Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a31303a3a2f34342d3434203d3e20323132363138.roa
File:                     323630323a666136653a31303a3a2f34342d3434203d3e20323132363138.roa (raw, json)
Hash identifier:          P3ImzDXICC2tqq2Z8CxKcjZeHSJHpzPL7QT3d8aaeDQ=
Subject key identifier:   03:AC:F0:A4:3F:C0:99:E1:55:F9:5E:69:EE:CB:0D:D3:11:2B:DD:80
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       76CD6EDBDE4445351F1221C3C40981E810BA337B
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a31303a3a2f34342d3434203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:55:07 +0000
ROA not before:           Sun 09 Jul 2023 09:50:07 +0000
ROA not after:            Sun 07 Jul 2024 09:55:07 +0000
asID:                     212618
IP address blocks:        2602:fa6e:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:cd:6e:db:de:44:45:35:1f:12:21:c3:c4:09:81:e8:10:ba:33:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:50:07 2023 GMT
            Not After : Jul  7 09:55:07 2024 GMT
        Subject: CN=03ACF0A43FC099E155F95E69EECB0DD3112BDD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:8b:a6:b6:67:53:b3:e3:4c:af:08:77:31:
                    7b:8a:77:b4:67:c2:21:b4:a4:4d:28:f7:ff:4d:63:
                    a7:4d:82:3f:03:d3:c8:dd:8d:ff:40:2d:2d:f0:7d:
                    00:b7:1c:57:d2:17:a0:f7:29:ad:e7:ba:ba:db:f6:
                    6f:33:94:1a:11:2d:22:54:32:76:30:6c:7c:71:96:
                    8f:80:40:89:d8:af:57:92:45:98:f7:b0:be:5f:8e:
                    24:05:21:45:d8:dd:80:ee:ce:13:72:e8:46:39:b1:
                    8c:ee:2e:59:d0:d8:b9:cf:ca:c7:a7:e7:04:73:af:
                    14:23:51:85:91:cf:da:c4:ad:0a:e5:1f:0a:63:05:
                    bc:38:c9:d0:32:96:31:a7:a0:50:61:9d:aa:08:c4:
                    3f:c8:78:e3:37:69:e8:ae:fc:cf:43:a5:5c:ae:53:
                    5b:97:5c:d4:3b:12:d3:b4:f5:55:18:77:10:73:91:
                    05:63:0d:bd:42:cd:a4:8e:a2:d3:ff:af:af:74:41:
                    f8:b1:9b:8f:aa:13:24:93:fd:c7:ca:28:c1:7b:38:
                    2f:ea:46:b5:46:5f:56:b7:64:84:5c:a3:ec:b6:b3:
                    0b:4f:99:8a:3a:ea:b4:3d:84:a4:cc:00:33:5a:19:
                    99:88:b1:55:e1:fe:5d:3e:32:0f:67:51:f7:08:50:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:F0:A4:3F:C0:99:E1:55:F9:5E:69:EE:CB:0D:D3:11:2B:DD:80
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a31303a3a2f34342d3434203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:48:29:b3:32:0c:f6:d5:01:d9:a2:b4:44:64:84:f2:2f:74:
         91:a1:3e:cc:ef:05:40:86:76:a3:64:55:9a:79:fe:8e:f6:70:
         31:72:d4:24:24:42:97:9d:1d:11:bc:06:c3:68:8f:69:1a:d6:
         fc:7f:c7:80:2a:18:fb:f0:85:49:97:84:e4:56:fb:64:b3:11:
         5d:05:09:aa:0b:4d:a4:53:f1:e1:8d:29:ed:d8:ef:18:b7:83:
         db:f3:f1:68:dd:32:fb:eb:e7:93:1a:6d:7b:d6:81:e9:b3:ce:
         73:d3:fe:7d:ad:6f:fd:c3:f8:b0:d0:4c:3b:c7:10:cf:91:87:
         a6:c0:80:73:8e:8c:e7:50:98:2f:3f:a9:98:a5:af:9a:ad:c1:
         19:cd:c7:bd:49:99:ef:a5:ff:ca:02:2a:fd:b4:80:27:c1:f8:
         3f:66:ba:dd:9f:e5:59:29:71:f0:24:dc:14:f4:cb:15:9f:18:
         d5:27:8a:c1:bc:c6:45:0d:65:de:7e:89:9a:e2:0c:27:21:9b:
         c4:52:a9:39:4c:d5:5f:20:a2:b1:b5:df:0f:14:d6:c9:98:b7:
         ae:d0:65:27:58:bf:5d:c4:16:bb:a2:c9:56:ca:c5:2a:87:6f:
         26:19:b0:91:09:e4:69:43:13:d3:2f:f0:18:4c:52:5a:29:56:
         c4:d5:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----