Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e20393435.roa
File:                     323630313a316430303a3a2f32382d3438203d3e20393435.roa (raw, json)
Hash identifier:          1BJLqtppXKnTdhcbScrtEO4ovhTPkNr1SUN4826lY5c=
Subject key identifier:   8D:59:46:19:D6:E9:00:27:69:91:8F:86:34:0C:D6:24:54:89:07:0C
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       7316A475AB91FEE92800D4AD0821D31E0B125B15
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e20393435.roa
Signing time:             Tue 10 Sep 2024 19:45:19 +0000
ROA not before:           Tue 10 Sep 2024 19:40:19 +0000
ROA not after:            Tue 09 Sep 2025 19:45:19 +0000
asID:                     945
IP address blocks:        2601:1d00::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:a4:75:ab:91:fe:e9:28:00:d4:ad:08:21:d3:1e:0b:12:5b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Sep 10 19:40:19 2024 GMT
            Not After : Sep  9 19:45:19 2025 GMT
        Subject: CN=8D594619D6E9002769918F86340CD6245489070C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:f3:f9:4d:c0:96:a3:70:66:28:6a:df:6b:
                    e3:bb:7a:85:89:3e:7c:8b:3f:3d:1c:af:a9:e7:fe:
                    f8:26:11:7a:d8:ab:c9:9f:e3:f3:1a:31:6d:68:0f:
                    e2:d3:90:6d:d5:d8:70:96:d5:39:1a:9f:93:a6:4b:
                    35:d5:dc:24:89:7b:31:7f:32:78:63:e7:76:45:a2:
                    b0:f9:fc:fb:80:e4:df:f9:54:25:04:a1:33:13:bb:
                    44:2c:98:43:0a:3c:5c:74:42:12:83:fc:d8:03:99:
                    4e:bc:7a:d9:0e:36:1a:c7:cc:83:95:5a:c7:7c:12:
                    92:c7:68:a8:e7:85:6c:cb:c1:f3:90:97:71:e4:a0:
                    9f:cf:e0:57:9e:6c:ba:97:af:b9:cb:a8:86:6c:df:
                    61:b1:9f:da:92:f4:7f:69:47:c4:6d:72:df:d1:23:
                    6e:40:49:b0:87:45:9f:80:ff:94:0b:49:3b:59:64:
                    eb:58:aa:6b:be:fa:18:e6:3e:87:43:42:cc:88:b2:
                    c6:53:0d:16:10:aa:c3:17:2b:9d:bb:da:12:db:89:
                    ce:b2:4d:18:2c:18:2a:8b:17:7f:49:4d:5b:70:de:
                    37:7c:3f:7b:68:26:df:99:7e:9c:66:8d:34:95:49:
                    a6:5f:99:1d:da:9f:ab:63:dd:d1:e1:cb:5e:46:b6:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:46:19:D6:E9:00:27:69:91:8F:86:34:0C:D6:24:54:89:07:0C
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430303a3a2f32382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

    Signature Algorithm: sha256WithRSAEncryption
         11:7a:4b:80:94:c4:95:43:b5:a6:36:ec:f4:d4:4e:d5:5c:ea:
         5a:15:27:40:5d:25:bd:4e:ea:6e:17:6d:c4:56:5c:e6:04:f9:
         f5:54:78:a7:cd:a4:91:ef:25:d7:70:4a:6f:79:f7:5a:b3:f0:
         a7:1c:70:a8:d4:8c:d2:19:56:d4:12:3d:cc:5d:e6:d3:ad:81:
         1f:14:41:e9:c0:50:89:58:ce:23:c5:fc:17:fe:72:46:2b:33:
         47:20:e9:93:85:d2:76:b0:74:0d:cb:7c:da:90:16:70:76:a5:
         57:c8:ee:93:03:74:d1:83:2f:e8:03:2f:45:7e:a7:57:fb:22:
         70:2f:1d:d3:34:ca:60:2b:6c:ef:a5:68:5b:4a:cd:16:5f:ff:
         4c:77:f0:7f:fe:6f:ed:87:05:45:98:c2:29:ab:41:6f:bd:5a:
         a3:4f:8f:77:d2:bb:21:f5:72:70:73:ad:60:6f:18:c1:ad:c2:
         2b:d0:c1:57:03:aa:18:26:29:5c:f9:f0:a0:c5:39:dc:43:b8:
         c2:bf:27:8c:c3:e6:b2:11:96:8e:ab:57:30:e8:81:5d:69:3e:
         10:ed:aa:d2:e9:d5:2e:06:10:42:fa:6b:66:7b:c6:73:7f:58:
         bd:19:f2:7f:26:b4:5e:c1:78:77:4b:d5:c7:0d:9c:3f:27:f8:
         05:73:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----