Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a3530303a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          Q3Tz3/5kuZ/8Z+TsJwBUF4wC853/2KAzjkTdma/MJ68=
Subject key identifier:   C7:A8:91:E0:73:0B:A1:5B:A5:F2:DD:B9:7B:F4:C7:64:9A:86:74:0C
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       2835A3B0D126330266CD86D8D1E64C608D0A67
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Thu 15 Dec 2022 18:06:18 +0000
ROA not before:           Thu 15 Dec 2022 18:01:18 +0000
ROA not after:            Thu 14 Dec 2023 18:06:18 +0000
asID:                     212934
IP address blocks:        2602:fcd3:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:35:a3:b0:d1:26:33:02:66:cd:86:d8:d1:e6:4c:60:8d:0a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 15 18:01:18 2022 GMT
            Not After : Dec 14 18:06:18 2023 GMT
        Subject: CN=C7A891E0730BA15BA5F2DDB97BF4C7649A86740C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:fa:ee:fc:eb:ce:69:ad:81:3e:5c:7a:cb:
                    fc:8c:45:77:d1:46:c7:9b:fe:2d:51:72:a2:9a:1f:
                    d6:b8:8b:9d:ae:8e:7e:78:8f:a9:25:27:98:a7:7c:
                    b1:4c:c6:9a:99:25:91:70:e5:0e:17:e7:ec:61:41:
                    71:03:b5:95:94:55:fc:94:05:a2:53:72:e8:f0:7e:
                    78:35:84:68:b6:09:be:5c:87:b4:cf:fb:d8:41:6f:
                    20:8c:06:60:6c:2e:26:9f:66:03:4d:7f:29:8f:9d:
                    59:32:a4:b4:c2:26:5a:4d:a9:d4:4c:34:34:9f:94:
                    8f:83:69:f5:bc:b4:a6:3b:d0:99:94:1d:d5:1b:30:
                    9a:91:e0:34:d4:fa:02:c9:16:98:e1:79:cd:d3:b2:
                    3f:a9:b2:89:2f:65:9d:c5:10:c3:56:8c:9b:10:50:
                    c6:01:c0:22:31:f7:bb:df:e1:98:84:e6:65:89:0c:
                    4c:a0:68:89:64:25:2e:d9:8f:ca:9e:19:44:01:84:
                    a7:60:91:f5:f6:fb:bc:8c:61:d7:78:91:f1:89:87:
                    cc:84:6a:05:66:a8:34:43:f8:7c:3e:39:5f:57:7d:
                    93:e4:19:df:16:62:a6:09:68:10:07:93:30:75:38:
                    b0:c1:00:2a:c6:5a:89:43:16:35:04:46:85:11:52:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:91:E0:73:0B:A1:5B:A5:F2:DD:B9:7B:F4:C7:64:9A:86:74:0C
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:bc:c0:b8:a8:4f:eb:2f:1b:f1:05:e7:8b:9e:af:31:96:
         b0:78:6d:a6:7d:6e:57:ec:54:e2:f8:a3:12:1d:55:74:86:88:
         d1:a9:0a:94:72:44:5f:ba:79:45:7a:62:ab:ef:30:a3:f5:30:
         e8:c0:9f:c8:49:34:3f:29:93:84:98:b5:7c:0c:c0:d3:34:53:
         ad:43:0d:9e:29:8a:32:0f:17:82:6c:44:06:c1:4d:10:6e:b0:
         81:63:e2:2e:bc:1d:11:3f:9f:3c:e5:3e:57:ea:21:fe:ac:ae:
         b7:20:55:25:81:4c:ac:6e:fd:15:5c:42:62:f6:ab:ec:cd:85:
         74:27:83:78:bb:d9:49:83:cf:24:35:89:63:66:35:6d:d8:b4:
         91:ae:6d:b9:d1:2d:a1:29:34:0b:07:37:d9:27:26:19:2d:a2:
         86:bf:01:0c:44:28:f2:78:4e:34:d7:4c:e6:9b:00:29:b2:d9:
         8f:cc:bf:73:7d:31:81:d5:19:07:99:02:78:b1:5b:24:2d:5c:
         93:d0:ff:b4:60:41:7f:5e:6e:02:61:87:59:33:7a:16:fe:77:
         25:c3:7a:e6:78:17:81:2c:63:c1:75:0f:bc:64:dd:46:40:cc:
         99:c0:5d:ea:a4:9c:23:19:fb:0e:ef:84:f9:06:64:32:d6:52:
         33:16:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----