Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3430303a3a2f33382d3338203d3e20323132363138.roa
File:                     323630323a666136653a3430303a3a2f33382d3338203d3e20323132363138.roa (raw, json)
Hash identifier:          Dh5rl0ShPMKKbslrTpTprtTwnrqAgQtb6HPlA7DTYV8=
Subject key identifier:   1A:BB:6C:55:0A:79:60:D1:9B:D1:6A:9D:BD:69:EE:B3:9B:3D:8D:54
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       276AEEDCC9B73CC557FA4CD964A5EED27CD60AA6
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3430303a3a2f33382d3338203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:49:40 +0000
ROA not before:           Sun 09 Jul 2023 09:44:40 +0000
ROA not after:            Sun 07 Jul 2024 09:49:40 +0000
asID:                     212618
IP address blocks:        2602:fa6e:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6a:ee:dc:c9:b7:3c:c5:57:fa:4c:d9:64:a5:ee:d2:7c:d6:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:44:40 2023 GMT
            Not After : Jul  7 09:49:40 2024 GMT
        Subject: CN=1ABB6C550A7960D19BD16A9DBD69EEB39B3D8D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:cb:ab:b5:b2:74:5e:4e:89:74:da:be:9c:
                    e9:5b:2b:89:33:de:2f:89:1f:c5:c0:f0:e5:5c:08:
                    12:a5:f3:4a:ce:7f:25:79:2f:70:3d:f7:bd:55:39:
                    15:51:83:e7:1d:38:93:d8:e6:9d:e6:52:03:89:2a:
                    c0:bf:46:40:13:a1:11:f2:f0:66:66:be:11:bf:97:
                    83:67:5a:c7:85:35:60:76:46:d3:f1:8d:89:b2:c4:
                    b4:a1:62:95:a8:78:39:4c:53:1d:55:8d:fb:5a:d6:
                    83:98:38:29:8f:7d:cb:f1:82:5b:04:25:01:14:53:
                    d5:63:b0:76:4e:cf:69:76:b5:ff:4b:a2:38:b1:3f:
                    d5:a8:d3:00:dc:f9:f4:d2:5a:3d:0d:26:48:49:bf:
                    79:7b:7b:50:da:c8:c5:90:7e:b9:7d:bf:7d:7b:32:
                    c1:c7:da:b8:6f:90:aa:e6:6a:9a:0b:72:13:70:17:
                    b4:19:de:82:b3:f6:94:6c:b7:27:db:07:78:ff:d3:
                    78:0c:f3:44:01:14:66:94:40:85:6a:5b:6b:71:5a:
                    30:f6:3b:99:9d:70:1d:cb:1d:cf:81:7e:2f:6b:f1:
                    93:99:84:b8:2f:4d:e2:8f:e0:ab:ea:75:52:94:92:
                    8b:ca:ab:79:65:17:96:82:0f:a5:56:11:ba:1c:ec:
                    80:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BB:6C:55:0A:79:60:D1:9B:D1:6A:9D:BD:69:EE:B3:9B:3D:8D:54
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3430303a3a2f33382d3338203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:b0:0a:17:ef:bf:e4:0d:60:7c:1c:34:3e:bc:35:0c:0a:
         8c:53:a0:7b:d3:92:93:93:53:17:62:4b:8d:27:7b:ee:89:46:
         7b:1c:55:6f:87:15:68:4c:48:fb:ee:14:d6:82:58:60:b2:21:
         1f:32:bb:d6:cf:ce:c8:b9:a2:ad:cd:3f:8e:aa:57:00:f7:0d:
         b7:ae:b8:7d:a0:d8:8d:bf:5a:a5:1b:33:90:33:ee:f3:41:58:
         05:15:de:a5:4d:4f:d9:f2:16:ab:2f:6e:92:70:8e:d8:0b:65:
         c0:df:15:6e:4d:5b:b1:3e:d8:16:b2:56:ae:8b:ab:ed:73:4a:
         32:a9:0a:db:c9:e0:97:fe:1f:8e:7a:86:27:5a:62:d1:13:0f:
         68:d6:ff:a2:ff:78:be:5b:f7:15:a2:9e:67:2a:5f:4a:6d:24:
         63:ab:2d:d6:ca:a0:21:ee:bf:26:36:4f:76:8d:17:34:3d:c9:
         10:e6:fb:9a:de:7a:1b:6e:67:38:46:3e:c0:0b:48:10:5e:54:
         40:e1:e0:61:ee:b6:3c:c9:26:26:06:95:70:34:de:71:9a:91:
         75:54:59:6c:a7:03:93:58:d6:c2:a4:4e:3a:a7:df:ec:25:b7:
         d9:16:88:04:44:f2:32:36:f8:6b:44:77:09:7f:92:6d:e5:93:
         b6:54:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----