Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          RForb5dGRw2B0uP6KLpNQmP7ZVE9d/V7Sl0yNHtIiv8=
Subject key identifier:   1B:EA:68:28:02:7E:18:1E:63:F3:80:BB:3B:D4:BC:16:05:3B:05:08
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       7A57F134D73BF3C211259568056F823B9F359850
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa
Signing time:             Fri 10 Feb 2023 04:26:39 +0000
ROA not before:           Fri 10 Feb 2023 04:21:39 +0000
ROA not after:            Fri 09 Feb 2024 04:26:39 +0000
asID:                     52210
IP address blocks:        2602:fcd3:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:f1:34:d7:3b:f3:c2:11:25:95:68:05:6f:82:3b:9f:35:98:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb 10 04:21:39 2023 GMT
            Not After : Feb  9 04:26:39 2024 GMT
        Subject: CN=1BEA6828027E181E63F380BB3BD4BC16053B0508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:40:66:87:b4:de:1e:93:ec:b1:16:1e:d4:
                    8c:80:fd:aa:2b:00:81:16:54:7e:a1:17:f2:d7:ff:
                    c0:7e:33:83:f3:ea:c2:09:9c:cf:96:49:b1:83:ea:
                    59:d8:9e:e1:ea:9e:be:a2:06:63:6f:22:72:48:7a:
                    ea:ea:cd:4a:40:fd:bb:53:b0:ef:13:a5:52:38:fa:
                    b1:40:78:db:a8:6c:0a:b3:f3:24:45:e1:2f:91:29:
                    7c:c7:83:3b:92:cd:b0:7c:bc:f4:dc:33:0e:41:54:
                    a4:95:4b:88:fb:7c:d5:b4:a4:1b:12:2d:d1:72:9b:
                    0f:20:37:39:05:2e:f0:5f:f3:02:8c:2d:1c:db:b0:
                    6a:05:be:8d:e6:62:38:64:39:2a:c4:74:1c:80:fb:
                    a6:7f:b7:a5:7c:3f:b5:63:86:19:f1:0c:f2:8e:ff:
                    8f:f2:e2:5e:84:5b:58:7b:d0:8e:b2:1c:c2:d9:cb:
                    c7:c7:f2:c1:70:ad:a9:6e:cf:43:6b:5f:31:19:60:
                    53:9b:6e:9f:b6:b2:73:22:63:92:c6:10:ed:a1:92:
                    24:ca:b8:e0:33:82:b9:f3:95:e1:78:40:8a:a3:10:
                    d0:97:7f:07:e9:83:76:cc:a6:2b:27:1e:88:6e:bc:
                    87:b8:46:47:f7:6d:ad:e0:24:b4:fd:e1:e9:1c:00:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EA:68:28:02:7E:18:1E:63:F3:80:BB:3B:D4:BC:16:05:3B:05:08
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a353a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:02:ea:cb:2b:62:6e:a8:74:5b:4f:1c:70:f0:91:63:44:5b:
         30:2c:5e:63:ef:47:c4:aa:24:bd:9a:12:d9:b5:4f:c3:87:51:
         4e:8e:3c:86:f0:57:1f:9a:2e:6c:3b:e1:a8:9e:3e:41:0f:7d:
         53:7a:66:b3:c9:7b:db:2a:d2:ea:3b:d3:30:7d:d7:e6:f9:36:
         61:97:b5:ef:cc:e9:b3:73:73:a9:f4:be:8c:53:6f:8b:2f:76:
         97:aa:9c:16:b6:a2:73:62:98:4c:26:ad:38:c2:24:8a:6e:5a:
         21:45:40:e9:8d:be:0e:9a:54:5c:e3:dc:3e:62:4e:e4:2c:d7:
         1f:45:ab:4b:70:c6:32:9e:87:34:dc:0a:59:ee:e5:4c:43:9d:
         21:f7:11:c6:b1:09:e9:f1:e6:0a:b5:4d:98:cf:c6:1a:a1:87:
         60:a2:df:72:f5:22:02:1e:4f:70:d4:f7:6f:a6:85:bc:f0:d5:
         e2:e3:48:91:f8:17:19:03:48:41:46:17:b1:ba:81:b2:e4:9b:
         7b:dc:55:e4:78:c3:ce:23:99:87:f3:94:8c:47:ca:97:41:74:
         d8:0c:24:42:2d:99:b1:9b:72:6f:51:b2:da:8a:96:9b:62:6f:
         66:8d:33:43:e0:e6:0a:05:74:9a:87:75:e2:45:06:80:0b:0d:
         7f:18:56:55
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUelfxNNc788IRJZVoBW+CO581mFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjMwMjEwMDQyMTM5WhcNMjQwMjA5MDQyNjM5
WjAzMTEwLwYDVQQDEygxQkVBNjgyODAyN0UxODFFNjNGMzgwQkIzQkQ0QkMxNjA1
M0IwNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZAZoe03h6T
7LEWHtSMgP2qKwCBFlR+oRfy1//AfjOD8+rCCZzPlkmxg+pZ2J7h6p6+ogZjbyJy
SHrq6s1KQP27U7DvE6VSOPqxQHjbqGwKs/MkReEvkSl8x4M7ks2wfLz03DMOQVSk
lUuI+3zVtKQbEi3RcpsPIDc5BS7wX/MCjC0c27BqBb6N5mI4ZDkqxHQcgPumf7el
fD+1Y4YZ8Qzyjv+P8uJehFtYe9COshzC2cvHx/LBcK2pbs9Da18xGWBTm26ftrJz
ImOSxhDtoZIkyrjgM4K585XheECKoxDQl38H6YN2zKYrJx6IbryHuEZH922t4CS0
/eHpHAA2DwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFBvqaCgCfhgeY/OAuzvUvBYF
OwUIMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzYzMDMyM2E2NjYzNjQzMzNhMzUzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTMyMzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL80wAFMA0GCSqGSIb3
DQEBCwUAA4IBAQDPAurLK2JuqHRbTxxw8JFjRFswLF5j70fEqiS9mhLZtU/Dh1FO
jjyG8Fcfmi5sO+Gonj5BD31TemazyXvbKtLqO9Mwfdfm+TZhl7XvzOmzc3Op9L6M
U2+LL3aXqpwWtqJzYphMJq04wiSKblohRUDpjb4OmlRc49w+Yk7kLNcfRatLcMYy
noc03ApZ7uVMQ50h9xHGsQnp8eYKtU2Yz8YaoYdgot9y9SICHk9w1PdvpoW88NXi
40iR+BcZA0hBRhexuoGy5Jt73FXkeMPOI5mH85SMR8qXQXTYDCRCLZmxm3JvUbLa
ipabYm9mjTND4OYKBXSah3XiRQaACw1/GFZV
-----END CERTIFICATE-----