Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a613a3a2f34382d3438203d3e203534363133.roa
File:                     323630323a666439613a613a3a2f34382d3438203d3e203534363133.roa (raw, json)
Hash identifier:          2prbWPkDomARiqt8i3hrYyzVpX5hTz2c0fphj0xr5ng=
Subject key identifier:   B5:F5:1F:A7:F4:64:7B:4C:66:4C:BE:A0:EC:C8:1C:3B:3D:C5:F5:CD
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       7B89F986571ED24B87DB9F3D6570F5E52C7A1937
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a613a3a2f34382d3438203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:14:09 +0000
ROA not before:           Tue 18 Oct 2022 18:09:09 +0000
ROA not after:            Tue 17 Oct 2023 18:14:09 +0000
asID:                     54613
IP address blocks:        2602:fd9a:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:89:f9:86:57:1e:d2:4b:87:db:9f:3d:65:70:f5:e5:2c:7a:19:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:09:09 2022 GMT
            Not After : Oct 17 18:14:09 2023 GMT
        Subject: CN=B5F51FA7F4647B4C664CBEA0ECC81C3B3DC5F5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:67:ec:99:97:5e:87:e0:51:69:ad:ef:25:
                    85:ff:30:62:09:23:bf:24:29:6d:2c:f7:35:c8:78:
                    8f:7b:93:4f:3d:45:6b:12:07:10:42:2f:7a:0c:7e:
                    c7:8f:d7:53:3c:f6:14:af:87:19:1e:ed:7b:63:d5:
                    6f:26:94:b7:c7:6b:24:14:6c:ac:9b:d0:22:55:15:
                    2f:88:87:1a:91:28:8f:2d:31:a5:7a:e1:34:f0:5c:
                    ea:ba:46:77:c8:43:73:a8:32:c1:0e:97:99:24:e7:
                    4a:3c:7c:96:a1:75:99:52:c4:e0:0a:33:91:1b:2c:
                    56:0f:ed:eb:1b:40:c0:90:d6:14:b3:dc:0a:df:e7:
                    97:27:66:62:4b:84:88:4d:11:3a:f4:a3:b0:6f:23:
                    99:07:02:80:71:67:07:cb:34:91:56:e5:86:a1:b1:
                    5b:6e:b6:a1:67:96:39:c2:27:26:4f:da:cd:6f:0e:
                    1b:0e:25:c6:fa:10:49:e5:cb:db:1d:5e:08:e0:83:
                    c0:07:64:24:06:11:b9:04:2d:83:47:5a:0a:c8:d4:
                    be:18:d4:ae:d7:e2:9d:eb:a6:a2:fd:94:0f:52:9b:
                    1a:28:92:e8:b1:35:6a:a2:0d:18:58:f6:9d:d3:83:
                    93:61:83:fb:25:ce:ae:f8:f5:d9:06:03:1f:08:c4:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:1F:A7:F4:64:7B:4C:66:4C:BE:A0:EC:C8:1C:3B:3D:C5:F5:CD
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a613a3a2f34382d3438203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:fe:d7:8d:4d:e5:af:18:0b:df:f4:59:de:06:e7:64:03:
         fc:2e:ea:78:61:d6:d4:8d:59:e4:ac:8d:a0:75:4e:9d:72:70:
         9a:e7:05:5a:67:b1:79:44:f4:38:dc:ca:bb:61:e6:d9:ce:f4:
         80:ec:f2:bd:c1:7f:02:97:4f:ff:08:d1:6b:69:e1:7f:5c:b2:
         3c:1b:c1:c1:25:3c:2a:8b:db:d4:c9:0c:d5:7d:28:8c:4a:52:
         37:59:97:c2:3f:be:3f:bb:64:1b:a0:6e:71:4c:ac:73:74:db:
         f5:b5:36:e9:72:97:65:4c:70:89:92:33:5c:ef:a9:bd:a3:65:
         c2:5c:7e:45:e4:e3:7f:89:ff:00:83:97:93:4c:d2:5c:9b:dd:
         43:ee:60:52:c1:8e:ab:f2:cf:fc:51:f9:84:1f:7e:65:b0:58:
         3c:76:39:0f:e4:7c:26:64:d9:18:11:b6:2e:bb:b8:0b:97:cd:
         f4:6b:78:03:45:25:78:13:40:d4:7c:a4:b0:3f:29:de:eb:d2:
         fc:82:63:b4:79:49:cd:9d:74:f7:2a:80:a5:76:d6:d3:fa:75:
         36:16:ca:ba:a4:e2:17:47:b8:14:98:96:51:12:b3:ce:30:fe:
         6d:bc:34:8f:60:8c:59:b1:9b:d9:52:52:b8:b0:bd:53:06:8e:
         86:aa:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----