Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a3530303a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          WQeCdKct5MlP9+PeR98tAfQMZHT1H/MCk4AqzaZ+YeI=
Subject key identifier:   3F:09:F1:91:5D:27:FC:40:9B:A7:BC:4D:76:0C:0A:84:FA:34:68:1F
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       468A8BF82AF6150B6E0176E60D2C1ECE1D7C5576
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e203532323130.roa
Signing time:             Thu 15 Dec 2022 18:06:27 +0000
ROA not before:           Thu 15 Dec 2022 18:01:27 +0000
ROA not after:            Thu 14 Dec 2023 18:06:27 +0000
asID:                     52210
IP address blocks:        2602:fcd3:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8a:8b:f8:2a:f6:15:0b:6e:01:76:e6:0d:2c:1e:ce:1d:7c:55:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec 15 18:01:27 2022 GMT
            Not After : Dec 14 18:06:27 2023 GMT
        Subject: CN=3F09F1915D27FC409BA7BC4D760C0A84FA34681F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:12:4c:3b:4e:9d:d6:fa:23:15:08:19:84:
                    7a:1d:6e:f4:9b:e7:49:99:93:5d:b1:33:5d:1c:0e:
                    26:09:6b:0a:dc:c2:29:07:48:19:3f:e4:22:54:74:
                    a7:83:e9:6f:2b:b7:18:ed:a2:ab:98:f2:07:4c:f2:
                    49:b9:2e:fc:5b:3f:90:ac:a9:f4:f3:8b:4f:17:30:
                    8b:40:f2:99:2e:3d:71:3d:55:db:ef:42:8b:90:3d:
                    c7:d3:82:2d:40:a8:1f:55:c0:f6:11:cc:bf:e0:e4:
                    46:a5:c1:a8:2a:3f:ab:1e:71:67:5c:d0:7e:1d:d0:
                    f2:97:92:16:5b:9b:0c:91:80:64:82:ff:35:f7:a1:
                    50:d4:b1:18:28:2b:7d:40:15:e8:2c:e0:57:38:3c:
                    7d:ee:89:a8:b5:af:87:b3:20:d3:b0:fe:e2:13:06:
                    99:1a:8b:7c:8a:ed:5e:ff:6f:52:af:b2:a9:7a:8b:
                    e7:e5:6f:78:34:2f:dd:d7:95:82:c6:b1:ef:28:8f:
                    51:b7:d5:1a:00:7b:dc:0b:3d:0b:56:c0:c2:c8:c8:
                    56:78:ef:0c:6a:52:8d:3f:09:68:42:20:e7:ac:25:
                    cc:81:a4:b8:97:74:61:1f:88:38:28:34:d5:b9:6c:
                    be:5a:87:44:99:5f:dd:a1:f5:e1:5a:78:36:c1:46:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:F1:91:5D:27:FC:40:9B:A7:BC:4D:76:0C:0A:84:FA:34:68:1F
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3530303a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:49:77:08:9c:3c:02:ed:f5:48:e3:4f:b1:d1:21:14:17:42:
         00:04:eb:41:b4:9b:30:d1:85:cf:71:fc:e8:6d:9b:43:e8:c4:
         f0:03:a9:31:6a:95:5c:7e:d1:ce:e7:da:8b:1c:3e:a4:a5:5d:
         18:4e:da:28:8c:60:d6:15:fc:c5:3f:9b:a2:22:58:26:2e:7d:
         fb:06:ed:29:90:98:34:6b:96:f1:de:7a:50:64:67:47:52:d7:
         84:b9:50:67:8d:4a:a5:19:bc:b3:d8:45:b9:b1:0d:e2:4d:82:
         38:3f:50:69:f7:b7:a4:e5:27:ba:da:5b:76:1e:08:3f:7b:1f:
         f2:20:78:3c:a9:39:09:93:e3:82:36:03:93:d3:e2:87:d7:5c:
         74:93:0e:9b:da:fb:1f:dd:42:9c:e3:61:7b:12:6a:51:f4:79:
         39:c3:8f:d4:f9:23:4e:3d:0c:3f:3e:5e:53:3c:0f:5a:c0:b6:
         fe:84:59:72:fd:27:9d:43:c3:30:8d:5a:27:e1:e4:8a:aa:92:
         7e:ad:b0:aa:b7:2c:d1:5e:21:64:ed:35:a4:1c:0f:8d:9b:57:
         cd:aa:47:bc:a4:f8:9e:8a:04:6c:6d:c4:39:72:74:2e:df:45:
         7e:97:ea:5c:69:b0:a0:77:e6:ce:29:6e:58:f7:43:e4:90:b2:
         ef:b2:ab:92
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIURoqL+Cr2FQtuAXbmDSwezh18VXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjIxMjE1MTgwMTI3WhcNMjMxMjE0MTgwNjI3
WjAzMTEwLwYDVQQDEygzRjA5RjE5MTVEMjdGQzQwOUJBN0JDNEQ3NjBDMEE4NEZB
MzQ2ODFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndsSTDtOndb6
IxUIGYR6HW70m+dJmZNdsTNdHA4mCWsK3MIpB0gZP+QiVHSng+lvK7cY7aKrmPIH
TPJJuS78Wz+QrKn084tPFzCLQPKZLj1xPVXb70KLkD3H04ItQKgfVcD2Ecy/4ORG
pcGoKj+rHnFnXNB+HdDyl5IWW5sMkYBkgv8196FQ1LEYKCt9QBXoLOBXODx97omo
ta+HsyDTsP7iEwaZGot8iu1e/29Sr7Kpeovn5W94NC/d15WCxrHvKI9Rt9UaAHvc
Cz0LVsDCyMhWeO8MalKNPwloQiDnrCXMgaS4l3RhH4g4KDTVuWy+WodEmV/dofXh
Wng2wUZd/QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFD8J8ZFdJ/xAm6e8TXYMCoT6
NGgfMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzYzMDMyM2E2NjYzNjQzMzNhMzUzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzUzMjMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/NMFADANBgkq
hkiG9w0BAQsFAAOCAQEAAkl3CJw8Au31SONPsdEhFBdCAATrQbSbMNGFz3H86G2b
Q+jE8AOpMWqVXH7Rzufaixw+pKVdGE7aKIxg1hX8xT+boiJYJi59+wbtKZCYNGuW
8d56UGRnR1LXhLlQZ41KpRm8s9hFubEN4k2COD9Qafe3pOUnutpbdh4IP3sf8iB4
PKk5CZPjgjYDk9Pih9dcdJMOm9r7H91CnONhexJqUfR5OcOP1PkjTj0MPz5eUzwP
WsC2/oRZcv0nnUPDMI1aJ+HkiqqSfq2wqrcs0V4hZO01pBwPjZtXzapHvKT4nooE
bG3EOXJ0Lt9FfpfqXGmwoHfmziluWPdD5JCy77Krkg==
-----END CERTIFICATE-----