Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          x67v6XFjSOf5TBK7+QUDxzCYHJmMAvOSSGgCi65pRmo=
Subject key identifier:   7F:2C:1E:42:0B:42:21:06:63:CF:5A:CA:1F:EC:A6:0D:71:1B:D9:FE
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       131752F3F29F7E23332ADC73C5E447E7F86A797A
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa
Signing time:             Wed 29 May 2024 09:35:33 +0000
ROA not before:           Wed 29 May 2024 09:30:33 +0000
ROA not after:            Wed 28 May 2025 09:35:33 +0000
asID:                     13213
IP address blocks:        2602:fad4:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:17:52:f3:f2:9f:7e:23:33:2a:dc:73:c5:e4:47:e7:f8:6a:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: May 29 09:30:33 2024 GMT
            Not After : May 28 09:35:33 2025 GMT
        Subject: CN=7F2C1E420B42210663CF5ACA1FECA60D711BD9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:8b:ee:d3:ca:7b:8c:5c:bc:d3:e3:46:04:
                    c7:7b:0f:90:22:d5:42:1d:fe:9f:b2:de:94:62:e4:
                    73:10:87:0f:de:53:d0:61:84:fe:be:bc:52:8e:bd:
                    45:fd:a4:7f:fc:2d:45:dc:c9:74:21:35:21:7f:f8:
                    49:5d:9c:ae:c1:0b:34:21:9c:72:1f:05:8f:e2:e8:
                    e8:86:fb:93:69:5d:80:38:ed:bd:5f:81:35:67:31:
                    3e:3c:43:a9:12:6f:c8:51:c8:c2:f5:7f:ae:95:2c:
                    94:aa:b1:21:37:6a:cc:8b:7e:15:24:51:63:bc:49:
                    56:2b:4f:11:f8:fa:24:2e:d2:5b:25:13:db:5b:0e:
                    86:da:d0:68:18:eb:69:cb:27:a6:37:57:ee:bb:ad:
                    9b:29:49:28:80:61:39:fb:6d:75:e0:64:4b:ea:d0:
                    cf:f6:5a:b9:0d:ca:04:c0:c7:44:72:3a:0f:72:82:
                    69:39:cb:f0:df:fc:8c:34:5e:20:46:d0:cf:5b:4c:
                    f2:27:be:09:7c:ff:ce:58:56:e2:48:b4:6a:ea:4f:
                    64:6d:b8:a3:fa:eb:87:d3:91:8f:4b:27:00:cd:e9:
                    5c:d8:22:5c:e4:5c:0c:ce:c6:fe:9c:79:d4:5d:e9:
                    bd:02:a4:11:12:80:e2:87:3b:15:9b:6c:61:28:c8:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2C:1E:42:0B:42:21:06:63:CF:5A:CA:1F:EC:A6:0D:71:1B:D9:FE
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a313a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:77:af:43:5d:38:75:e5:2a:8a:2c:9b:5b:20:7c:fa:39:73:
         1c:4f:dc:7a:1e:6f:72:7b:ba:6a:31:69:dc:11:ad:95:14:e0:
         fa:15:95:ca:c8:81:61:66:d4:5d:74:27:13:52:de:a0:05:27:
         78:ca:e2:8d:7f:73:75:01:cf:fe:a3:34:80:9b:c3:f8:48:af:
         fb:1f:99:c0:be:1a:55:dd:9c:97:96:db:43:b2:6e:af:a8:35:
         d2:df:22:eb:78:b8:7d:2c:fc:a9:73:e9:53:ea:f5:fe:2f:bf:
         a4:03:fb:9d:5b:c3:9f:15:59:d6:d1:fa:5b:8b:91:f1:8d:a0:
         dc:33:a2:52:d5:55:6b:8f:e2:a6:29:19:ca:7f:7a:48:cc:3b:
         0c:77:2d:23:75:66:14:df:e6:4d:2e:77:2c:9b:ff:fb:a4:51:
         c4:da:78:c5:56:83:3b:ab:23:b7:f7:62:e3:ed:94:c0:96:73:
         d1:3c:77:aa:e2:5c:bb:05:b9:b3:6a:17:5d:80:dc:77:90:0c:
         77:d3:b2:34:30:4b:fe:56:fb:bb:4e:9a:3c:39:6f:97:c5:8d:
         20:9c:78:5c:a0:1e:aa:67:85:28:7e:73:e0:90:ad:4f:2c:b1:
         0c:93:95:81:b6:83:1b:6e:92:0b:a8:f0:3d:4a:46:33:93:32:
         f0:23:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----