Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6630303a3a2f34302d3430203d3e20343031343031.roa
File:                     323630323a663962613a6630303a3a2f34302d3430203d3e20343031343031.roa (raw, json)
Hash identifier:          YfUAGtN2t/4LJupX0oxOqoKv/uf3Q0eS33gLib0Q9gw=
Subject key identifier:   47:D9:6E:80:95:45:C5:DF:0B:4F:2D:8F:AA:E0:F4:82:07:DD:FA:BD
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       2105FEA98A2667248370F3E404042898D71EC4BC
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6630303a3a2f34302d3430203d3e20343031343031.roa
Signing time:             Wed 30 Oct 2024 12:41:51 +0000
ROA not before:           Wed 30 Oct 2024 12:36:51 +0000
ROA not after:            Wed 29 Oct 2025 12:41:51 +0000
asID:                     401401
IP address blocks:        2602:f9ba:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:fe:a9:8a:26:67:24:83:70:f3:e4:04:04:28:98:d7:1e:c4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Oct 30 12:36:51 2024 GMT
            Not After : Oct 29 12:41:51 2025 GMT
        Subject: CN=47D96E809545C5DF0B4F2D8FAAE0F48207DDFABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:32:4a:e2:d2:81:5c:06:42:96:04:46:85:d9:
                    fc:23:f2:64:46:0f:8d:cb:9a:31:1b:d9:0a:20:dd:
                    7e:fa:cf:b9:2a:4a:07:cc:1e:31:76:61:ac:cc:0f:
                    ac:70:f5:24:eb:34:ad:52:b0:2f:92:3f:d8:ff:dc:
                    6f:16:5f:13:9a:d6:d8:bd:af:6d:c8:80:76:b7:da:
                    0b:67:83:65:44:4e:3d:67:e8:1a:cd:35:2b:72:34:
                    c2:03:9d:20:cd:17:71:6f:da:fe:4c:1b:69:40:3c:
                    74:81:6e:53:d0:08:ad:c6:19:85:30:c3:c0:d7:bf:
                    b9:d1:b5:9b:8c:c8:68:37:54:aa:54:15:3e:ad:8c:
                    79:f7:22:40:d9:98:7d:c2:8e:e2:35:62:45:b5:0d:
                    42:2f:ed:db:0f:9d:68:a2:f4:70:7d:58:71:ae:ef:
                    4e:aa:37:f0:98:bd:72:d7:22:6e:d2:ea:33:b3:29:
                    bd:dd:f2:8f:56:e9:9e:15:96:87:23:91:5b:d4:d5:
                    4d:65:a6:1b:fc:50:4a:90:55:5d:f7:95:26:8f:ae:
                    a1:97:5d:64:c2:49:a0:95:4f:d2:87:69:dc:1b:0d:
                    7f:7e:c7:62:1c:20:f1:6e:44:18:fd:37:7f:03:d6:
                    be:f7:e6:46:64:20:21:e3:1f:c5:53:b3:1f:02:4e:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D9:6E:80:95:45:C5:DF:0B:4F:2D:8F:AA:E0:F4:82:07:DD:FA:BD
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a6630303a3a2f34302d3430203d3e20343031343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:58:91:e6:94:10:74:c8:11:c9:de:98:f6:5b:7b:2c:00:5f:
