Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          QujxUyejxUggXM9TwENwj7kyxoURyP0xhVq31o4dZx8=
Subject key identifier:   FB:06:09:0F:F9:95:BA:17:1B:8F:CB:59:64:DE:5D:A1:E5:BC:E8:16
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       51B0299C2693D68B8F2EBCF39FD0AE4F2BCBC46B
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:08:00 +0000
ROA not before:           Fri 09 Dec 2022 16:03:00 +0000
ROA not after:            Fri 08 Dec 2023 16:08:00 +0000
asID:                     212934
IP address blocks:        2602:fcd3:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b0:29:9c:26:93:d6:8b:8f:2e:bc:f3:9f:d0:ae:4f:2b:cb:c4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:03:00 2022 GMT
            Not After : Dec  8 16:08:00 2023 GMT
        Subject: CN=FB06090FF995BA171B8FCB5964DE5DA1E5BCE816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:c1:c8:99:01:96:be:2f:14:52:a8:a3:8c:
                    a3:0e:9a:0b:34:8b:1f:be:71:08:78:96:0e:22:27:
                    c4:2b:af:f8:ca:f2:26:e2:a8:99:20:23:2d:88:ca:
                    cb:85:9e:9b:50:c0:1c:ae:32:8c:ca:8b:9d:fb:3e:
                    77:f0:28:23:ba:49:c4:3b:ad:59:9e:a9:e0:45:5d:
                    60:60:2b:80:07:1e:cc:12:f8:c5:18:db:9f:bc:fa:
                    f3:f0:49:f2:99:cc:0b:76:53:15:5f:2e:60:33:d7:
                    9e:9f:9b:33:f1:b5:8a:a5:a5:03:e0:b6:67:4d:2b:
                    0d:95:2b:79:1f:21:3b:a2:e2:63:36:55:a1:07:82:
                    0c:1c:1c:56:e5:55:e7:1c:d8:e7:9b:92:5c:e2:2e:
                    29:1f:d5:13:a1:d4:4a:6b:ee:8e:cf:45:3d:a1:17:
                    17:20:06:50:55:95:95:6f:e3:ad:df:c1:bb:5d:74:
                    4c:ff:a9:6e:d1:3a:a6:4c:7b:1f:3f:06:1b:ec:3e:
                    27:00:af:0b:2c:d4:17:be:32:a3:4e:ce:a0:be:19:
                    28:0e:ef:a6:05:0a:56:97:8a:dd:b5:58:fd:06:60:
                    f1:8b:c3:6d:67:c8:9d:9e:f8:46:f7:53:b5:cb:3e:
                    a2:36:ca:4b:72:9e:9d:e3:30:4a:8f:4c:03:59:5a:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:06:09:0F:F9:95:BA:17:1B:8F:CB:59:64:DE:5D:A1:E5:BC:E8:16
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:f6:3d:79:17:bf:1b:bd:0f:6e:30:b0:a6:dd:f5:bf:9a:
         09:94:e4:34:70:8d:bd:a4:fc:a9:a5:92:de:fa:71:a5:06:0b:
         27:61:26:18:e3:a9:d0:f8:ea:e0:dc:8b:e3:e1:47:8e:55:4c:
         4c:25:c8:d8:23:bd:0c:c3:7e:a6:ca:e0:fa:de:ae:0f:29:76:
         57:64:be:a9:e8:9e:a0:86:94:e1:31:a0:14:97:96:82:c1:02:
         17:04:80:88:75:4b:2d:88:19:60:ee:d8:e7:d8:e5:fe:9a:03:
         3d:3f:5d:5d:af:73:e3:0a:82:17:e7:31:10:82:7f:bc:fe:56:
         0e:be:c6:1a:70:63:38:d0:ed:b1:15:c0:bd:b0:77:6d:e3:2d:
         17:56:95:7d:0b:71:44:9f:dc:c6:89:59:47:c9:6a:9a:61:ca:
         82:b7:4f:3d:30:b7:9f:f7:01:d4:9f:66:1e:25:49:ac:91:1d:
         bf:e4:d4:38:2c:72:e5:dd:9e:44:9c:de:a9:33:90:3d:a0:85:
         0b:48:63:1a:93:c3:2e:2b:cc:8a:77:3f:31:37:9e:90:46:27:
         19:09:59:66:3f:54:a5:06:43:39:9b:b9:b0:17:e9:81:11:3c:
         f9:cf:03:f4:c2:cd:b3:5f:0c:24:16:74:bc:2e:30:b2:46:78:
         74:d0:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----