Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3438203d3e20313938353835.roa
File:                     323630323a666136653a3230303a3a2f34342d3438203d3e20313938353835.roa (raw, json)
Hash identifier:          g2kffuM0nvKy/ZdZjI6CcohKXG/F20Iy31EJfhJf/Ts=
Subject key identifier:   EC:3B:A2:4D:13:DD:86:CC:0C:82:85:2C:95:64:70:25:4D:CB:E6:F1
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       40AD396D85C25D707D1381D5259101E98B9FD0C2
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3438203d3e20313938353835.roa
Signing time:             Fri 03 Nov 2023 23:17:51 +0000
ROA not before:           Fri 03 Nov 2023 23:12:51 +0000
ROA not after:            Fri 01 Nov 2024 23:17:51 +0000
asID:                     198585
IP address blocks:        2602:fa6e:200::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ad:39:6d:85:c2:5d:70:7d:13:81:d5:25:91:01:e9:8b:9f:d0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Nov  3 23:12:51 2023 GMT
            Not After : Nov  1 23:17:51 2024 GMT
        Subject: CN=EC3BA24D13DD86CC0C82852C956470254DCBE6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:d7:c5:c3:6d:c3:c9:c5:86:a3:c9:56:d1:
                    9b:11:9a:a0:1f:39:9c:72:83:0e:a5:fd:9d:ce:5b:
                    07:15:66:b4:e9:4a:87:e4:8d:10:f9:de:59:6d:9a:
                    c5:dd:0b:d4:bc:04:26:8c:41:14:3f:1d:c7:76:42:
                    48:01:df:b6:cc:ae:12:0a:45:86:dc:9e:46:1f:cf:
                    fe:10:86:af:fb:c3:5d:4d:2b:2e:82:40:8d:43:b2:
                    43:1d:71:53:94:c6:fc:80:de:0d:d1:bc:f0:36:1c:
                    a2:27:a9:2e:55:50:76:52:67:44:c5:9c:23:97:26:
                    4b:77:af:c9:08:03:a6:4a:cb:5f:29:0a:dc:88:8e:
                    e8:9f:f7:83:dc:42:4d:e2:4c:ea:dd:a4:f9:e7:e6:
                    90:c3:3e:33:8c:5f:c3:70:ca:39:f1:a6:75:e6:1c:
                    f5:c6:d1:97:bd:3f:5d:af:e4:45:d6:b7:50:7a:a4:
                    eb:05:01:11:d0:b0:2f:c4:c4:e5:97:af:16:29:49:
                    e7:66:46:47:88:53:c2:45:06:39:24:57:cb:83:12:
                    73:5b:6c:ec:4d:2b:06:14:7b:30:79:04:80:6e:69:
                    e6:ca:ec:7a:e9:dd:b0:20:ed:f0:90:04:aa:9b:9c:
                    db:58:28:ac:8b:31:58:e9:ed:cf:37:c5:8d:93:f4:
                    88:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:A2:4D:13:DD:86:CC:0C:82:85:2C:95:64:70:25:4D:CB:E6:F1
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3438203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:b3:03:9d:3c:f6:0f:b7:17:5f:21:fc:c7:3b:17:e5:d9:
         7d:f6:19:cd:2e:40:21:f3:44:d9:a5:a4:d8:9e:d4:97:52:44:
         77:6d:73:65:c4:95:b2:e7:c7:a1:5a:55:d9:9e:4b:70:d0:58:
         cc:98:5e:07:58:04:cc:e5:c9:f9:da:73:ec:34:78:26:05:97:
         8c:c2:b8:91:dc:a3:fb:0b:82:d1:3a:c6:b0:a2:18:58:5d:5a:
         67:83:bc:09:5e:75:0e:57:28:7d:2f:26:15:f0:24:0d:5c:95:
         c8:8d:38:db:56:72:be:7a:52:56:95:4e:cf:c1:99:87:b9:e8:
         eb:44:03:01:c0:dc:5b:7e:22:87:f2:ef:01:c0:23:e2:35:50:
         fe:67:30:64:e1:ff:9a:be:34:65:55:45:f7:b7:1d:c2:26:da:
         29:aa:4b:59:de:e1:5b:53:0c:33:39:13:f0:1f:63:b0:4b:a4:
         f0:2b:4e:8c:17:3d:f6:8b:d7:62:98:4e:72:37:18:45:5f:45:
         c9:8e:fa:b8:94:d3:cf:29:cd:60:cd:83:bb:e0:b5:9b:15:d5:
         68:9b:39:3a:d1:3e:ac:82:98:f5:62:c4:5a:4a:5d:0c:59:e1:
         fe:37:0a:24:37:f5:81:fb:97:c3:1a:d4:cd:20:02:0b:dc:fe:
         55:e9:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----