Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a38303a3a2f34312d3431203d3e20323132363138.roa
File:                     323630323a666136653a38303a3a2f34312d3431203d3e20323132363138.roa (raw, json)
Hash identifier:          Lz9hfXcppOK5OkHU6GaAlQl9Jkl/70FwZQRNY5Sta3I=
Subject key identifier:   D5:5A:81:A9:C0:C3:F9:29:7F:97:55:ED:D6:CC:99:82:9A:49:3C:61
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       6311ED3D502D3D8B7101A97B6ACE4414FFFD1E03
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a38303a3a2f34312d3431203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:46:11 +0000
ROA not before:           Sun 09 Jul 2023 09:41:11 +0000
ROA not after:            Sun 07 Jul 2024 09:46:11 +0000
asID:                     212618
IP address blocks:        2602:fa6e:80::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:11:ed:3d:50:2d:3d:8b:71:01:a9:7b:6a:ce:44:14:ff:fd:1e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:41:11 2023 GMT
            Not After : Jul  7 09:46:11 2024 GMT
        Subject: CN=D55A81A9C0C3F9297F9755EDD6CC99829A493C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:6c:40:ae:d1:9e:0c:86:d0:63:c3:48:29:
                    34:b0:3e:1c:c0:f4:2d:7f:53:c5:7e:d0:32:a7:ff:
                    ef:9f:98:54:e4:f1:0b:56:8a:53:20:33:55:a0:e2:
                    99:7f:c8:6f:44:9a:8a:56:2f:11:10:1a:d0:93:ef:
                    25:d4:ba:ce:a5:db:55:ce:3f:c7:2e:79:26:8d:1c:
                    ee:69:2d:9b:3c:51:f1:b9:d2:50:6f:60:67:b2:57:
                    9e:5f:e5:f3:33:d6:a0:c2:2a:8a:86:59:eb:93:44:
                    89:52:40:4f:b4:81:0d:86:18:2a:7b:57:57:70:2a:
                    27:44:a1:93:36:ff:7e:a5:25:07:b6:af:7a:f4:24:
                    b2:d7:b3:6c:a5:ba:52:58:98:9e:d0:cd:7f:7b:24:
                    e1:b7:5d:aa:64:6a:16:37:da:22:d4:23:ba:f1:bc:
                    14:43:26:b7:da:7c:78:31:4b:a9:c5:80:95:7b:b3:
                    fe:23:2f:ec:93:02:42:29:c5:fa:93:ca:c5:c1:4a:
                    91:81:77:b9:93:3f:0c:b1:17:f1:0a:a8:3d:90:24:
                    55:97:de:f0:d8:fd:92:eb:4f:d0:09:d6:ad:ef:f2:
                    19:fd:c3:b7:0d:0f:20:b2:16:ed:35:13:45:7e:7c:
                    f3:db:0d:d8:7a:26:34:37:fe:ec:58:18:28:a1:62:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5A:81:A9:C0:C3:F9:29:7F:97:55:ED:D6:CC:99:82:9A:49:3C:61
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a38303a3a2f34312d3431203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         5e:ca:78:ce:bc:5e:d4:df:84:25:ac:87:ab:54:69:6b:ab:9a:
         01:5b:68:ed:5d:81:8c:f6:15:e2:04:e0:3c:3b:88:7c:3e:b0:
         29:dc:0d:fb:1f:e1:91:5d:82:51:04:37:ef:0b:09:29:56:7f:
         df:94:5e:27:19:f5:12:d8:9f:2b:b8:34:65:26:35:ef:f9:c2:
         1f:4d:63:ea:4c:74:65:cb:d4:7f:de:43:f5:1c:58:07:29:c3:
         43:40:65:c5:1f:3b:a0:f1:17:b8:8e:c1:8d:e8:58:c4:f5:d1:
         37:d6:40:b9:95:22:85:4e:7c:cf:22:76:b3:82:2b:4d:80:0e:
         8c:1a:25:70:78:65:97:3e:b3:54:79:cb:13:e5:ce:50:0c:3f:
         9a:d0:03:00:6c:b5:f6:b0:88:36:b3:62:ed:bf:b8:f0:63:21:
         3e:42:38:b3:af:13:50:a6:91:90:32:62:11:ef:88:d1:50:24:
         80:a3:fe:f4:e2:d8:0f:b3:50:5a:2a:49:90:13:25:e3:d9:db:
         3f:e4:f8:40:67:e7:e4:5d:c8:f5:4e:bd:ea:e4:98:f3:aa:24:
         2b:ab:60:aa:79:1f:bc:92:90:0d:b9:9c:dc:ef:91:90:a5:c6:
         32:99:4c:0a:60:ca:1c:f0:6b:19:d0:6d:3f:2a:7d:ce:5b:ce:
         7e:36:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----