Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3336203d3e2030.roa
File:                     323630323a666364333a3a2f33362d3336203d3e2030.roa (raw, json)
Hash identifier:          +18F6CwYUe2welcHc2jtUmoMCX0XwUCJm/JAD6T3HrY=
Subject key identifier:   C4:E3:54:B1:AB:C2:84:11:6D:13:76:7A:C2:06:04:86:2E:3C:9F:D2
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       13F46D4C87609BAC28159FDE9A34B9BC9B99913C
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3336203d3e2030.roa
Signing time:             Mon 06 Feb 2023 08:23:53 +0000
ROA not before:           Mon 06 Feb 2023 08:18:53 +0000
ROA not after:            Mon 05 Feb 2024 08:23:53 +0000
asID:                     0
IP address blocks:        2602:fcd3::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:6d:4c:87:60:9b:ac:28:15:9f:de:9a:34:b9:bc:9b:99:91:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb  6 08:18:53 2023 GMT
            Not After : Feb  5 08:23:53 2024 GMT
        Subject: CN=C4E354B1ABC284116D13767AC20604862E3C9FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:34:46:73:6f:19:e0:77:1b:5c:77:09:02:
                    65:e7:db:86:d3:d5:e9:29:27:16:05:32:63:a9:c4:
                    af:3f:d6:cc:33:96:f5:66:e5:4a:3e:61:38:f0:cf:
                    ba:3a:72:7d:3e:71:8d:73:36:55:12:a9:e1:2c:f5:
                    00:6d:b7:62:cf:1d:5e:c0:5e:86:9c:30:66:3f:37:
                    42:32:1f:3d:78:5c:1f:f7:0a:57:9e:c7:ef:49:ef:
                    4c:ab:f9:af:f1:5d:f5:14:9f:45:ea:68:d5:96:51:
                    a5:55:e5:fd:ce:3e:a7:ee:39:7e:ec:ce:66:ed:a6:
                    0b:55:b3:94:2b:7e:d5:46:8e:c7:8b:eb:07:e0:9c:
                    aa:d1:16:1f:8d:4c:58:0b:9f:2c:68:9a:95:de:21:
                    2f:a3:d1:b3:f2:ab:c2:e5:e4:17:35:24:10:e7:53:
                    02:c2:83:3e:ad:c0:ec:bc:de:be:13:06:8a:21:0d:
                    ff:07:bc:7f:2e:8b:95:ce:2d:c4:b1:e4:09:86:e1:
                    da:c1:96:e2:9a:d9:9d:f5:fe:95:3d:66:82:82:d0:
                    22:41:e9:de:13:57:9c:a3:48:a8:ae:22:b3:6e:d3:
                    00:fe:64:0a:ea:32:ea:b0:53:44:d1:9a:f0:37:a8:
                    78:0b:33:04:80:9a:4d:b7:99:84:3b:85:e6:69:1a:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E3:54:B1:AB:C2:84:11:6D:13:76:7A:C2:06:04:86:2E:3C:9F:D2
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3a2f33362d3336203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:a9:98:bc:df:af:dc:3f:37:11:a0:ca:e1:ae:f1:7b:3e:
         f8:2e:75:f8:bc:36:fe:72:ab:cf:ba:46:fe:e8:45:b4:20:f6:
         d4:bc:c2:18:db:41:fa:fa:c0:e9:04:2d:32:55:cf:ad:fe:e9:
         98:d4:73:be:b7:ee:89:4c:23:60:ed:7e:62:35:85:bb:be:76:
         41:c0:ce:86:8e:ea:82:e0:e6:b3:9b:46:a7:cf:31:34:45:cb:
         91:d4:12:48:f4:8e:1a:4e:6e:ce:d9:31:2c:fb:f9:7f:68:e2:
         5f:34:7f:df:b8:80:fb:23:b3:be:61:fb:96:9b:b5:d6:6c:82:
         be:c2:53:b0:2d:f5:0e:2d:33:9e:ee:53:e5:a2:d2:92:f6:0a:
         47:42:83:38:67:7e:ed:e0:5a:f4:02:d2:ee:87:ca:6e:31:18:
         01:48:33:68:61:ad:f7:11:d9:8e:ce:0a:20:b0:09:01:e9:34:
         50:32:d7:4f:2b:33:ed:74:9f:88:24:05:ee:e4:ab:b9:fb:7e:
         b8:26:62:8c:41:ed:70:13:3a:c5:b6:f3:c7:58:cf:9e:88:73:
         e2:03:5a:c2:c2:ba:05:3c:e3:ce:12:37:56:07:a4:b9:3a:33:
         5c:f0:6d:23:5d:85:78:ec:b4:38:e4:ea:85:5a:4b:17:e5:d6:
         65:81:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----