Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a3a2f33362d3336203d3e203534363133.roa
File:                     323630323a666439613a3a2f33362d3336203d3e203534363133.roa (raw, json)
Hash identifier:          Mv5H/uUb7+KzS8ji7CCjw5xvXKJc/m0vN4PP99+ZcPc=
Subject key identifier:   5E:EB:B0:97:CC:D2:C7:AA:46:DA:94:BD:1E:F4:DC:64:17:4F:74:82
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       149C0C1FD51ACF55189D218BB2644041DDD62DF1
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a3a2f33362d3336203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:14:13 +0000
ROA not before:           Tue 18 Oct 2022 18:09:13 +0000
ROA not after:            Tue 17 Oct 2023 18:14:13 +0000
asID:                     54613
IP address blocks:        2602:fd9a::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:9c:0c:1f:d5:1a:cf:55:18:9d:21:8b:b2:64:40:41:dd:d6:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:09:13 2022 GMT
            Not After : Oct 17 18:14:13 2023 GMT
        Subject: CN=5EEBB097CCD2C7AA46DA94BD1EF4DC64174F7482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:f4:d6:f4:13:9d:54:9e:c2:3c:1f:5b:ba:
                    ae:61:94:9a:d3:b7:3b:0d:e7:46:d0:57:66:6f:16:
                    69:15:ba:e6:4f:fe:56:41:bb:8e:c7:54:a9:8d:f3:
                    b0:10:43:d8:9b:d7:44:9a:0b:a7:b7:6d:a9:d5:92:
                    d0:c3:36:46:dc:d5:43:8b:a1:25:29:a7:7b:ea:a8:
                    14:40:6c:4f:fd:36:ad:27:8c:dc:61:9c:a7:26:dc:
                    92:70:61:05:ee:b5:da:47:ed:d2:ef:43:50:88:99:
                    d4:2a:e2:b4:74:84:4d:6a:0d:85:4f:1c:d2:ad:01:
                    a6:8d:d0:56:f6:ac:93:a1:cd:c5:04:c3:ed:c3:12:
                    eb:3a:15:de:27:3c:b2:6f:7f:b1:d2:cf:b7:f1:3c:
                    b3:f2:b2:d5:3e:44:ad:dd:65:89:2b:68:51:ab:21:
                    84:71:ee:c0:5f:04:3b:5c:2c:5a:40:f5:1b:35:7f:
                    60:1d:dc:64:78:c2:b1:8e:68:ce:96:94:3e:c8:af:
                    e6:35:08:3d:75:ae:e7:4c:a9:e6:da:36:e3:0d:16:
                    a3:30:49:87:9d:8b:4a:be:9d:dc:38:71:99:ee:26:
                    df:0c:dc:fc:d2:e5:ac:8f:32:b7:de:86:28:ce:b5:
                    91:65:e0:14:b2:78:2e:0f:e4:d4:33:55:6e:8d:dc:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:B0:97:CC:D2:C7:AA:46:DA:94:BD:1E:F4:DC:64:17:4F:74:82
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a3a2f33362d3336203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:37:c4:64:c7:0a:e3:02:7e:9b:6b:df:e8:29:14:d9:93:f9:
         0e:67:99:a3:26:62:28:b1:32:7e:31:37:c5:97:06:78:fc:c1:
         f5:d1:0f:cb:49:73:ba:1c:75:ba:e8:c8:3f:13:3a:09:20:ca:
         d9:bb:c6:ea:fb:ec:03:07:bb:aa:31:82:28:8c:f8:6d:b5:55:
         40:3d:4e:19:d7:c4:c9:8f:ed:fd:bd:1e:21:51:25:28:cd:a7:
         1f:17:82:ca:5d:95:a0:25:06:23:8d:18:e2:05:c6:c7:c0:90:
         12:c9:ae:e1:83:55:64:39:6d:33:04:54:bf:37:b8:25:e3:a7:
         73:b6:a7:fe:e4:a1:ee:e7:8e:cd:fe:0b:dd:e7:6f:af:db:d3:
         1c:bc:5e:79:a6:77:2b:44:5c:c0:ae:c3:4d:a0:37:54:0a:54:
         20:ee:db:70:8d:dc:2a:b1:6d:b6:80:ff:9b:e8:5a:4c:fc:cd:
         26:0b:93:19:bf:d5:59:f1:28:76:d1:4a:88:48:f5:01:2c:0c:
         8e:5e:4e:ae:1e:da:90:c7:89:e3:6b:1b:e9:dd:47:1d:83:21:
         d2:fa:88:6f:9c:ed:15:77:50:df:b7:32:f0:17:96:9b:0e:c2:
         7d:16:f6:c5:2e:1c:10:45:b2:a3:73:12:fe:68:6c:1d:39:db:
         fb:f0:30:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----