Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3830303a3a2f33372d3337203d3e20323132363138.roa
File:                     323630323a666136653a3830303a3a2f33372d3337203d3e20323132363138.roa (raw, json)
Hash identifier:          9JaXolkF5oP9H/gRFHn2sxmUjxtMR44wfN8D9uqncdk=
Subject key identifier:   47:0A:1C:58:D8:79:0E:FC:01:2C:CE:BC:8F:49:6C:DD:F5:56:11:30
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       4027557E5A2646F36BC36406BE68A06C358BF678
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3830303a3a2f33372d3337203d3e20323132363138.roa
Signing time:             Mon 16 Oct 2023 06:20:26 +0000
ROA not before:           Mon 16 Oct 2023 06:15:26 +0000
ROA not after:            Mon 14 Oct 2024 06:20:26 +0000
asID:                     212618
IP address blocks:        2602:fa6e:800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:27:55:7e:5a:26:46:f3:6b:c3:64:06:be:68:a0:6c:35:8b:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Oct 16 06:15:26 2023 GMT
            Not After : Oct 14 06:20:26 2024 GMT
        Subject: CN=470A1C58D8790EFC012CCEBC8F496CDDF5561130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:2b:da:ad:0d:a1:d4:d9:25:0e:72:80:6b:
                    57:a5:31:31:8f:78:f9:ec:ad:ab:5c:83:9e:25:d3:
                    f6:21:8d:d5:dd:bf:8e:e2:50:e1:43:c5:3e:64:92:
                    a6:b9:27:c1:47:7b:68:d3:a4:73:54:6c:5e:41:99:
                    2a:f3:b0:4e:8c:1f:43:ff:bf:11:93:1c:fe:b6:c8:
                    97:52:a2:09:39:20:81:e9:b1:ae:d3:25:b7:98:70:
                    0d:51:a3:1c:57:a8:5c:95:d6:e8:2b:2d:8b:6b:a3:
                    23:d2:df:8e:45:f1:31:f9:b6:67:9b:a7:25:d1:8c:
                    18:36:ba:46:7f:a0:9d:cb:d2:e4:f8:6d:9b:cd:2f:
                    02:a5:1c:64:46:52:e3:9d:63:f0:56:a0:15:85:58:
                    a6:ec:a0:53:03:a7:9c:a7:e0:ec:7e:bf:38:bd:80:
                    14:9e:7d:ae:3e:0e:b2:3a:df:f5:f0:c3:74:f4:e2:
                    b6:e3:c7:dc:28:84:67:0f:43:27:cd:a6:b2:30:4a:
                    e6:de:c1:79:fa:ed:fe:54:85:36:6e:ac:7d:96:69:
                    38:38:29:62:1f:e8:a0:22:3e:6c:e1:ef:15:45:7d:
                    c4:5e:cd:3f:4f:83:cd:21:51:dc:f3:9a:65:ad:91:
                    ba:e6:86:e1:da:03:c2:38:0a:f8:fb:ab:ea:f3:53:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:1C:58:D8:79:0E:FC:01:2C:CE:BC:8F:49:6C:DD:F5:56:11:30
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3830303a3a2f33372d3337203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:c6:6d:47:62:b6:d6:22:58:87:7a:b4:0b:82:e5:ac:4b:
         1c:76:11:3c:ad:b9:1d:f9:56:9d:1c:7b:56:5d:22:62:59:3d:
         ae:6c:31:12:3d:67:ea:24:af:12:4b:2d:f2:d2:a4:30:76:10:
         a1:87:fc:5c:81:92:6c:04:7e:1c:a1:79:eb:0e:5e:a3:f8:24:
         bf:d4:85:6a:6a:97:78:79:35:50:2d:6b:4a:f0:4b:5b:91:18:
         2b:a2:da:04:4f:20:3a:34:43:f7:c1:7d:ac:57:79:b6:90:aa:
         28:bd:32:fb:fb:5d:84:33:87:52:36:91:c1:91:e2:56:e5:c8:
         c6:2f:59:4b:4e:d4:ee:ae:1f:7c:2c:f2:89:71:47:a4:88:b5:
         7a:7a:f5:bb:be:bf:01:a9:e3:fb:89:2f:d9:88:0e:00:a5:02:
         ae:ff:70:1c:c5:98:73:86:b4:b8:c1:0a:1d:60:f5:93:d6:f7:
         a8:11:7f:9f:ac:65:21:75:c9:92:7e:7f:aa:6b:ad:cd:6d:0a:
         93:be:8a:46:bf:8c:ec:03:e0:0a:5d:ac:9b:f8:8f:2e:32:bf:
         33:c9:fe:12:95:b0:c3:ab:d3:13:41:50:2c:35:af:cc:c4:a0:
         d7:4e:b6:42:b5:00:c9:d7:10:ee:d4:08:04:73:b5:3e:c1:02:
         a3:1b:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----