Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a34303a3a2f34322d3432203d3e20323132363138.roa
File:                     323630323a666136653a34303a3a2f34322d3432203d3e20323132363138.roa (raw, json)
Hash identifier:          t2hDp9npBC56vugsFqcAFqd5HnXX6zU6CL7M8nK2i1o=
Subject key identifier:   EE:02:F8:EF:E3:F5:6C:45:28:7E:46:D4:1F:95:1E:F1:37:2E:93:3A
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       5F0A54B2C7A7752943117D3C510B177B760380A9
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a34303a3a2f34322d3432203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:52:59 +0000
ROA not before:           Sun 09 Jul 2023 09:47:59 +0000
ROA not after:            Sun 07 Jul 2024 09:52:59 +0000
asID:                     212618
IP address blocks:        2602:fa6e:40::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0a:54:b2:c7:a7:75:29:43:11:7d:3c:51:0b:17:7b:76:03:80:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:47:59 2023 GMT
            Not After : Jul  7 09:52:59 2024 GMT
        Subject: CN=EE02F8EFE3F56C45287E46D41F951EF1372E933A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:37:d6:57:3b:d9:49:58:4d:e7:de:e5:f1:
                    8c:91:5a:dd:47:cb:1f:9b:9f:52:e0:14:48:de:bd:
                    4c:f9:a5:12:51:bc:72:9c:a4:58:00:cf:c3:7d:ea:
                    38:2b:64:53:16:06:a9:e5:b8:f3:59:d6:dc:22:a7:
                    03:f2:03:84:8c:21:2a:d3:68:1c:a5:3e:c4:8c:e6:
                    4f:f9:99:9c:3b:dd:8e:ab:d6:6e:ee:d0:9c:ca:c5:
                    17:23:08:e6:e4:d4:f4:50:2b:88:73:cd:03:fb:47:
                    f9:21:5b:d3:de:d4:50:99:3a:65:a4:96:e5:e4:3e:
                    2c:fa:4e:b8:2e:95:ff:3e:ae:f9:e9:ee:92:7d:6e:
                    95:17:25:69:2f:7a:28:91:77:d3:d0:d7:f5:5b:cc:
                    67:1b:90:44:bb:6a:cf:3a:44:c8:ed:bc:c4:ed:dc:
                    26:5f:d3:fe:df:77:20:94:ec:36:1c:0f:a9:4d:a4:
                    66:f0:3e:b9:04:48:c3:93:0c:f8:6b:1b:76:f6:25:
                    95:68:98:4a:b9:2e:b7:13:c3:ea:76:a1:ef:be:77:
                    96:f9:35:29:6f:2b:df:35:5b:93:27:26:d8:a7:98:
                    ad:5b:89:46:d9:dd:48:bf:b9:59:8a:e0:6d:51:2d:
                    10:3f:83:1b:e4:35:79:c2:c4:b7:df:d7:b2:5c:de:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:F8:EF:E3:F5:6C:45:28:7E:46:D4:1F:95:1E:F1:37:2E:93:3A
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a34303a3a2f34322d3432203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:5f:9a:b2:6d:35:e7:66:2f:69:d3:38:5f:c7:8c:12:df:
         74:61:62:b0:97:bd:af:bf:3e:e0:14:01:c0:ee:e0:7d:b0:48:
         81:0d:a6:29:c6:71:f5:4d:ea:05:77:1c:2e:17:74:a7:14:a2:
         e5:17:f1:63:d9:6f:78:0d:6c:7e:47:27:98:4a:5e:62:3f:7f:
         70:d1:08:f2:c8:04:e5:e4:19:3b:00:44:8c:64:1e:d5:be:9a:
         92:cb:4d:9f:75:c0:fa:f2:8e:3e:48:d8:14:c7:ed:7d:e3:ab:
         94:8b:ee:50:0a:22:1f:5c:55:20:93:79:d7:31:7b:1d:36:8d:
         50:78:9b:ff:1c:11:09:57:e0:69:82:46:2c:bf:3e:e0:ca:47:
         8c:a2:23:87:8f:d7:f6:5c:e7:e3:4f:c2:b6:4c:68:e1:fc:31:
         4e:94:b4:91:4a:48:34:61:2f:ec:cb:78:09:f9:e3:a2:35:16:
         a3:54:e6:87:68:34:da:c5:01:12:e9:ca:97:c1:02:55:40:d1:
         77:aa:83:7b:9a:92:71:f1:88:60:d8:19:d9:50:4f:48:9c:fd:
         c6:25:25:0e:34:4d:a6:c8:7d:97:5a:ed:fc:66:a6:92:50:dc:
         52:6b:25:cf:c1:1a:6f:30:d6:e6:cd:fc:d2:e1:fa:bc:a8:f4:
         17:f7:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----