Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a333a3a2f34382d3438203d3e203135333533.roa
File:                     323630323a666136653a333a3a2f34382d3438203d3e203135333533.roa (raw, json)
Hash identifier:          gbH7EdydubyQ5jvaP13LXtVsfw7poTlTpemutrIzSvg=
Subject key identifier:   64:09:E2:84:A0:54:0F:59:EE:A5:29:71:DC:A4:AE:A6:B8:AD:46:24
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       68B21410F85FCD051D2A56E1E457BFBE558AE24A
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a333a3a2f34382d3438203d3e203135333533.roa
Signing time:             Fri 20 Oct 2023 22:51:34 +0000
ROA not before:           Fri 20 Oct 2023 22:46:34 +0000
ROA not after:            Fri 18 Oct 2024 22:51:34 +0000
asID:                     15353
IP address blocks:        2602:fa6e:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b2:14:10:f8:5f:cd:05:1d:2a:56:e1:e4:57:bf:be:55:8a:e2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Oct 20 22:46:34 2023 GMT
            Not After : Oct 18 22:51:34 2024 GMT
        Subject: CN=6409E284A0540F59EEA52971DCA4AEA6B8AD4624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:a4:69:c6:59:84:0a:c7:0c:e9:39:e7:3d:
                    f5:08:d2:38:36:5c:03:f8:37:c1:93:00:bd:6b:bf:
                    7a:ff:23:f2:0b:1b:9c:ba:57:f6:d5:fc:48:67:08:
                    39:0f:6e:12:a5:eb:dc:b3:47:3a:c6:e7:57:93:40:
                    68:01:bb:26:5a:0c:f6:b3:5f:9d:a6:76:e5:83:d3:
                    2f:70:57:47:f0:9a:34:21:50:38:07:9b:c3:79:9c:
                    e4:66:82:38:aa:17:dd:14:91:e2:64:34:8c:df:a1:
                    97:f6:28:b1:18:da:01:65:25:eb:44:91:4f:75:e3:
                    05:61:8d:17:5a:1a:9c:1a:60:38:2b:30:d6:3c:ad:
                    e8:5c:89:ab:d2:93:f3:6c:b7:47:d5:a2:be:bf:6a:
                    de:8b:ef:7d:c2:5a:8c:ea:07:ea:79:59:15:ee:00:
                    26:79:67:af:d2:c1:06:ce:4c:f1:85:18:19:32:af:
                    89:02:5f:dc:a3:39:84:c8:46:d9:e0:8d:d8:b1:88:
                    9c:ee:60:a0:ab:d6:4a:7e:ea:4b:98:19:ac:15:ee:
                    86:99:e6:18:1c:59:fe:e3:0b:b7:06:d5:f1:02:5f:
                    f7:4a:de:53:c0:b4:62:20:f6:d8:f3:30:6d:41:fc:
                    dc:f0:d0:ca:29:e6:57:09:b1:48:22:a2:db:dc:a8:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:E2:84:A0:54:0F:59:EE:A5:29:71:DC:A4:AE:A6:B8:AD:46:24
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a333a3a2f34382d3438203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:d0:3d:03:b2:d0:76:d2:ed:f7:e9:46:28:66:8b:53:31:1c:
         f7:ed:f4:5f:46:2d:8f:5f:98:fd:a6:39:6b:9d:a8:00:16:3f:
         94:9b:77:ae:d8:0e:e0:1d:d0:cd:56:10:b7:0b:16:92:d9:50:
         5a:73:6e:70:ad:1e:68:3a:f4:f7:e5:18:60:7d:c2:b8:89:4a:
         b1:a0:dc:e5:22:a7:d5:e2:b9:3b:96:e7:15:62:10:ab:97:fd:
         0b:56:c3:1d:be:8e:b2:c4:d5:a7:49:70:47:b0:57:da:59:f8:
         7e:e4:29:4b:56:d1:ca:b7:28:99:69:9b:bf:db:2e:c3:88:17:
         ab:59:98:05:3b:ea:fe:23:04:71:6e:6b:ce:51:6f:e1:c2:9d:
         ba:a6:a0:56:eb:09:af:03:01:64:30:c5:73:31:9f:eb:f1:04:
         78:d0:0b:6f:5d:ac:a2:85:af:c5:d1:4b:fa:65:21:22:89:61:
         5e:e1:8c:b1:8e:e4:db:bb:7d:64:c3:43:7c:35:70:fd:52:5b:
         47:d0:a3:cc:58:cf:82:87:52:c5:ab:0a:2e:00:f7:00:1c:a1:
         cc:92:e8:d6:c2:86:e3:e7:84:de:35:bc:05:7f:92:df:bf:b9:
         a7:6b:c9:a3:9f:11:0a:90:73:f4:a8:bf:b5:bd:5c:5c:97:79:
         d4:6b:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----