Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          m9YdLcGEYLt+Kw8YwGLU2YnIIRuYDnMVKprNMj4eXbs=
Subject key identifier:   78:3F:09:19:41:09:DC:97:03:72:20:57:6A:2C:E0:1D:AE:39:D9:63
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       7727705A728A5FA7D1D868E5C52A503D5CC2B535
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa
Signing time:             Fri 09 Dec 2022 16:07:25 +0000
ROA not before:           Fri 09 Dec 2022 16:02:25 +0000
ROA not after:            Fri 08 Dec 2023 16:07:25 +0000
asID:                     52210
IP address blocks:        2602:fcd3:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:70:5a:72:8a:5f:a7:d1:d8:68:e5:c5:2a:50:3d:5c:c2:b5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:25 2022 GMT
            Not After : Dec  8 16:07:25 2023 GMT
        Subject: CN=783F09194109DC97037220576A2CE01DAE39D963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:26:df:25:1e:43:77:19:92:35:3c:3e:02:
                    fa:da:0d:b0:11:fc:62:e6:fb:a1:39:7d:c2:01:39:
                    09:a2:be:e1:88:dd:50:ce:03:eb:6e:35:95:b4:bf:
                    33:33:d2:e0:ce:92:06:15:84:21:e5:84:ca:6a:ee:
                    9e:b4:d1:49:68:70:fc:08:a6:d6:6e:82:3b:97:c1:
                    fe:d1:a3:f0:b6:e1:a8:af:ff:31:96:fb:dc:5d:c0:
                    0f:2c:6c:91:a1:c3:03:a1:b8:c4:f1:4d:fb:4e:7f:
                    4b:67:4f:39:5a:f2:a6:0f:45:c7:1b:74:4f:7f:fd:
                    a9:8d:94:47:2e:5f:cf:07:1c:de:e3:2a:b8:f2:58:
                    7f:1f:70:30:3e:ce:16:c4:88:28:8d:48:2c:4d:9e:
                    3e:c0:0d:6e:06:ae:43:70:a5:06:0d:27:c9:ff:dd:
                    ec:ae:81:2d:5b:e4:cc:57:12:dd:ad:82:de:be:fd:
                    29:8d:1a:ff:af:c1:31:9e:db:54:1b:71:25:b1:d0:
                    78:a7:c0:d3:a4:ec:3e:89:2c:8a:b4:2e:ab:51:a2:
                    c9:3e:1d:31:24:00:18:44:32:c0:ab:fd:23:1a:93:
                    20:3b:7c:0f:c1:49:59:b4:fe:e7:d9:57:98:be:5e:
                    66:e7:fe:0f:31:98:32:62:13:7c:c1:59:a8:b6:c3:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3F:09:19:41:09:DC:97:03:72:20:57:6A:2C:E0:1D:AE:39:D9:63
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:83:a4:51:9d:b3:8c:f2:f6:82:53:c7:64:b6:0b:1d:7a:74:
         13:f9:57:61:76:ea:d0:22:15:b4:16:ba:2d:65:ff:05:cc:2f:
         f9:04:15:70:50:0f:41:f6:f7:ff:a2:50:c9:cd:fc:a8:38:21:
         d1:71:5d:1a:93:f2:d4:a3:1c:23:a3:24:da:cc:e5:8a:61:02:
         26:bd:aa:d1:28:27:73:23:af:32:f3:14:a9:47:6f:f1:f8:d8:
         ea:c8:b8:33:cf:38:a4:da:0e:5c:df:d7:2c:07:27:28:7f:44:
         b1:a3:b0:cc:0c:bb:9d:af:b3:43:96:4e:5d:de:bf:7f:1c:03:
         31:9f:e1:b4:3b:70:6c:b5:52:16:3b:19:6e:34:47:26:e9:2f:
         e5:a3:cc:3a:5e:e7:15:a6:e7:9b:b1:4b:f0:12:50:93:9e:fd:
         4b:a7:61:e3:c9:b1:77:8e:19:74:93:eb:d8:2f:fc:6b:9f:b5:
         4d:82:d7:b5:2c:58:84:d9:07:16:77:24:95:18:a3:e0:ec:61:
         1c:53:b2:2d:c8:84:67:94:c0:28:a3:9c:ac:dd:2e:24:79:63:
         d6:38:22:f6:44:2e:41:77:a0:49:47:69:31:94:4f:7a:26:e7:
         8e:27:b5:cc:9e:d7:9f:c6:ca:41:1e:d6:a9:40:29:04:e4:eb:
         11:fe:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----