Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a6666663a3a2f34382d3438203d3e203534363133.roa
File:                     323630323a666439613a6666663a3a2f34382d3438203d3e203534363133.roa (raw, json)
Hash identifier:          SQN6wOv7zamn+mIi6FkGyNedengDR4OctV5/3pEXr/A=
Subject key identifier:   35:8C:DC:FA:C7:76:32:68:4A:84:02:B3:CD:E0:7F:F4:D1:4A:78:85
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       5FDD07605F184A93C1BDD6F170B345DD772E9AEF
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a6666663a3a2f34382d3438203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:14:04 +0000
ROA not before:           Tue 18 Oct 2022 18:09:04 +0000
ROA not after:            Tue 17 Oct 2023 18:14:04 +0000
asID:                     54613
IP address blocks:        2602:fd9a:fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dd:07:60:5f:18:4a:93:c1:bd:d6:f1:70:b3:45:dd:77:2e:9a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:09:04 2022 GMT
            Not After : Oct 17 18:14:04 2023 GMT
        Subject: CN=358CDCFAC77632684A8402B3CDE07FF4D14A7885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:0a:65:47:fa:d7:14:02:c5:10:ad:c0:4f:
                    df:70:59:ee:dd:ae:bf:68:52:ed:b1:c5:99:75:ab:
                    ce:14:3c:ba:7d:0d:60:e7:11:39:f6:50:6f:d9:87:
                    9a:76:16:ea:bc:76:a5:5c:e8:57:d7:4d:f3:9e:bf:
                    b4:3e:ef:05:e4:02:00:09:98:5d:62:af:ff:dc:e8:
                    55:4a:aa:58:4c:60:5e:65:2e:57:ac:8d:33:46:51:
                    24:57:0c:b2:1b:12:49:fb:a7:7a:bd:b4:1e:b5:8a:
                    33:92:e9:d8:d6:53:d5:d2:e3:bf:d9:ec:7b:13:fb:
                    b0:8a:41:52:e8:7c:a9:4a:c0:40:0c:f2:89:8b:a4:
                    5a:89:ba:89:c4:1b:f6:4d:05:d7:5f:61:5a:6a:f1:
                    eb:a6:96:80:12:2b:e1:4f:9d:c1:bc:53:fc:82:cb:
                    8b:d4:de:16:ea:8b:40:44:94:3c:b3:92:1d:40:16:
                    81:74:e0:3b:a6:45:1f:d2:28:21:48:8f:7a:6e:68:
                    c2:f5:73:9b:96:16:78:a4:1f:d1:ef:3c:cf:91:c4:
                    4f:33:98:07:63:bc:c6:ef:ba:e2:3d:5d:16:66:b6:
                    f3:d5:66:bb:77:75:15:72:2d:50:5f:e5:8f:96:07:
                    b8:d0:26:7a:0a:09:95:71:cb:76:96:01:77:f3:18:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8C:DC:FA:C7:76:32:68:4A:84:02:B3:CD:E0:7F:F4:D1:4A:78:85
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/323630323a666439613a6666663a3a2f34382d3438203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:f3:68:bf:71:a3:34:dd:c5:19:ad:f3:fb:49:9c:73:5e:e8:
         f9:37:e9:d9:86:a3:81:4b:df:c1:4a:0a:29:f8:8b:bd:72:51:
         b7:3f:13:98:1b:b4:4d:24:3c:f9:09:90:ce:2e:a9:c9:96:65:
         0b:57:c6:32:4a:d3:99:bd:f3:b8:70:97:44:1c:3b:78:5a:ab:
         05:c9:e7:1c:9b:d9:4d:fb:5e:dd:c2:54:50:ed:f6:09:21:48:
         20:c6:f1:4c:9e:0c:c7:9a:78:82:93:ea:8d:82:32:72:a2:dd:
         a2:c7:d4:16:5e:4d:22:47:0c:ad:d9:a1:f1:9f:4c:bf:af:84:
         10:02:52:ee:1b:9b:f8:0b:e5:06:5c:2a:03:74:b5:e8:03:7a:
         16:3a:1b:3b:0c:06:07:5a:70:e4:99:b4:f5:94:28:2b:d0:34:
         cc:11:d1:56:0c:5a:23:a2:19:5b:6a:c5:94:04:d3:80:f8:b2:
         e9:19:7e:ce:30:a7:a2:4f:01:d2:3c:53:2b:f3:3b:36:00:b3:
         b8:7a:73:ee:ef:cc:3c:c6:7b:11:58:37:9d:38:83:d9:61:a8:
         48:cc:ff:cb:90:ad:68:3c:d1:ae:e3:58:3c:54:3f:22:2d:ff:
         a9:2e:06:54:21:fd:67:cd:0e:bd:56:e4:8e:07:d4:8d:04:01:
         72:4e:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----