Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a313a3a2f34382d3438203d3e20323132363138.roa
File:                     323630323a666136653a313a3a2f34382d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          /Le/XB31djTvWVNc9GZ7hNv151QKvCersSi8/KG79qA=
Subject key identifier:   8F:EA:3A:40:98:39:C2:D1:2B:95:10:C8:5B:04:B8:A9:E1:39:D1:80
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       3B15B8D66CE3E5190309F0328C783C2F48E12D16
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a313a3a2f34382d3438203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:58:59 +0000
ROA not before:           Sun 09 Jul 2023 09:53:59 +0000
ROA not after:            Sun 07 Jul 2024 09:58:59 +0000
asID:                     212618
IP address blocks:        2602:fa6e:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:15:b8:d6:6c:e3:e5:19:03:09:f0:32:8c:78:3c:2f:48:e1:2d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:53:59 2023 GMT
            Not After : Jul  7 09:58:59 2024 GMT
        Subject: CN=8FEA3A409839C2D12B9510C85B04B8A9E139D180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:db:ee:88:bb:f7:5b:53:de:7d:4d:3d:54:
                    9f:b8:d5:6a:52:3d:78:c1:7e:6d:b7:a9:1f:cc:2b:
                    77:ca:7f:93:54:05:5d:41:bb:b7:56:41:f6:7e:3f:
                    43:4b:9e:2e:b0:e8:82:38:c4:68:cd:c2:b0:0f:6d:
                    c9:6c:37:3f:34:fa:2e:a4:6a:ec:1c:41:74:a2:9c:
                    76:94:7b:59:5e:a6:9c:8b:bd:a0:08:51:56:08:43:
                    ec:c4:5b:d3:b2:92:59:88:9f:50:13:e5:c3:de:0c:
                    73:38:fc:3a:5b:8e:1c:e6:06:7d:3e:0a:a0:e0:bb:
                    de:92:30:63:10:c4:85:35:9c:e1:ac:71:2e:5b:b7:
                    99:cb:c3:00:7d:33:52:56:75:9c:53:41:04:e9:61:
                    3a:84:58:8d:57:15:8f:a6:79:2e:da:da:ef:6e:27:
                    bf:ea:79:45:58:10:01:a8:a6:63:67:c5:51:fa:89:
                    62:b9:48:4f:8f:03:0d:7c:9e:e3:f1:ac:27:be:43:
                    40:d3:71:bd:f9:fa:0b:8f:fa:aa:0d:11:ef:e2:f2:
                    a3:b7:d2:3d:94:8d:f0:67:84:99:45:3c:03:f5:c7:
                    5a:65:32:3f:f4:7d:13:b6:ed:a4:75:27:9d:27:5b:
                    0b:52:2c:bf:78:67:e5:02:11:ba:70:cd:94:d6:04:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EA:3A:40:98:39:C2:D1:2B:95:10:C8:5B:04:B8:A9:E1:39:D1:80
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a313a3a2f34382d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:07:03:89:39:be:57:de:11:3f:a9:ce:dd:31:e8:3c:7a:
         18:e0:0f:b9:d7:8a:57:4f:a9:70:07:6a:88:c1:b4:69:ad:04:
