Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323033343533.roa
File:                     323630323a666136653a3a2f33362d3438203d3e20323033343533.roa (raw, json)
Hash identifier:          /46bmJpEKIGWVS9TUiBDBLEH6SawD/9tjSu37qRgWwA=
Subject key identifier:   4D:7B:D7:1A:9F:B7:80:68:44:4B:D1:4F:CD:B1:48:6A:B0:1D:47:66
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       22F11804BBE1B8C7418FFA1CECE21B775204BBE2
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323033343533.roa
Signing time:             Sat 28 Oct 2023 00:51:15 +0000
ROA not before:           Sat 28 Oct 2023 00:46:15 +0000
ROA not after:            Sat 26 Oct 2024 00:51:15 +0000
asID:                     203453
IP address blocks:        2602:fa6e::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f1:18:04:bb:e1:b8:c7:41:8f:fa:1c:ec:e2:1b:77:52:04:bb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Oct 28 00:46:15 2023 GMT
            Not After : Oct 26 00:51:15 2024 GMT
        Subject: CN=4D7BD71A9FB78068444BD14FCDB1486AB01D4766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f7:97:5b:a2:be:5a:0a:5c:f6:aa:cc:16:b9:
                    75:2a:ef:c8:bb:be:65:da:1f:5e:ba:bd:c9:fb:85:
                    13:c8:cc:c3:4f:4b:64:69:0b:23:9a:55:61:fa:4f:
                    7e:9f:54:45:c0:a4:ca:db:36:90:9e:81:22:88:a4:
                    c2:f8:09:c3:10:bf:44:8f:87:70:e3:c8:6f:b0:72:
                    87:63:0b:12:28:29:2d:39:ba:81:b2:76:e6:a6:4b:
                    67:bb:ca:00:f8:a6:65:ab:a1:70:8a:d1:16:84:df:
                    52:3e:cd:d0:e0:01:ca:74:e4:22:ef:9a:84:c4:68:
                    b3:7a:5e:d2:f2:6f:4b:aa:62:42:86:21:22:9d:28:
                    85:ee:2f:ff:58:fc:be:78:46:80:b0:1e:fe:57:9d:
                    b7:87:8e:bf:b4:45:d8:55:67:d0:89:4b:7f:85:b1:
                    b5:08:36:48:6e:a0:0b:bb:65:c5:fa:ea:88:5d:35:
                    01:37:c6:31:73:fb:b9:e2:dd:ea:39:3e:a0:c5:a7:
                    cd:5d:1e:a3:b1:23:76:40:bf:71:c2:b8:72:94:96:
                    ec:d3:76:c2:9f:92:80:27:19:1a:b5:d6:7b:e7:8e:
                    d6:b1:e5:2f:4c:46:9d:60:b5:5d:b5:e1:3b:d8:24:
                    a5:40:e8:91:08:9c:d3:b6:78:7e:7e:76:60:a3:23:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:D7:1A:9F:B7:80:68:44:4B:D1:4F:CD:B1:48:6A:B0:1D:47:66
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:df:e8:51:c7:df:db:ff:5d:be:a4:e2:c2:1d:72:2b:83:
         9d:41:64:dc:d2:e8:5c:6b:d8:cf:d6:fb:c6:f2:4a:3d:eb:65:
         2a:ae:fd:da:7a:28:12:a4:4e:ca:3f:24:95:d0:66:31:06:ba:
         c7:ed:b6:b9:49:fa:a2:18:33:f2:9c:d4:5a:3b:4d:fc:25:f9:
         55:e7:f7:19:b9:fd:82:6e:02:97:af:fa:8c:87:ca:b0:f8:2a:
         2b:fd:54:17:a2:05:5c:e0:5f:aa:d8:dc:bb:6f:ad:36:1c:ca:
         6c:21:27:05:89:35:0d:53:fc:90:3c:6c:ec:e5:75:2e:6c:13:
         47:00:04:16:91:ff:55:e4:17:52:3d:f8:c8:d9:0f:94:89:b1:
         bf:00:5a:01:f6:e4:60:5a:7f:e0:ed:d2:1d:95:18:77:39:60:
         f2:3a:25:3d:83:46:45:04:d4:d0:04:c8:49:f8:f5:cd:97:f9:
         24:48:6d:5a:9a:17:95:37:a9:69:27:85:1d:af:d0:dd:83:ef:
         0c:42:93:96:b5:06:f0:12:70:12:b3:80:b5:cf:0d:1b:9c:43:
         72:95:d1:a7:d6:d5:59:3e:1e:b6:ff:ef:df:37:a2:68:4c:c1:
         23:d2:34:09:a7:55:8d:ae:86:31:30:41:79:34:b0:34:ef:44:
         af:bc:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----