Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2031303132.roa
File:                     323630313a316430383a3a2f34382d3438203d3e2031303132.roa (raw, json)
Hash identifier:          0lGcKu25IMoChbqiNLXNK7u6KC4XrRPu983QwvTZYsw=
Subject key identifier:   48:57:1F:07:60:96:DF:18:E4:51:4D:3E:21:94:D0:FE:02:46:7B:D6
Certificate issuer:       /CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
Certificate serial:       5A4767199809547BED51DCCC1CFB6D2028D41239
Authority key identifier: 9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2031303132.roa
Signing time:             Tue 23 Jul 2024 23:47:14 +0000
ROA not before:           Tue 23 Jul 2024 23:42:14 +0000
ROA not after:            Tue 22 Jul 2025 23:47:14 +0000
asID:                     1012
IP address blocks:        2601:1d08::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:47:67:19:98:09:54:7b:ed:51:dc:cc:1c:fb:6d:20:28:d4:12:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf
        Validity
            Not Before: Jul 23 23:42:14 2024 GMT
            Not After : Jul 22 23:47:14 2025 GMT
        Subject: CN=48571F076096DF18E4514D3E2194D0FE02467BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:e5:fb:76:09:a5:e9:ad:62:0e:6c:23:26:
                    34:20:f2:e5:9a:1f:3e:75:b4:d7:4f:48:17:99:d4:
                    55:9c:da:eb:4b:6c:c5:36:cb:0f:c3:c3:ce:e9:49:
                    af:25:de:a0:bb:6c:3d:12:25:24:4b:ce:5f:cb:71:
                    1a:a2:19:b2:f9:83:fa:98:ca:b8:2b:2a:8f:f8:32:
                    f7:bc:46:f6:5a:b0:bf:d8:85:e3:0b:e3:62:f4:9f:
                    7f:0f:29:46:fa:3b:70:d6:24:df:e0:cc:5e:11:2a:
                    83:1c:ca:16:b5:fc:43:f0:9d:46:c5:c7:c6:ec:7a:
                    dd:e4:37:65:c2:e6:38:79:74:e3:0a:4c:c9:09:b9:
                    26:24:d1:ed:15:fd:28:d3:13:61:29:39:9a:55:de:
                    f2:65:bb:fa:90:bc:15:99:60:14:5f:18:6e:9a:d3:
                    81:42:b5:c3:c8:20:07:82:23:6f:1d:12:88:be:ae:
                    ce:bc:7c:d0:58:da:7d:f1:e5:26:bd:b0:e4:51:5b:
                    3a:16:a1:22:d7:bc:9d:7b:70:a6:64:6a:f8:04:0b:
                    37:83:ad:0b:f9:4c:3d:ec:aa:34:d8:14:f2:a8:8b:
                    c4:c9:8d:b8:e6:c8:fe:70:c5:b2:8e:d4:1e:ab:cc:
                    a9:aa:c9:fa:fb:55:26:d5:a9:cb:4a:46:4d:44:47:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:1F:07:60:96:DF:18:E4:51:4D:3E:21:94:D0:FE:02:46:7B:D6
            X509v3 Authority Key Identifier:
                keyid:9A:51:D6:D7:D4:84:FA:0F:C8:55:68:FB:6B:86:E9:1D:8D:F6:F4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/9A51D6D7D484FA0FC85568FB6B86E91D8DF6F4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f841df32bbe92560332193e413f05bf4282dc58cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/18/323630313a316430383a3a2f34382d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:81:05:57:1c:ed:1a:48:5e:08:e5:7e:6d:c4:bc:5e:36:
         f4:f9:2c:6b:a6:af:50:ad:5e:18:a2:8c:4c:49:cc:65:f5:d8:
         ef:81:ab:b9:b8:c2:c5:e5:94:12:da:97:34:7b:f8:94:6e:1a:
         bd:58:46:ac:61:c0:23:96:27:d3:81:a7:9e:54:66:4e:90:26:
         1a:9b:fb:63:1f:d3:0b:b8:35:6c:45:ce:3e:b6:bc:9b:55:77:
         7c:d6:fe:d6:86:88:9f:94:c2:f3:72:0c:82:1c:bf:23:fc:c8:
         2d:ee:b0:8a:4e:7c:3b:22:51:42:2a:87:ea:bb:65:d6:f4:6b:
         07:11:9d:c6:2c:24:cf:33:41:f3:1e:d3:a2:22:04:54:c5:b2:
         70:ba:8b:8c:da:1d:0f:9c:c8:e1:7c:c5:32:cb:a3:77:04:54:
         da:80:e5:47:bd:24:1c:d2:67:d0:12:3c:64:24:96:c5:d5:83:
         39:03:27:d5:80:73:75:fd:4a:3b:40:61:a6:6a:9a:57:7a:42:
         75:0f:ca:ba:1d:e6:8a:2f:4f:f7:43:22:15:4f:1d:66:62:f1:
         16:b9:15:fe:66:1d:e5:9d:7f:57:c5:40:17:24:61:ac:df:b4:
         93:1e:12:a0:a3:cb:75:b8:78:4d:16:c1:79:65:85:81:5f:b9:
         1d:06:d7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----