Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f33392d3339203d3e20323132363138.roa
File:                     323630323a666136653a3230303a3a2f33392d3339203d3e20323132363138.roa (raw, json)
Hash identifier:          EEbUmY6NpIrK2MMh4Z2wRbjJkxGsut7xXEZiZkJEK9w=
Subject key identifier:   01:1B:1C:02:41:2A:28:A5:26:73:2D:2A:D8:14:40:90:8E:BD:1F:C4
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       4D74E4AAB070C150826C51C41052A9DF4A348B1E
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f33392d3339203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:51:14 +0000
ROA not before:           Sun 09 Jul 2023 09:46:14 +0000
ROA not after:            Sun 07 Jul 2024 09:51:14 +0000
asID:                     212618
IP address blocks:        2602:fa6e:200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:74:e4:aa:b0:70:c1:50:82:6c:51:c4:10:52:a9:df:4a:34:8b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:46:14 2023 GMT
            Not After : Jul  7 09:51:14 2024 GMT
        Subject: CN=011B1C02412A28A526732D2AD81440908EBD1FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:55:91:05:0a:8e:eb:a2:a8:23:26:04:4b:
                    0f:3e:33:1b:7c:e2:09:a6:e1:da:eb:f7:92:95:e5:
                    ed:aa:6f:1b:ba:c6:78:b8:66:f4:58:53:8f:1e:83:
                    a6:7c:b6:b8:f8:da:dd:4b:a0:74:c4:96:b5:d1:aa:
                    ae:23:fe:3d:06:e3:75:31:fd:8a:b6:b3:ac:ce:22:
                    3b:76:8a:e1:8c:3b:54:e7:09:df:96:62:d9:03:79:
                    fd:b7:9a:d0:7d:4e:2a:36:1d:52:bf:04:9e:8f:4a:
                    35:e5:6d:2a:49:af:f6:31:c0:24:54:dc:8b:a1:cf:
                    5b:c4:5f:1b:ec:ad:35:d2:28:6a:bd:2b:47:56:a9:
                    c0:d8:80:a4:1d:12:08:d0:f3:30:4e:51:7b:a7:1b:
                    60:d1:13:c6:1a:9b:ab:b9:8b:eb:f9:9f:2b:94:75:
                    8d:55:56:ec:e6:85:b1:18:8b:aa:25:38:cf:2c:77:
                    d2:be:ab:23:b3:ef:b8:2d:c8:76:ae:8c:93:41:10:
                    56:a9:52:6c:32:99:ad:c9:a5:c7:53:62:33:0c:4d:
                    6c:22:2d:e9:d1:53:6b:0d:ba:d5:09:f7:59:6c:7b:
                    88:c1:8d:c8:29:8c:54:7a:1d:2a:00:f6:0b:33:29:
                    e8:4d:ba:5a:16:bb:77:7c:0a:1b:0a:55:e9:01:38:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:1C:02:41:2A:28:A5:26:73:2D:2A:D8:14:40:90:8E:BD:1F:C4
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f33392d3339203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:5d:bb:38:d6:cc:19:f3:35:16:ba:bf:0c:af:6c:e2:0b:
         60:9e:d9:e4:bb:7b:d2:39:3c:7d:26:0a:d6:88:fb:b2:d3:b3:
