Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a666666303a3a2f34382d3438203d3e203534363133.roa
File:                     323630323a666439613a666666303a3a2f34382d3438203d3e203534363133.roa (raw, json)
Hash identifier:          AIB7I+Mfl098HmXV+bw9wODRE4NliYHZnaq8teFJ3us=
Subject key identifier:   04:C3:A3:C9:68:FD:1E:6A:CB:1F:96:75:36:84:81:0D:DA:43:D4:15
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       26BCE5E33327C5D392E9848EA3FFA7102B46B3F0
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a666666303a3a2f34382d3438203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:13:59 +0000
ROA not before:           Tue 18 Oct 2022 18:08:59 +0000
ROA not after:            Tue 17 Oct 2023 18:13:59 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:e5:e3:33:27:c5:d3:92:e9:84:8e:a3:ff:a7:10:2b:46:b3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:08:59 2022 GMT
            Not After : Oct 17 18:13:59 2023 GMT
        Subject: CN=04C3A3C968FD1E6ACB1F96753684810DDA43D415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:17:14:58:bc:fa:4f:15:84:db:56:40:b2:
                    fd:f5:0c:9b:71:67:9a:15:6d:99:ab:1d:60:65:e7:
                    05:70:8a:21:76:37:3c:d0:b5:1a:21:0f:e0:14:2a:
                    36:68:f1:5b:8b:23:7c:e7:8d:d0:b0:c3:b0:f7:fe:
                    e3:d6:dc:19:be:ac:34:91:ca:e1:c5:b3:3d:64:80:
                    32:a2:bf:bf:18:b2:98:03:aa:b4:8b:9c:53:fd:0b:
                    f2:39:14:0d:1d:60:e4:36:64:ed:c0:b6:e2:c0:ec:
                    0d:e4:29:05:ca:d0:80:13:ba:73:0a:d0:f1:72:da:
                    25:98:8c:8d:c1:a4:b5:5f:e5:51:99:40:08:76:29:
                    73:82:08:4f:6b:f1:fe:5d:6d:07:25:e5:f8:74:c7:
                    e0:e9:51:a2:ef:26:ac:5b:a7:b6:e4:70:c8:1d:34:
                    92:f7:c3:44:47:8d:13:89:41:0b:8a:a0:5c:92:02:
                    c0:52:e4:11:23:00:27:54:da:6d:d4:ee:57:d7:cb:
                    8f:61:91:cd:43:fd:bc:98:d5:63:f5:31:53:7f:65:
                    1e:6f:5f:3f:f8:22:96:a5:a3:67:4e:9e:74:81:64:
                    19:ba:26:10:24:75:2d:8d:75:d4:8a:a4:40:6c:f7:
                    b6:ec:72:35:cb:9b:3a:39:d5:98:84:8b:48:1d:b4:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:A3:C9:68:FD:1E:6A:CB:1F:96:75:36:84:81:0D:DA:43:D4:15
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a666666303a3a2f34382d3438203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:93:04:4e:00:e0:d9:e8:9e:40:b9:e3:e8:7f:c4:2d:4a:
         99:5a:4e:ce:7f:e6:0f:43:27:84:b5:11:e2:91:cb:3f:4b:ad:
         69:13:cf:48:bb:4e:38:aa:88:15:3d:fa:7e:68:06:5c:07:37:
         78:74:d5:3e:b0:48:c1:7c:55:e1:e8:ed:46:6b:83:a8:ad:41:
         4a:95:2f:33:94:10:1b:70:1a:f0:f0:9b:69:ec:18:1b:c7:13:
         7a:8f:5e:e5:71:6b:f3:38:95:96:e7:58:08:68:36:42:22:87:
         9c:39:68:b0:4c:3c:79:17:1d:8a:4c:19:8a:78:b8:05:2b:25:
         d2:0e:b5:f3:ec:17:27:8d:f7:87:4d:f5:d9:2a:67:1b:52:11:
         42:2a:15:93:66:64:3f:e6:15:54:2b:52:ae:33:d3:2c:45:90:
         d9:5f:28:b2:fa:96:60:38:61:e0:6f:fe:64:ae:61:24:93:c5:
         d6:0d:0d:bb:a6:43:e4:69:98:ed:a0:cc:7a:98:4f:a8:9f:15:
         c7:f1:6d:d8:d8:ea:8e:bd:4d:a4:8d:63:f0:53:b6:0f:a4:00:
         15:82:f5:48:b0:b4:a7:82:f6:55:e5:87:88:9a:e3:bc:c6:05:
         a1:e5:76:76:22:86:74:1f:84:d2:7d:5f:8f:53:be:c6:8c:94:
         15:44:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----