         90:e3:3a:b7:a5:55:47:a1:1c:7f:e5:2d:5b:51:bb:ae:ed:0a:
         fa:46:0d:cc:c2:10:4b:b5:d9:74:08:69:2e:91:e3:d0:44:69:
         1a:c5:76:f7:be:06:cb:95:dd:ae:a3:17:c3:08:7b:a2:a5:84:
         a3:88:4a:b2:a8:a7:d0:28:bc:5d:50:af:8d:ee:71:23:74:8a:
         b3:ab:cb:49:78:83:cd:b7:af:5d:9b:50:7b:3b:87:30:01:bc:
         d2:16:bd:76:32:58:c1:b5:e2:49:e4:67:66:d4:10:e9:aa:20:
         8b:79:de:60:92:6e:c8:db:46:fb:f5:52:79:01:01:53:79:fc:
         27:eb:29:5d:be:79:e8:04:c6:6f:5d:ff:42:34:59:a6:bd:d9:
         bc:c5:8c:0e:e8:61:dd:36:40:ff:9e:c2:cd:6a:7e:b9:db:10:
         c6:2d:da:c2:ed:d0:f4:0e:7d:d0:69:f5:3e:71:04:52:d2:2e:
         11:75:90:ee:e4:12:41:41:0d:ef:0b:81:b8:12:50:92:17:f4:
         04:14:32:b1:7d:28:64:00:5d:02:ae:20:4a:20:a3:f7:95:06:
         22:b7:69:45:ff:55:fa:91:3f:9e:48:64:4f:52:d5:c3:7f:52:
         b2:4b:98:0f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUIQX+qYomZySDcPPkBAQomNcexLwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzlhNzQxYjI5ZTVmZjZmYTUyMzFmNzc5
NDg4ZTcwN2IyOTBmMmYyNDcwHhcNMjQxMDMwMTIzNjUxWhcNMjUxMDI5MTI0MTUx
WjAzMTEwLwYDVQQDEyg0N0Q5NkU4MDk1NDVDNURGMEI0RjJEOEZBQUUwRjQ4MjA3
RERGQUJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzJK4tKBXAZC
lgRGhdn8I/JkRg+Ny5oxG9kKIN1++s+5KkoHzB4xdmGszA+scPUk6zStUrAvkj/Y
/9xvFl8TmtbYva9tyIB2t9oLZ4NlRE49Z+gazTUrcjTCA50gzRdxb9r+TBtpQDx0
gW5T0AitxhmFMMPA17+50bWbjMhoN1SqVBU+rYx59yJA2Zh9wo7iNWJFtQ1CL+3b
D51oovRwfVhxru9OqjfwmL1y1yJu0uozsym93fKPVumeFZaHI5Fb1NVNZaYb/FBK
kFVd95Umj66hl11kwkmglU/Sh2ncGw1/fsdiHCDxbkQY/Td/A9a+9+ZGZCAh4x/F
U7MfAk6PfwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFEfZboCVRcXfC08tj6rg9IIH
3fq9MB8GA1UdIwQYMBaAFMGadEeFX3rFJw2VwW4TRVoqXbMqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE1Y2IwYTQwMTkxOTAyMmVmMDcxZWZlLzAv
QzE5QTc0NDc4NTVGN0FDNTI3MEQ5NUMxNkUxMzQ1NUEyQTVEQjMyQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OWE3NDFiMjllNWZmNmZhNTIzMWY3Nzk0ODhlNzA3YjI5MGYyZjI0Ny5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNWNiMGE0MDE5MTkw
MjJlZjA3MWVmZS8wLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjYzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzQzMDMxMzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5ug8wDQYJ
KoZIhvcNAQELBQADggEBABFYkeaUEHTIEcnemPZbeywAX5DjOrelVUehHH/lLVtR
u67tCvpGDczCEEu12XQIaS6R49BEaRrFdve+BsuV3a6jF8MIe6KlhKOISrKop9Ao
vF1Qr43ucSN0irOry0l4g823r12bUHs7hzABvNIWvXYyWMG14knkZ2bUEOmqIIt5
3mCSbsjbRvv1UnkBAVN5/CfrKV2+eegExm9d/0I0Waa92bzFjA7oYd02QP+ews1q
frnbEMYt2sLt0PQOfdBp9T5xBFLSLhF1kO7kEkFBDe8LgbgSUJIX9AQUMrF9KGQA
XQKuIEogo/eVBiK3aUX/VfqRP55IZE9S1cN/UrJLmA8=
-----END CERTIFICATE-----