41A0994BC4445C0A5136F062CAD8E29
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 11 Dec 2022 12:26:19 +0000
ROA not before:           Sun 11 Dec 2022 12:21:19 +0000
ROA not after:            Sun 10 Dec 2023 12:26:19 +0000
asID:                     52210
IP address blocks:        2602:fcd3:1b5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:15:8e:e2:e4:1a:09:94:bc:44:45:c0:a5:13:6f:06:2c:ad:8e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 11 12:21:19 2022 GMT
            Not After : Dec 10 12:26:19 2023 GMT
        Subject: CN=5BAFA56919F604D1F472BA83AC8968C0B7920473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:1c:cb:de:48:4a:ce:00:1b:a6:83:3d:54:
                    fd:4e:44:96:cf:ce:e0:6e:78:4a:95:f4:14:b5:1e:
                    97:d7:b8:0c:2e:f6:11:47:2c:14:f9:64:d5:0b:cd:
                    3c:16:31:56:ec:e4:30:68:0c:bc:0d:85:d7:3b:cc:
                    10:f6:8a:ea:4e:ca:4b:f0:05:b0:68:85:45:70:be:
                    80:6d:e7:75:46:40:c5:d3:28:d4:d4:b4:93:f2:ea:
                    43:e7:eb:2d:19:23:82:16:92:81:5a:b0:56:66:bd:
                    41:73:e4:d3:c8:a2:39:e7:37:87:ae:54:bb:f0:8c:
                    8b:33:69:0f:90:c9:53:99:3d:94:d4:3b:da:96:7c:
                    d1:61:83:55:ff:99:11:a4:ef:57:65:19:fe:96:c7:
                    63:83:8d:44:a8:01:fe:c9:0e:10:2d:58:d5:15:28:
                    00:82:60:0b:21:d8:c0:d7:76:37:37:2d:f0:5b:ef:
                    17:e7:3f:41:db:36:54:9b:a5:de:d9:1d:8e:64:db:
                    85:68:fd:63:c5:64:ae:27:d8:db:0f:bc:cc:b0:38:
                    40:f1:12:3f:40:d3:e8:44:5e:f8:60:f6:57:08:17:
                    a2:07:4f:a4:13:96:7a:e9:a3:06:97:53:93:76:46:
                    b7:37:ef:b2:e3:f6:51:50:98:f2:2b:79:65:4c:35:
                    27:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:A5:69:19:F6:04:D1:F4:72:BA:83:AC:89:68:C0:B7:92:04:73
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3162353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:9f:c1:13:63:0e:c6:07:c8:2a:4b:c2:a0:22:58:ff:6c:
         d0:f5:42:58:a3:c1:e3:13:12:96:28:89:20:a5:9d:08:a4:82:
         b1:e6:7d:d0:27:7d:23:01:2b:52:10:47:13:31:c5:e8:07:07:
         c2:7d:90:1d:83:e7:22:91:c7:3f:64:5f:07:4c:81:ce:6d:00:
         a6:ae:6f:b7:f6:e7:63:6d:ee:28:c0:e2:33:a8:2f:6b:21:24:
         22:6f:ab:1e:5b:64:f5:71:28:b9:9a:23:de:2d:0d:76:48:98:
         f1:e6:02:07:19:c8:2c:3a:78:3b:fe:8b:8f:d8:d6:44:7c:f8:
         d6:8b:97:de:52:f6:f9:c7:19:18:0a:99:b3:93:d8:f6:50:cb:
         9d:12:aa:7b:42:22:5a:3d:d9:65:75:3f:b6:30:3d:24:e1:a8:
         95:7c:d8:2b:cf:e8:e9:d3:45:39:cd:04:5b:20:61:bc:b6:1a:
         1e:ae:99:51:1f:cb:39:5b:79:de:e9:72:9c:64:14:37:f4:09:
         35:ef:c9:95:df:1e:28:65:4a:6d:bf:49:09:1c:8a:23:9c:1b:
         21:3d:aa:bf:62:b8:9f:b1:99:a7:ca:43:3d:40:17:e7:4f:8e:
         78:ef:12:80:ac:4c:44:a5:63:1d:f0:a3:ae:c5:53:cb:c4:22:
         0d:31:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----