Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20313939363839.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20313939363839.roa (raw, json)
Hash identifier:          pURmeCIJnZadN9kNuC1FBbInlGirV6ARTV5T0rtIZgw=
Subject key identifier:   5A:4A:17:AF:D4:97:B0:60:6E:B4:18:4A:C6:00:3C:3F:E5:21:8D:00
Certificate issuer:       /CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
Certificate serial:       0574CD63BAC7AB85535925999699873D681987C3
Authority key identifier: D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20313939363839.roa
Signing time:             Fri 30 Jun 2023 14:12:11 +0000
ROA not before:           Fri 30 Jun 2023 14:07:11 +0000
ROA not after:            Fri 28 Jun 2024 14:12:11 +0000
asID:                     199689
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:74:cd:63:ba:c7:ab:85:53:59:25:99:96:99:87:3d:68:19:87:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b4415611c8f002e34925fb621ecf702bd114726d1
        Validity
            Not Before: Jun 30 14:07:11 2023 GMT
            Not After : Jun 28 14:12:11 2024 GMT
        Subject: CN=5A4A17AFD497B0606EB4184AC6003C3FE5218D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:c7:60:9d:d0:8c:6d:8f:37:f5:14:85:ff:
                    86:91:e0:ec:00:c9:d9:2e:bd:3b:12:18:7b:6b:3e:
                    81:12:31:36:d3:ba:4a:c9:68:ac:2a:e9:cf:7b:87:
                    38:78:d7:c7:2b:28:57:cf:c3:28:82:25:f8:c0:85:
                    de:74:d2:62:47:df:97:46:0b:49:3b:fe:a7:43:9d:
                    20:28:89:3b:e8:de:b6:94:f0:ee:ad:05:6d:14:4c:
                    e4:70:d5:30:49:8b:48:a7:8b:7f:85:ac:fa:f6:c1:
                    c4:66:5f:16:66:48:97:71:c2:81:91:8e:78:06:51:
                    22:5c:b5:58:3b:dc:12:98:e6:18:77:5d:0d:db:a6:
                    25:9e:b4:a2:73:9f:75:ba:1a:90:1c:a9:bf:46:b5:
                    84:78:c8:d3:8b:b1:87:db:41:eb:15:8a:3c:08:1b:
                    e0:a7:fd:fd:62:37:f9:35:63:db:0f:a6:8f:ad:d8:
                    0c:ce:7d:45:1b:f0:c0:fe:29:99:e5:31:b3:b5:43:
                    f3:cc:23:eb:4d:1e:20:c4:cc:70:22:2c:21:d0:bd:
                    b8:f8:b1:3a:8e:48:c0:6c:b3:8f:2e:ce:cb:2c:3b:
                    22:97:b8:bd:bd:03:27:d1:83:0a:fb:17:43:4f:21:
                    0e:d1:cc:86:bb:36:f6:b9:82:1f:89:47:e3:26:ac:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4A:17:AF:D4:97:B0:60:6E:B4:18:4A:C6:00:3C:3F:E5:21:8D:00
            X509v3 Authority Key Identifier:
                keyid:D9:D9:6A:61:9F:9E:E6:CB:9A:CA:C5:38:C7:5D:CD:05:08:3A:5E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D9D96A619F9EE6CB9ACAC538C75DCD05083A5E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b4415611c8f002e34925fb621ecf702bd114726d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20313939363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:9a:85:1c:3c:40:21:91:8f:a6:10:f4:3c:e3:84:c6:9f:
         51:a2:05:62:31:57:1c:af:5a:8d:0a:57:2e:19:4f:a9:66:94:
         f1:26:7f:de:e9:96:9c:6d:3f:4f:81:27:17:b1:05:3f:6d:00:
         bf:f6:8c:d0:0e:0d:a2:4e:0b:e8:84:de:27:89:67:ca:f7:c4:
         d5:83:49:49:2b:aa:3a:5f:77:49:2b:c9:77:ee:c0:20:69:08:
         a1:5b:bd:39:82:35:53:8b:82:25:bc:c4:73:55:83:e7:fc:80:
         da:f0:23:35:27:ad:05:fb:dc:63:01:93:f2:ed:b6:be:61:cc:
         55:7c:66:93:a1:7a:ea:62:35:e1:ae:9d:b0:a1:1a:b3:ae:fd:
         0a:3b:4f:e9:26:fe:e9:9f:ab:40:fa:4d:62:84:8d:16:af:d8:
         57:ce:0b:c6:80:cb:0c:cd:fc:62:ed:83:a6:c4:f6:64:88:03:
         e0:a1:9a:53:21:a5:32:3b:2a:37:13:e2:36:17:b0:e9:53:cc:
         6c:10:69:4f:65:cb:5e:62:dc:7d:c1:d0:d2:b1:66:27:59:ba:
         44:5d:c1:14:e1:d1:37:3b:b1:7e:ec:f3:24:4b:eb:a0:06:0a:
         cc:8e:ed:d9:80:06:ba:da:99:76:2f:85:ed:04:62:0e:61:69:
         49:30:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----