Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323132363138.roa
File:                     323630323a666136653a3a2f33362d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          EfEmJQ4ICSR3EWWElxzkQK+QPgRWFgge+xL3/L5MohU=
Subject key identifier:   C8:00:F3:00:A2:87:A2:92:74:76:AA:87:3C:0B:6A:5C:3C:97:E2:14
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       16336C8E8B3A6E2A04B9C15EFB266B44DB71CD41
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323132363138.roa
Signing time:             Tue 18 Jul 2023 09:10:38 +0000
ROA not before:           Tue 18 Jul 2023 09:05:38 +0000
ROA not after:            Tue 16 Jul 2024 09:10:38 +0000
asID:                     212618
IP address blocks:        2602:fa6e::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:6c:8e:8b:3a:6e:2a:04:b9:c1:5e:fb:26:6b:44:db:71:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Jul 18 09:05:38 2023 GMT
            Not After : Jul 16 09:10:38 2024 GMT
        Subject: CN=C800F300A287A2927476AA873C0B6A5C3C97E214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:f0:14:f0:4b:23:d1:12:ff:69:02:48:5e:
                    e3:49:6a:de:59:6e:a1:47:58:c5:0d:99:41:c7:b4:
                    e8:86:b5:5e:fc:62:81:50:fd:78:36:4f:14:9b:9f:
                    1c:04:8c:02:ea:d5:55:57:de:71:2f:59:07:61:49:
                    50:6c:7c:cf:3e:4a:55:58:f2:76:07:2f:1f:15:03:
                    5b:15:af:b2:6f:73:d5:e4:22:cc:cb:92:2b:27:7a:
                    14:6f:53:02:9a:87:91:97:0b:d2:1b:c1:a9:9e:76:
                    50:64:80:35:95:de:3d:7a:6a:c6:b5:cb:19:bc:49:
                    38:63:5f:aa:3c:cd:19:2e:6b:f7:ec:8e:42:ad:c4:
                    89:4a:7a:61:14:00:a4:d0:eb:94:ed:6f:64:37:bd:
                    ef:e3:82:a9:f1:25:52:39:b0:b2:ac:f6:35:87:fa:
                    90:4f:be:16:76:05:f4:24:0e:5a:91:3b:b5:e3:ef:
                    b7:df:23:2b:ff:82:d9:e1:03:13:b4:a1:23:5f:78:
                    82:61:9d:dd:7d:41:64:fa:fe:c3:73:fd:f9:cf:99:
                    0c:4b:5a:cc:e9:17:1e:8a:35:18:f2:30:b5:5d:3a:
                    86:9a:4b:9a:a6:f1:8b:11:7f:5e:6f:f9:4e:9f:b5:
                    a5:06:3b:59:79:92:cd:32:f7:0d:f4:14:39:01:eb:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:F3:00:A2:87:A2:92:74:76:AA:87:3C:0B:6A:5C:3C:97:E2:14
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3a2f33362d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:ec:a4:b5:56:ab:2e:9a:49:49:f7:1d:7d:d9:af:09:3b:
         7b:84:3e:3c:13:cc:4a:11:45:c6:49:6a:7f:d1:c5:6b:98:a3:
