Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a383a3a2f34352d3435203d3e20323132363138.roa
File:                     323630323a666136653a383a3a2f34352d3435203d3e20323132363138.roa (raw, json)
Hash identifier:          wJsoV4nbAUftdCqmfHl/3EOxNU/B+zXk75+8fGh1Yr8=
Subject key identifier:   9E:34:B7:29:CF:59:2A:47:A5:C7:57:83:76:09:E2:96:C3:FB:95:64
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       0C48B021E8F3887CE6EB62C346F6C4552600A22C
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a383a3a2f34352d3435203d3e20323132363138.roa
Signing time:             Sun 09 Jul 2023 09:56:04 +0000
ROA not before:           Sun 09 Jul 2023 09:51:04 +0000
ROA not after:            Sun 07 Jul 2024 09:56:04 +0000
asID:                     212618
IP address blocks:        2602:fa6e:8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:48:b0:21:e8:f3:88:7c:e6:eb:62:c3:46:f6:c4:55:26:00:a2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul  9 09:51:04 2023 GMT
            Not After : Jul  7 09:56:04 2024 GMT
        Subject: CN=9E34B729CF592A47A5C757837609E296C3FB9564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:cb:c6:1d:a1:35:d1:62:e2:ac:d1:74:f1:
                    2c:49:68:13:e9:63:ab:61:74:4f:ad:f0:f2:a1:f0:
                    cc:27:05:fd:07:00:17:9e:1a:fc:05:0a:26:04:0a:
                    c2:cb:71:97:63:7c:01:d6:be:69:a8:56:9f:4d:3d:
                    f6:a5:67:fc:f7:62:39:71:fb:38:bc:47:bd:5f:c9:
                    cd:5e:66:bd:2c:23:9a:61:8c:a1:4a:87:69:e5:70:
                    92:84:b1:03:0d:98:41:21:2c:44:c8:eb:41:07:e7:
                    14:88:aa:22:44:33:ad:27:5c:76:0c:7d:a6:24:f6:
                    6b:80:f7:9f:3c:90:30:ed:52:6a:e8:08:f6:93:0f:
                    14:44:28:99:e2:0f:4a:35:d0:72:60:c5:1b:4a:9b:
                    2e:d0:05:78:35:d5:17:73:b2:6a:4f:21:66:d4:2f:
                    28:25:b5:88:28:fe:83:8d:68:ad:6d:d2:8e:4b:ce:
                    20:ad:df:43:a6:47:fd:27:81:1d:08:1c:1e:1d:06:
                    f0:32:1d:38:9d:55:9c:81:3d:03:dc:9f:72:d1:77:
                    7a:29:36:dd:58:8a:1c:85:ab:f6:81:c9:1c:92:90:
                    6f:e3:63:c8:d7:05:d7:ca:a5:b7:33:8b:b9:66:b3:
                    bd:c1:60:5c:f2:6a:2a:73:8f:f7:80:c4:5e:da:bb:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:34:B7:29:CF:59:2A:47:A5:C7:57:83:76:09:E2:96:C3:FB:95:64
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a383a3a2f34352d3435203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         68:55:de:39:b7:76:d3:30:a6:65:86:e6:39:92:6f:e4:50:c8:
         c6:e3:10:04:f1:89:f1:fe:03:c0:9b:a3:42:42:8b:2f:f2:8c:
         62:e2:cb:f4:20:9b:9d:3c:a8:2f:e7:a3:ce:c7:66:49:14:ae:
         a3:dd:d0:22:86:0d:24:7f:8f:28:c5:05:38:6f:c2:87:6a:a5:
         74:be:3c:6f:d6:77:b8:7a:03:ec:03:36:e8:75:12:8f:cf:ff:
         a5:3a:55:13:70:ce:ba:5b:32:0e:e4:60:f1:95:7e:f6:2f:53:
         a2:1d:46:d8:ba:1f:ac:c8:ad:e6:7e:2a:d1:58:30:6c:e3:c0:
         ab:bf:f8:e3:12:fa:e0:11:82:18:8d:15:54:ce:dd:28:42:78:
         0d:bc:47:2f:56:30:4c:7a:4d:ef:3e:41:9b:83:5e:88:2c:c0:
         4d:eb:22:d2:93:12:38:c3:7d:49:cd:9f:49:4d:1d:d8:9f:18:
         8e:96:7b:bc:fc:da:9f:ea:f7:4b:a3:b6:5b:d6:ea:5a:23:3f:
         9d:75:10:36:d9:1d:39:2e:4f:96:83:38:15:ab:80:b6:4b:26:
         10:f4:93:f6:8f:14:08:aa:3a:7b:52:ae:00:4f:60:c0:4d:b9:
         d6:bc:68:5f:03:2d:29:93:d8:a9:7d:d2:0d:92:da:0b:d9:c0:
         a2:a5:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----