Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a313a3a2f34382d3438203d3e203630333031.roa
File:                     323630323a666134613a313a3a2f34382d3438203d3e203630333031.roa (raw, json)
Hash identifier:          WjtIBJeCWLTMpxFWdCQ9It6fEcYhoTzzlRLhgL0oLH8=
Subject key identifier:   B2:A2:6A:CF:94:BA:6F:50:34:42:A5:9A:8A:84:7D:53:D6:1F:8A:F8
Certificate issuer:       /CN=589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94
Certificate serial:       390FB4E9B502204738981DF9599224786A874314
Authority key identifier: 97:51:76:A6:93:7C:7D:E8:88:B8:1B:5E:32:FC:69:60:AD:4B:4D:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a313a3a2f34382d3438203d3e203630333031.roa
Signing time:             Sat 12 Aug 2023 02:41:53 +0000
ROA not before:           Sat 12 Aug 2023 02:36:53 +0000
ROA not after:            Sat 10 Aug 2024 02:41:53 +0000
asID:                     60301
IP address blocks:        2602:fa4a:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0f:b4:e9:b5:02:20:47:38:98:1d:f9:59:92:24:78:6a:87:43:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94
        Validity
            Not Before: Aug 12 02:36:53 2023 GMT
            Not After : Aug 10 02:41:53 2024 GMT
        Subject: CN=B2A26ACF94BA6F503442A59A8A847D53D61F8AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:5e:ff:2d:2d:e9:09:f0:fe:9a:03:e0:18:
                    57:64:71:72:39:e2:9a:95:ea:ef:6d:b1:7f:3a:50:
                    b3:dd:ea:e3:b2:bb:a3:de:7f:30:2d:ca:83:e2:a4:
                    e6:3d:9d:cc:ce:64:ce:4e:20:78:f5:48:eb:4e:f6:
                    b0:d5:1b:a2:cf:46:b3:94:d2:91:8e:70:69:49:87:
                    49:1f:0d:c8:90:99:5a:cf:a3:21:20:4d:5b:c4:5f:
                    ce:40:fc:dd:21:66:29:88:04:c7:d7:42:00:bc:ee:
                    8c:9c:9c:b9:5b:77:31:38:f6:d3:66:1f:4f:a8:ee:
                    b4:36:67:6c:4e:cb:54:be:1f:bc:ec:5b:e5:dd:92:
                    35:63:70:bf:9f:57:46:c1:7f:3c:e9:8d:c3:19:b3:
                    a5:85:6d:2d:cb:62:44:05:30:d8:25:3d:10:8c:97:
                    28:4a:8e:7b:5f:dd:c4:a8:01:fd:11:99:03:f2:ba:
                    d2:5a:32:42:fe:7a:f9:85:7a:8a:c5:2f:6f:b8:a8:
                    b8:44:d8:67:38:7c:87:e3:d7:11:b3:08:8a:0b:a4:
                    06:5d:e7:4d:e4:b0:80:14:b2:be:1d:9e:70:b7:1f:
                    53:43:7b:29:b0:46:99:55:6b:01:86:b8:a5:20:e6:
                    51:e2:16:90:97:cb:9d:61:cc:46:ac:9e:8a:c7:f4:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A2:6A:CF:94:BA:6F:50:34:42:A5:9A:8A:84:7D:53:D6:1F:8A:F8
            X509v3 Authority Key Identifier:
                keyid:97:51:76:A6:93:7C:7D:E8:88:B8:1B:5E:32:FC:69:60:AD:4B:4D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/975176A6937C7DE888B81B5E32FC6960AD4B4D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164d92cd1b23d6dcef2a192032bf01e55347ab8e94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a313a3a2f34382d3438203d3e203630333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4a:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:e4:5e:fa:1f:82:eb:c9:a3:e0:ab:37:3f:2e:2c:21:d9:14:
