Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a343a3a2f34362d3436203d3e20323132363138.roa
File:                     323630323a666136653a343a3a2f34362d3436203d3e20323132363138.roa (raw, json)
Hash identifier:          H6skg4250SVdq7DcJb7x0HtAjXTPCcW7PnlfM9bCwfE=
Subject key identifier:   DD:BF:73:0B:92:04:B6:F8:ED:F2:9E:15:4F:CF:87:AE:C6:0D:06:0D
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       77E4982770A1B07B83356849DDA9283A36A510A5
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a343a3a2f34362d3436203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:56:58 +0000
ROA not before:           Sun 09 Jul 2023 09:51:58 +0000
ROA not after:            Sun 07 Jul 2024 09:56:58 +0000
asID:                     212618
IP address blocks:        2602:fa6e:4::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e4:98:27:70:a1:b0:7b:83:35:68:49:dd:a9:28:3a:36:a5:10:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:51:58 2023 GMT
            Not After : Jul  7 09:56:58 2024 GMT
        Subject: CN=DDBF730B9204B6F8EDF29E154FCF87AEC60D060D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:73:5f:dd:48:b5:f6:40:ba:43:28:75:60:
                    7c:08:7b:04:70:ab:9d:05:a3:7c:12:fa:37:df:da:
                    ad:94:3f:18:52:f8:2c:5a:4f:b6:51:32:c8:a9:68:
                    40:db:8d:18:d2:85:b5:33:e1:66:38:f4:e7:78:0e:
                    e2:5b:24:e7:3a:04:5d:84:b7:01:84:13:71:fb:6e:
                    57:d1:c2:d9:09:70:14:10:e8:77:78:8c:5f:3a:cc:
                    4b:16:d0:45:31:ae:8c:bc:88:35:73:47:55:95:9a:
                    61:3a:b0:15:92:95:5b:e0:f8:61:30:0d:36:59:f7:
                    75:62:b4:f8:a6:30:7d:f4:66:f5:5b:8d:86:91:6f:
                    07:2d:b1:d7:a4:3c:14:8a:22:13:57:4f:ba:3e:f2:
                    e1:2e:04:80:e7:2a:60:91:09:1f:c2:91:15:c0:ac:
                    bf:63:08:eb:65:63:7e:44:bb:5b:24:fc:a0:31:4a:
                    49:11:b2:f2:7e:81:47:ad:fa:bd:e6:1c:fd:2f:01:
                    11:58:b5:0c:ab:ea:4d:86:ec:6c:79:62:d9:29:09:
                    ce:3b:2f:20:dc:86:f8:e0:bc:b1:17:d3:28:28:83:
                    e0:12:4e:af:b3:f3:f9:75:18:52:e0:da:8e:bc:d4:
                    da:71:61:80:c8:c2:fa:3e:8e:52:0b:af:70:68:22:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BF:73:0B:92:04:B6:F8:ED:F2:9E:15:4F:CF:87:AE:C6:0D:06:0D
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a343a3a2f34362d3436203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:c2:d7:d9:c4:95:c1:28:f6:ef:b9:43:f4:72:bb:0c:91:
         30:04:d5:43:4e:c0:1c:95:9d:25:b6:76:87:7a:c7:f0:31:d5:
         45:d7:1c:83:b8:c1:ae:a9:35:80:91:94:24:86:e3:57:79:90:
         e3:d9:08:42:07:a1:bc:51:2d:c5:66:d2:43:63:3e:ed:60:08:
         ed:dd:b9:1d:c9:40:98:2e:7c:34:a5:1e:82:40:b1:20:67:f2:
         c2:79:e2:f1:b0:c0:ea:51:1e:6d:e7:eb:e1:6e:f0:e3:77:32:
         a1:8c:a2:59:90:58:08:90:0c:30:5f:95:08:9b:25:44:66:34:
         f1:b2:38:84:2b:bc:30:cd:0b:d9:d3:b8:3f:f9:f8:14:f2:30:
         f4:79:8c:e3:1f:ef:d4:4f:6a:c4:02:91:51:12:9e:e3:40:74:
         05:bc:90:88:11:79:ee:f9:61:5c:50:62:bf:bc:36:a4:36:26:
         b0:88:eb:d0:1e:1e:c1:c3:a6:72:08:0a:e1:06:db:7d:c4:4f:
         ca:fb:07:23:f4:8a:62:9c:81:50:85:ee:15:23:28:cc:58:06:
         8c:e6:bc:f3:a3:01:48:89:26:8e:7e:07:61:31:cf:5d:d7:ab:
         02:4c:b3:3d:48:b7:c8:34:51:07:e6:64:be:cc:33:24:82:64:
         10:a1:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----