         75:d9:0c:1b:4c:04:3f:e1:87:58:47:be:37:7f:ec:29:98:e3:
         98:ea:1d:48:03:42:14:83:f1:c4:93:38:c8:67:9a:82:8f:8b:
         d0:33:c7:1b:69:8c:43:31:b0:6d:43:93:ca:bf:6d:b7:20:07:
         2b:07:38:d4:30:ce:5a:09:94:53:02:d7:63:b9:ca:2f:5e:41:
         ef:17:d1:55:8d:b9:7e:31:a9:8e:f7:7f:c0:f3:57:3f:4a:79:
         3e:fb:45:92:40:cd:4a:c7:c9:a3:2f:ca:4c:88:c5:7b:01:c2:
         48:64:10:aa:7f:44:67:5c:d7:9a:8d:24:a7:03:24:f3:56:15:
         dd:ac:c6:71:2e:7e:3e:05:4b:ce:ef:5a:0c:8f:dd:c3:6b:24:
         e9:61:52:18:d0:47:2f:60:9b:9f:7f:59:df:6c:e1:e0:2b:03:
         cb:3c:aa:5e:cb:13:86:14:bc:12:43:51:56:5c:72:ab:99:22:
         eb:a0:86:a2:9a:07:26:72:cc:b2:9a:53:5b:d8:d9:a8:f6:94:
         1e:1f:3b:7f:c5:eb:f5:67:49:98:f7:03:3a:5c:f6:36:01:04:
         d8:52:b1:38
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFjNsjos6bioEucFe+yZrRNtxzUEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTczMDM3NGVjZTU2ZDRlMDE0NmYwYWIw
ZmY4YTI5MTAxYzlmMjEzNjgwHhcNMjMwNzE4MDkwNTM4WhcNMjQwNzE2MDkxMDM4
WjAzMTEwLwYDVQQDEyhDODAwRjMwMEEyODdBMjkyNzQ3NkFBODczQzBCNkE1QzND
OTdFMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HjwFPBLI9ES
/2kCSF7jSWreWW6hR1jFDZlBx7TohrVe/GKBUP14Nk8Um58cBIwC6tVVV95xL1kH
YUlQbHzPPkpVWPJ2By8fFQNbFa+yb3PV5CLMy5IrJ3oUb1MCmoeRlwvSG8GpnnZQ
ZIA1ld49emrGtcsZvEk4Y1+qPM0ZLmv37I5CrcSJSnphFACk0OuU7W9kN73v44Kp
8SVSObCyrPY1h/qQT74WdgX0JA5akTu14++33yMr/4LZ4QMTtKEjX3iCYZ3dfUFk
+v7Dc/35z5kMS1rM6RceijUY8jC1XTqGmkuapvGLEX9eb/lOn7WlBjtZeZLNMvcN
9BQ5Aeu2lwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMgA8wCih6KSdHaqhzwLalw8
l+IUMB8GA1UdIwQYMBaAFBMGWLPsSG14FhGlfr2npPJEfj5wMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODkyN2IxZDgwMTg5MmI2OWM3NjkwMjkzLzAv
MTMwNjU4QjNFQzQ4NkQ3ODE2MTFBNTdFQkRBN0E0RjI0NDdFM0U3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzgyOWZiODcyLTE1YmItNGE0ZS05ZWQ5LTI1OTk2MGIwNDliZC80Mzcy
OTk5NzE1NzMwMzc0ZWNlNTZkNGUwMTQ2ZjBhYjBmZjhhMjkxMDFjOWYyMTM2OC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5MjdiMWQ4MDE4OTJi
NjljNzY5MDI5My8wLzMyMzYzMDMyM2E2NjYxMzY2NTNhM2EyZjMzMzYyZDM0Mzgy
MDNkM2UyMDMyMzEzMjM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC+m4AMA0GCSqGSIb3DQEB
CwUAA4IBAQB/COyktVarLppJSfcdfdmvCTt7hD48E8xKEUXGSWp/0cVrmKN12Qwb
TAQ/4YdYR743f+wpmOOY6h1IA0IUg/HEkzjIZ5qCj4vQM8cbaYxDMbBtQ5PKv223
IAcrBzjUMM5aCZRTAtdjucovXkHvF9FVjbl+MamO93/A81c/Snk++0WSQM1Kx8mj
L8pMiMV7AcJIZBCqf0RnXNeajSSnAyTzVhXdrMZxLn4+BUvO71oMj93DayTpYVIY
0EcvYJuff1nfbOHgKwPLPKpeyxOGFLwSQ1FWXHKrmSLroIaimgcmcsyymlNb2Nmo
9pQeHzt/xev1Z0mY9wM6XPY2AQTYUrE4
-----END CERTIFICATE-----