         c4:e4:9f:82:b4:89:0c:d5:b2:d3:bd:34:76:ca:55:e7:21:ab:
         c4:ec:8b:dc:aa:47:dc:02:b4:95:ba:54:ce:c5:06:71:5c:55:
         1c:bb:f2:7f:26:4f:90:6d:2e:7a:af:f4:68:4e:cd:3e:f7:78:
         8a:5d:45:80:98:d5:b2:b5:b1:61:16:f5:02:19:98:fe:16:20:
         28:86:a8:1e:8b:ea:78:35:16:8d:16:d7:dc:84:ec:bd:ec:3f:
         bb:db:db:8a:88:20:ce:5a:8b:d0:1f:98:04:86:46:d8:ef:02:
         e8:f4:e1:4e:95:b1:a8:bf:35:05:04:c6:88:13:5f:e8:ad:cd:
         24:05:e7:03:a3:0d:1d:cd:1b:50:c4:47:3a:d3:f8:3c:a9:dd:
         a2:4a:f1:53:2a:92:76:f5:c9:e6:95:ad:f6:b1:d3:e8:69:0c:
         07:10:de:b5:27:9f:ef:97:b6:0c:ff:7c:1b:37:fa:d6:da:bb:
         66:b6:b6:14:ee:cf:95:13:23:c7:9d:b2:ee:28:c4:7e:2e:54:
         7d:cd:8c:93:41:af:43:78:4b:ab:97:92:b8:94:76:d4:6f:0e:
         b9:97:41:f1
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUOxW41mzj5RkDCfAyjHg8L0jhLRYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTczMDM3NGVjZTU2ZDRlMDE0NmYwYWIw
ZmY4YTI5MTAxYzlmMjEzNjgwHhcNMjMwNzA5MDk1MzU5WhcNMjQwNzA3MDk1ODU5
WjAzMTEwLwYDVQQDEyg4RkVBM0E0MDk4MzlDMkQxMkI5NTEwQzg1QjA0QjhBOUUx
MzlEMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Inb7oi791tT
3n1NPVSfuNVqUj14wX5tt6kfzCt3yn+TVAVdQbu3VkH2fj9DS54usOiCOMRozcKw
D23JbDc/NPoupGrsHEF0opx2lHtZXqaci72gCFFWCEPsxFvTspJZiJ9QE+XD3gxz
OPw6W44c5gZ9Pgqg4LvekjBjEMSFNZzhrHEuW7eZy8MAfTNSVnWcU0EE6WE6hFiN
VxWPpnku2trvbie/6nlFWBABqKZjZ8VR+oliuUhPjwMNfJ7j8awnvkNA03G9+foL
j/qqDRHv4vKjt9I9lI3wZ4SZRTwD9cdaZTI/9H0Ttu2kdSedJ1sLUiy/eGflAhG6
cM2U1gSuXQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFI/qOkCYOcLRK5UQyFsEuKnh
OdGAMB8GA1UdIwQYMBaAFBMGWLPsSG14FhGlfr2npPJEfj5wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5MmI2OWM3NjkwMjkzLzAv
MTMwNjU4QjNFQzQ4NkQ3ODE2MTFBNTdFQkRBN0E0RjI0NDdFM0U3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzgyOWZiODcyLTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC80Mzcy
OTk5NzE1NzMwMzc0ZWNlNTZkNGUwMTQ2ZjBhYjBmZjhhMjkxMDFjOWYyMTM2OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5MjdiMWQ4MDE4OTJi
NjljNzY5MDI5My8wLzMyMzYzMDMyM2E2NjYxMzY2NTNhMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMjMxMzIzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpuAAEwDQYJKoZI
hvcNAQELBQADggEBAEsHBwOJOb5X3hE/qc7dMeg8ehjgD7nXildPqXAHaojBtGmt
BMTkn4K0iQzVstO9NHbKVechq8Tsi9yqR9wCtJW6VM7FBnFcVRy78n8mT5BtLnqv
9GhOzT73eIpdRYCY1bK1sWEW9QIZmP4WICiGqB6L6ng1Fo0W19yE7L3sP7vb24qI
IM5ai9AfmASGRtjvAuj04U6Vsai/NQUExogTX+itzSQF5wOjDR3NG1DERzrT+Dyp
3aJK8VMqknb1yeaVrfax0+hpDAcQ3rUnn++Xtgz/fBs3+tbau2a2thTuz5UTI8ed
su4oxH4uVH3NjJNBr0N4S6uXkriUdtRvDrmXQfE=
-----END CERTIFICATE-----