Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a32303a3a2f34332d3433203d3e20323132363138.roa
File:                     323630323a666136653a32303a3a2f34332d3433203d3e20323132363138.roa (raw, json)
Hash identifier:          r5R2c/5aX1xNZf81DRw6YKkGzRF7kFwkp8E9Wc6RuVI=
Subject key identifier:   0B:81:25:98:19:58:42:74:CB:9B:5A:E6:6A:08:79:5F:F1:AE:19:78
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       3095E5192DF4F2AD23778797310824A8B13B4E65
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a32303a3a2f34332d3433203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:54:02 +0000
ROA not before:           Sun 09 Jul 2023 09:49:02 +0000
ROA not after:            Sun 07 Jul 2024 09:54:02 +0000
asID:                     212618
IP address blocks:        2602:fa6e:20::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:95:e5:19:2d:f4:f2:ad:23:77:87:97:31:08:24:a8:b1:3b:4e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:49:02 2023 GMT
            Not After : Jul  7 09:54:02 2024 GMT
        Subject: CN=0B81259819584274CB9B5AE66A08795FF1AE1978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:07:bc:13:d1:71:e7:27:3b:4b:0c:47:5f:
                    3e:f7:5e:17:03:2f:8a:7b:44:40:8a:fd:a7:1b:94:
                    aa:24:1d:24:8c:d6:97:66:10:9c:34:e0:ff:c6:77:
                    75:c9:cc:d8:9e:5e:03:8e:30:46:e5:fa:37:0c:a6:
                    6e:c6:fc:e4:5e:50:32:02:25:b4:03:d1:ef:e0:29:
                    6e:9c:4f:a3:7d:1f:04:1a:96:3e:4e:a2:44:0a:4f:
                    c3:22:30:bf:17:06:5a:62:04:c0:a9:1e:0a:49:8e:
                    64:0e:80:be:01:87:de:3e:fc:7e:97:5e:b2:ac:b7:
                    50:b4:44:8a:45:de:d2:af:d6:1b:d2:07:5f:e3:2c:
                    de:94:ef:e3:e9:9a:a6:cc:ee:6a:a2:fe:d8:f9:6c:
                    51:65:61:6f:d7:b7:61:37:c7:e2:e8:26:4e:c1:cf:
                    6e:30:0f:a1:ca:d4:0d:c6:89:60:15:f8:95:91:aa:
                    c1:7c:a2:f6:e8:2d:a5:fe:1b:ec:5c:b2:3d:68:1e:
                    5e:e0:ce:39:52:d2:0d:f5:a1:49:be:cc:81:46:32:
                    bd:59:23:f7:71:cd:80:02:fe:31:0d:1d:74:21:7e:
                    bf:10:3f:ac:90:70:dc:9c:52:02:5e:ff:2d:97:7c:
                    0f:09:a9:b5:1f:91:89:92:eb:4c:fb:d0:d7:4f:d7:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:25:98:19:58:42:74:CB:9B:5A:E6:6A:08:79:5F:F1:AE:19:78
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a32303a3a2f34332d3433203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:20::/43

    Signature Algorithm: sha256WithRSAEncryption
         58:68:9d:88:34:54:79:3f:ca:ee:a9:18:c3:1b:a3:b7:67:b1:
         fe:ff:27:cb:a7:e3:86:ce:7f:54:e0:7c:ad:42:3e:89:7d:36:
         d5:12:c4:51:1d:3d:0a:98:3d:5a:11:42:90:31:3a:fe:85:b3:
         22:b1:a5:b6:d3:41:d8:08:32:12:01:92:b7:a0:e5:34:61:c0:
         1d:97:c5:5b:99:49:8f:cf:6b:2e:3a:37:91:d6:ca:1d:d9:e0:
         64:d7:95:91:59:0e:d1:99:90:30:76:aa:95:2a:99:ba:8d:bc:
         c7:ab:7b:ca:85:11:20:7a:f8:09:2c:b9:75:78:5f:5c:f3:32:
         a0:01:1d:e7:37:1b:ae:28:bd:f1:02:ec:0d:22:33:87:d4:a1:
         0a:e2:2c:40:cc:d3:22:fe:57:8c:c3:74:40:bd:47:31:65:d2:
         fe:72:dd:9e:ff:1b:8d:7a:50:79:43:45:71:34:61:c3:c9:28:
         6f:ff:e1:a7:8a:be:d5:b1:1b:7f:18:26:18:cd:2d:2d:83:51:
         a0:99:72:11:2c:0d:71:3c:f5:a4:5b:a5:f7:f1:09:d6:e2:5f:
         fa:ae:c6:62:9f:4a:17:09:6c:cd:f3:6b:b3:21:26:a5:c8:b2:
         ea:5e:6c:c9:ba:d4:6a:fb:3f:cf:0f:30:73:0b:74:53:c8:4c:
         d5:79:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----