Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          AwNNVjn8u5hLSQEZW8MqS5yZUpehztlq2t9zbNzjwG8=
Subject key identifier:   BF:BE:81:15:5C:BF:7E:AE:D5:CA:C9:0B:07:A6:D4:6C:7F:B6:32:E5
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       686C1B803714722F75E3EEF6DE4E90E9D6E7B6A2
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     50224
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:1b:80:37:14:72:2f:75:e3:ee:f6:de:4e:90:e9:d6:e7:b6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=BFBE81155CBF7EAED5CAC90B07A6D46C7FB632E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:47:58:79:f3:77:3c:bf:92:0f:b2:83:d2:
                    83:2b:ee:24:f7:88:10:ec:44:c8:35:58:53:21:0b:
                    d1:41:f2:4e:91:d9:22:db:c9:cd:df:4a:95:db:95:
                    fe:ea:44:55:93:54:5d:b7:6b:21:50:b8:4f:8c:a1:
                    0e:15:88:d2:53:c6:c8:0f:fc:47:e5:44:f4:da:f2:
                    c1:8d:ef:ef:52:a9:e3:6d:9f:c2:09:11:28:13:85:
                    cb:bf:56:1f:79:c6:8a:97:08:95:b3:27:2a:f5:7f:
                    58:f9:d3:99:2e:c9:84:1b:d7:e0:fe:8b:5f:54:14:
                    31:a6:0b:ad:f0:5c:47:ca:48:ab:d9:82:87:60:79:
                    3f:0f:79:af:49:e0:9b:1b:2c:21:27:da:98:1b:f2:
                    93:6a:99:8e:7d:2f:02:95:3a:1e:50:d9:c5:ae:3c:
                    d1:d3:3b:f7:6a:03:41:5a:3d:1c:d0:c4:61:3d:86:
                    51:cb:dd:5a:f5:62:5f:27:99:97:2b:73:f1:e5:f5:
                    2a:64:1c:bc:20:87:3d:f3:05:03:64:a9:46:eb:c6:
                    9e:fc:5b:6a:1a:71:d3:2d:7d:d7:05:02:e4:55:d9:
                    98:11:34:42:81:36:fa:14:ef:da:c8:49:3b:10:5a:
                    13:7e:29:bb:c5:9a:0b:46:57:90:06:1d:71:97:78:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:81:15:5C:BF:7E:AE:D5:CA:C9:0B:07:A6:D4:6C:7F:B6:32:E5
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:5b:62:76:10:1a:dd:7d:17:d8:21:6e:bb:b8:ea:7a:a8:f3:
         58:42:81:4e:56:05:61:83:5e:cc:e3:11:9a:ce:ac:1a:da:37:
         c8:ea:ea:9c:a0:30:84:44:8c:6d:c8:ce:a0:d3:5a:0a:15:69:
         77:5d:6b:e1:bc:62:6f:03:2e:84:44:51:6b:80:c8:ba:c2:0f:
         39:d9:80:dd:b7:4b:b6:7e:be:63:db:e1:bf:63:73:65:0a:4b:
         2c:10:36:fc:23:08:92:5b:c3:9b:80:0d:c6:78:e8:9d:b8:f2:
         a8:58:ee:6d:10:c5:0c:3f:ed:c2:c0:9b:52:ae:25:70:ac:f3:
         ca:c6:60:d7:56:5f:eb:a2:b0:20:07:3c:45:e7:75:89:92:bd:
         d8:75:c1:37:82:d6:5b:a4:01:5e:27:0b:44:0c:02:64:ea:71:
         e5:99:95:7d:02:75:4c:bb:93:87:04:2f:61:2d:4e:05:71:ca:
         91:68:8e:ff:f3:3c:a1:85:66:c2:52:56:67:4e:14:77:7e:21:
         ff:e6:65:fb:ff:2d:91:54:a0:e6:6a:e8:be:53:65:72:30:b5:
         22:11:1f:ab:b6:37:95:e3:84:ec:e8:6c:3c:79:06:4f:95:c9:
         4e:a5:39:9b:f1:db:49:13:b7:4b:c5:36:dd:89:8e:b9:b2:6d:
         05:99:66:ca
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUaGwbgDcUci914+723k6Q6dbntqIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQwMjI2MTIwMzQ5WhcNMjUwMjI0MTIwODQ5
WjAzMTEwLwYDVQQDEyhCRkJFODExNTVDQkY3RUFFRDVDQUM5MEIwN0E2RDQ2QzdG
QjYzMkU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWZHWHnzdzy/
kg+yg9KDK+4k94gQ7ETINVhTIQvRQfJOkdki28nN30qV25X+6kRVk1Rdt2shULhP
jKEOFYjSU8bID/xH5UT02vLBje/vUqnjbZ/CCREoE4XLv1YfecaKlwiVsycq9X9Y
+dOZLsmEG9fg/otfVBQxpgut8FxHykir2YKHYHk/D3mvSeCbGywhJ9qYG/KTapmO
fS8ClToeUNnFrjzR0zv3agNBWj0c0MRhPYZRy91a9WJfJ5mXK3Px5fUqZBy8IIc9
8wUDZKlG68ae/FtqGnHTLX3XBQLkVdmYETRCgTb6FO/ayEk7EFoTfim7xZoLRleQ
Bh1xl3hxTQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFL++gRVcv36u1crJCwem1Gx/
tjLlMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzAzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvqbAMAwDQYJKoZI
hvcNAQELBQADggEBAM5bYnYQGt19F9ghbru46nqo81hCgU5WBWGDXszjEZrOrBra
N8jq6pygMIREjG3IzqDTWgoVaXdda+G8Ym8DLoREUWuAyLrCDznZgN23S7Z+vmPb
4b9jc2UKSywQNvwjCJJbw5uADcZ46J248qhY7m0QxQw/7cLAm1KuJXCs88rGYNdW
X+uisCAHPEXndYmSvdh1wTeC1lukAV4nC0QMAmTqceWZlX0CdUy7k4cEL2EtTgVx
ypFojv/zPKGFZsJSVmdOFHd+If/mZfv/LZFUoOZq6L5TZXIwtSIRH6u2N5XjhOzo
bDx5Bk+VyU6lOZvx20kTt0vFNt2JjrmybQWZZso=
-----END CERTIFICATE-----