         e9:7e:99:32:7d:4a:3e:0f:e9:d1:75:07:5a:0f:ba:76:ee:ec:
         69:58:a8:11:c2:22:de:34:86:6f:49:e0:da:81:f2:6e:b1:ba:
         87:f2:84:1b:b4:e8:83:cf:1e:be:00:cc:09:fa:95:5d:27:7c:
         10:1a:94:5c:4b:a7:5d:22:a8:72:5a:08:1d:0b:aa:8f:66:0d:
         06:4e:41:25:9b:63:9c:80:75:c5:ee:ea:ac:fe:d4:b4:b7:28:
         9a:c6:83:6f:ba:99:5e:08:62:77:cb:c9:b6:6a:a2:5a:34:fa:
         80:d2:a1:2e:de:0f:d2:f0:2e:29:86:02:27:8e:04:32:01:c5:
         4a:11:77:99:7a:64:18:2a:41:a4:6d:3e:9b:fa:26:30:24:dc:
         81:9f:0a:0c:ca:c2:a5:a0:bb:b3:7c:9a:a4:52:05:d8:1e:44:
         c4:1f:8c:94:80:61:6a:eb:6f:de:5a:a6:2e:c9:57:57:e3:4f:
         f0:32:02:e4:2b:22:09:f0:ee:bd:1a:da:f6:5d:14:1a:70:7a:
         83:22:59:7f:cf:25:b8:cd:88:7c:c2:a7:cd:79:76:63:02:03:
         cc:a5:9f:30:a9:6e:76:57:6c:7b:a4:4c:9b:37:b7:b5:a9:50:
         47:68:21:2d
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUOQ+06bUCIEc4mB35WZIkeGqHQxQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTg5Yjc5NGExNjRkOTJjZDFiMjNkNmRjZWYyYTE5MjAz
MmJmMDFlNTUzNDdhYjhlOTQwHhcNMjMwODEyMDIzNjUzWhcNMjQwODEwMDI0MTUz
WjAzMTEwLwYDVQQDEyhCMkEyNkFDRjk0QkE2RjUwMzQ0MkE1OUE4QTg0N0Q1M0Q2
MUY4QUY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJe/y0t6Qnw
/poD4BhXZHFyOeKalervbbF/OlCz3erjsruj3n8wLcqD4qTmPZ3MzmTOTiB49Ujr
Tvaw1Ruiz0azlNKRjnBpSYdJHw3IkJlaz6MhIE1bxF/OQPzdIWYpiATH10IAvO6M
nJy5W3cxOPbTZh9PqO60NmdsTstUvh+87Fvl3ZI1Y3C/n1dGwX886Y3DGbOlhW0t
y2JEBTDYJT0QjJcoSo57X93EqAH9EZkD8rrSWjJC/nr5hXqKxS9vuKi4RNhnOHyH
49cRswiKC6QGXedN5LCAFLK+HZ5wtx9TQ3spsEaZVWsBhrilIOZR4haQl8udYcxG
rJ6Kx/RsQwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFLKias+Uum9QNEKlmoqEfVPW
H4r4MB8GA1UdIwQYMBaAFJdRdqaTfH3oiLgbXjL8aWCtS000MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODlkMDk1YWUwMTg5ZDMwODdmZGQwMzI2LzAv
OTc1MTc2QTY5MzdDN0RFODg4QjgxQjVFMzJGQzY5NjBBRDRCNEQzNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0MDYwZS81ODli
Nzk0YTE2NGQ5MmNkMWIyM2Q2ZGNlZjJhMTkyMDMyYmYwMWU1NTM0N2FiOGU5NC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZDA5NWFlMDE4OWQz
MDg3ZmRkMDMyNi8wLzMyMzYzMDMyM2E2NjYxMzQ2MTNhMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNjMwMzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6SgABMA0GCSqGSIb3
DQEBCwUAA4IBAQCJ5F76H4LryaPgqzc/Liwh2RTpfpkyfUo+D+nRdQdaD7p27uxp
WKgRwiLeNIZvSeDagfJusbqH8oQbtOiDzx6+AMwJ+pVdJ3wQGpRcS6ddIqhyWggd
C6qPZg0GTkElm2OcgHXF7uqs/tS0tyiaxoNvupleCGJ3y8m2aqJaNPqA0qEu3g/S
8C4phgInjgQyAcVKEXeZemQYKkGkbT6b+iYwJNyBnwoMysKloLuzfJqkUgXYHkTE
H4yUgGFq62/eWqYuyVdX40/wMgLkKyIJ8O69Gtr2XRQacHqDIll/zyW4zYh8wqfN
eXZjAgPMpZ8wqW52V2x7pEybN7e1qVBHaCEt
-----END CERTIFICATE-----