Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa
File:                     323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier:          FT8Qs7LHUuYHW/SvCIIQ6ok/3L/jebxjIqSRBVRSvVw=
Subject key identifier:   48:5E:BB:1E:EB:DB:02:D5:2D:DE:9B:DF:1D:EE:D0:F9:18:79:DC:8A
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       527A12B5FAA67AA9F3954F10B51FFB283544B579
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa
Signing time:             Wed 18 Sep 2024 17:48:25 +0000
ROA not before:           Wed 18 Sep 2024 17:43:25 +0000
ROA not after:            Wed 17 Sep 2025 17:48:25 +0000
asID:                     207314
IP address blocks:        2601:1d08:8000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7a:12:b5:fa:a6:7a:a9:f3:95:4f:10:b5:1f:fb:28:35:44:b5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Sep 18 17:43:25 2024 GMT
            Not After : Sep 17 17:48:25 2025 GMT
        Subject: CN=485EBB1EEBDB02D52DDE9BDF1DEED0F91879DC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:a2:84:6f:86:db:4e:61:a2:d4:09:54:5d:
                    71:02:b5:8d:58:12:b0:8f:fc:77:93:ac:a4:05:61:
                    42:99:fe:1e:bd:88:9b:4b:ee:1f:16:33:3f:2f:56:
                    d3:9d:1b:e6:34:3c:14:f4:56:0d:f6:0d:e2:41:89:
                    ad:52:75:36:d5:1a:b5:61:37:ed:69:e3:fa:b5:b8:
                    53:e5:ca:8b:4b:5e:32:e3:ba:3f:b2:4e:3b:2b:05:
                    66:ca:0c:1d:22:8d:d4:c8:04:93:7b:33:89:20:cc:
                    54:a0:63:67:c7:8d:34:87:1f:cf:4e:3d:93:8c:dd:
                    5f:c8:08:93:a5:63:62:e8:b9:c6:e0:9b:26:8a:8d:
                    0f:37:15:52:9f:b1:29:f8:82:98:61:8f:35:a2:f4:
                    23:f8:55:30:01:06:5b:ce:fe:6b:b0:75:86:40:ce:
                    b0:3a:69:42:8f:6a:b5:12:5d:65:d4:ce:fb:96:4e:
                    5d:db:15:07:4a:f6:fe:f8:da:9a:7c:74:10:67:64:
                    1d:2f:6f:a5:5a:81:8d:e7:bc:b6:37:a2:17:fb:8e:
                    a4:b2:f5:3b:4f:60:b9:d3:68:bf:a0:4d:f5:45:19:
                    cf:57:c3:dc:b5:ef:c4:58:f5:c9:63:fd:03:2a:95:
                    a8:84:b7:53:1b:08:4f:60:3f:2a:2f:a4:c2:c5:6a:
                    3e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5E:BB:1E:EB:DB:02:D5:2D:DE:9B:DF:1D:EE:D0:F9:18:79:DC:8A
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a383030303a3a2f34302d3438203d3e20323037333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:f9:4c:54:30:60:96:ed:ec:18:8a:44:e0:37:de:df:e2:50:
         95:f2:32:f5:ec:cd:b2:59:61:2d:c4:94:f3:33:5d:1e:b7:d3:
         e7:93:62:88:f3:47:f8:65:d1:1e:49:c4:b8:f3:af:88:28:ef:
         e1:9b:d3:10:5a:38:7e:30:29:8a:4c:b5:0a:9a:57:07:10:df:
         1b:1f:e5:16:9d:56:a3:f0:40:9c:27:1c:9b:d0:e5:91:7f:81:
         14:bb:42:af:2b:9b:ed:25:d2:24:d0:bd:be:cd:e7:bd:d4:e2:
         94:91:98:fe:a9:23:9f:69:fe:ba:ce:18:ce:57:4b:2a:06:5b:
         64:72:57:27:b7:95:f2:d4:73:5b:47:42:99:07:21:18:b2:ac:
         cd:05:a6:c0:04:43:81:e7:b5:e5:1d:81:c7:ea:c4:ee:58:a4:
         91:c3:db:5d:3b:0b:a6:b8:60:a7:99:45:11:ca:5f:c5:ad:64:
         89:31:45:f1:a3:3f:81:44:27:34:52:8d:87:6c:ce:bf:85:f1:
         47:95:e9:65:fd:e5:90:79:b5:99:49:56:cc:e2:d9:f0:3e:e3:
         97:25:ba:78:7f:99:11:c2:d3:9e:6a:20:6c:ac:68:6f:b9:a1:
         62:63:68:aa:90:83:05:0e:26:34:53:03:ea:77:4c:60:d0:cc:
         83:e7:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----