Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a383a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          ezAcKOD9kG4RQ9awmanYT96a7e3n5p/fc0DWOs46AzM=
Subject key identifier:   E3:31:39:35:10:B7:39:B7:EC:DB:5D:6E:0F:F7:60:4E:8C:C1:9C:D1
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       36F6CD5436F958591C21E5AA313F9DAFB57F5270
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Wed 18 Dec 2024 19:43:18 +0000
ROA not before:           Wed 18 Dec 2024 19:38:18 +0000
ROA not after:            Wed 17 Dec 2025 19:43:18 +0000
asID:                     200775
IP address blocks:        2602:fac2:8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f6:cd:54:36:f9:58:59:1c:21:e5:aa:31:3f:9d:af:b5:7f:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec 18 19:38:18 2024 GMT
            Not After : Dec 17 19:43:18 2025 GMT
        Subject: CN=E331393510B739B7ECDB5D6E0FF7604E8CC19CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:51:dd:6a:f7:fd:4e:3f:14:ed:92:52:c8:
                    00:79:b9:a7:88:ce:12:70:5a:51:48:d6:04:0c:9b:
                    46:98:6d:ab:b1:4a:e0:f5:84:c0:8e:e1:ca:8d:39:
                    81:f4:cd:13:15:02:0b:b7:bb:97:4d:65:04:81:6a:
                    a7:fa:de:82:c6:2c:a7:91:48:58:67:c4:f1:10:d7:
                    34:cd:f9:a1:df:9b:f0:b9:02:c3:52:b9:26:5a:2e:
                    2a:b0:d7:90:61:f0:dd:3c:e0:c9:10:34:e7:12:49:
                    9b:e2:f5:7f:6f:26:c1:60:66:2e:cf:e4:8f:5d:71:
                    20:61:36:27:4a:79:72:30:0a:b3:7b:b9:98:0d:15:
                    21:a0:82:bb:11:5b:56:be:4d:26:66:80:2c:52:38:
                    b3:6f:e1:1c:9e:a7:40:31:41:89:25:12:78:0a:34:
                    2e:48:06:e9:2d:32:a3:57:5e:c3:51:36:07:3c:99:
                    e3:16:6d:8c:83:03:1a:6c:ac:d5:a2:e4:56:62:fe:
                    68:88:76:ab:3b:5c:b5:c0:29:cb:d2:e7:e8:e4:6c:
                    d7:95:35:99:76:4d:1b:6b:44:b5:a0:43:cb:44:ad:
                    80:c6:ff:c6:d0:91:45:d4:d8:e0:1a:e8:0d:d3:7d:
                    1b:f5:51:93:66:46:08:a0:5c:3f:e9:2c:b4:39:3b:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:39:35:10:B7:39:B7:EC:DB:5D:6E:0F:F7:60:4E:8C:C1:9C:D1
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:d1:4b:81:d7:7c:6f:95:ad:ed:fb:60:d2:02:22:01:bb:38:
         a0:28:ab:8e:23:19:ec:68:6d:a8:a0:f7:2f:fe:77:a3:0d:3c:
         7e:3b:14:bd:5c:70:0e:47:07:f2:58:e4:7f:98:56:2d:02:8d:
         70:4c:db:f1:20:60:c0:d0:93:e8:27:6b:1a:03:38:27:7f:fe:
         cb:01:1b:77:2d:9b:3f:c6:0c:93:f4:0b:97:82:d1:04:91:b1:
         a1:0d:b3:3d:e6:a0:d9:05:98:a5:48:bb:2b:d2:9d:d9:e7:af:
         14:b7:7f:e3:73:d3:93:13:eb:e7:39:ad:40:f4:63:cc:d0:62:
         51:db:79:8d:55:bc:8f:2d:5b:fb:97:7a:19:8e:c7:b9:32:f6:
         dc:1f:1e:f0:4e:a1:59:9a:eb:4a:4d:c0:eb:cf:05:b3:ba:65:
         11:4d:29:41:f1:3e:d8:67:72:ac:5f:c0:05:26:84:e5:9e:86:
         0f:39:83:38:57:60:61:5d:3e:88:87:9d:a5:65:79:93:a8:9b:
         e1:69:d5:11:b9:3d:b6:a8:3c:49:fb:c3:3f:71:a5:f0:e4:94:
         ee:41:c4:e6:25:29:e3:56:40:a8:80:25:7d:3e:d7:8d:d0:4c:
         a4:39:cd:f1:88:01:31:c8:33:66:40:d5:ec:03:2b:f2:fd:ae:
         e7:a8:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----