         c9:f0:77:5a:c4:9c:5d:3e:a1:e5:29:1a:00:8a:5e:0a:1c:2a:
         75:09:f6:b9:66:c5:d4:83:df:97:f0:69:d4:cf:5d:3d:2d:28:
         41:cf:da:31:51:75:90:76:c7:84:e1:91:a7:fb:1f:e7:07:ed:
         71:b7:91:2b:b2:c0:35:e4:02:1a:20:d9:bd:af:6b:1d:2f:85:
         d9:8c:1c:0d:0f:7e:24:63:18:00:3f:31:06:44:5b:42:b9:0c:
         1b:c0:38:e1:0a:43:9f:9e:96:85:c4:84:f8:bf:75:68:1a:27:
         eb:22:42:68:35:a5:04:ea:fa:41:d5:ef:57:2b:0c:ea:a4:6e:
         e4:0c:17:77:fa:38:f5:da:82:33:3e:1a:11:ff:d2:c3:de:99:
         a4:ee:56:e8:79:e3:9c:c9:79:aa:50:e1:1a:37:b1:3f:25:8e:
         e1:32:d8:df:9e:a7:71:90:ad:73:3c:f9:4f:39:e7:4e:47:00:
         80:45:b9:b5:92:9c:04:2c:5a:57:31:c6:d3:a5:ae:0d:31:4c:
         48:f8:55:4c:d6:a8:1b:fb:77:b7:d0:6b:d3:b5:5c:f9:3d:ce:
         37:38:12:f8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTXTkqrBwwVCCbFHEEFKp30o0ix4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTczMDM3NGVjZTU2ZDRlMDE0NmYwYWIw
ZmY4YTI5MTAxYzlmMjEzNjgwHhcNMjMwNzA5MDk0NjE0WhcNMjQwNzA3MDk1MTE0
WjAzMTEwLwYDVQQDEygwMTFCMUMwMjQxMkEyOEE1MjY3MzJEMkFEODE0NDA5MDhF
QkQxRkM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F9VkQUKjuui
qCMmBEsPPjMbfOIJpuHa6/eSleXtqm8busZ4uGb0WFOPHoOmfLa4+NrdS6B0xJa1
0aquI/49BuN1Mf2KtrOsziI7dorhjDtU5wnflmLZA3n9t5rQfU4qNh1SvwSej0o1
5W0qSa/2McAkVNyLoc9bxF8b7K010ihqvStHVqnA2ICkHRII0PMwTlF7pxtg0RPG
GpuruYvr+Z8rlHWNVVbs5oWxGIuqJTjPLHfSvqsjs++4Lch2royTQRBWqVJsMpmt
yaXHU2IzDE1sIi3p0VNrDbrVCfdZbHuIwY3IKYxUeh0qAPYLMynoTbpaFrt3fAob
ClXpATiqeQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFAEbHAJBKiilJnMtKtgUQJCO
vR/EMB8GA1UdIwQYMBaAFBMGWLPsSG14FhGlfr2npPJEfj5wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5MmI2OWM3NjkwMjkzLzAv
MTMwNjU4QjNFQzQ4NkQ3ODE2MTFBNTdFQkRBN0E0RjI0NDdFM0U3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzgyOWZiODcyLTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC80Mzcy
OTk5NzE1NzMwMzc0ZWNlNTZkNGUwMTQ2ZjBhYjBmZjhhMjkxMDFjOWYyMTM2OC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5MjdiMWQ4MDE4OTJi
NjljNzY5MDI5My8wLzMyMzYzMDMyM2E2NjYxMzY2NTNhMzIzMDMwM2EzYTJmMzMz
OTJkMzMzOTIwM2QzZTIwMzIzMTMyMzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgL6bgIwDQYJ
KoZIhvcNAQELBQADggEBAFOLXbs41swZ8zUWur8Mr2ziC2Ce2eS7e9I5PH0mCtaI
+7LTs8nwd1rEnF0+oeUpGgCKXgocKnUJ9rlmxdSD35fwadTPXT0tKEHP2jFRdZB2
x4Thkaf7H+cH7XG3kSuywDXkAhog2b2vax0vhdmMHA0PfiRjGAA/MQZEW0K5DBvA
OOEKQ5+eloXEhPi/dWgaJ+siQmg1pQTq+kHV71crDOqkbuQMF3f6OPXagjM+GhH/
0sPemaTuVuh545zJeapQ4Ro3sT8ljuEy2N+ep3GQrXM8+U85505HAIBFubWSnAQs
WlcxxtOlrg0xTEj4VUzWqBv7d7fQa9O1XPk9zjc4Evg=
-----END CERTIFICATE-----