Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970191fce51a14079a/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
File:                     323630323a663833643a3a2f34302d3438203d3e203133353237.roa (raw, json)
Hash identifier:          i8VGXn87L7R0IHXRfa7HF/gbTQDqqD05Nam/BEUuNaU=
Subject key identifier:   2A:B2:C0:65:86:62:B8:42:4E:57:23:98:C0:AD:17:58:D8:6B:3D:B4
Certificate issuer:       /CN=86de965d712342bbdf47d0e8b30a518111c3d0222d32954f1a
Certificate serial:       3D08C911F0D63568B37A377C22A32394A8213B63
Authority key identifier: C5:63:E9:39:D5:3B:5B:57:D8:79:BA:6F:4F:70:EF:58:58:40:D2:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d712342bbdf47d0e8b30a518111c3d0222d32954f1a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970191fce51a14079a/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa
Signing time:             Mon 16 Sep 2024 22:13:51 +0000
ROA not before:           Mon 16 Sep 2024 22:08:51 +0000
ROA not after:            Mon 15 Sep 2025 22:13:51 +0000
asID:                     13527
IP address blocks:        2602:f83d::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:08:c9:11:f0:d6:35:68:b3:7a:37:7c:22:a3:23:94:a8:21:3b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d712342bbdf47d0e8b30a518111c3d0222d32954f1a
        Validity
            Not Before: Sep 16 22:08:51 2024 GMT
            Not After : Sep 15 22:13:51 2025 GMT
        Subject: CN=2AB2C0658662B8424E572398C0AD1758D86B3DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:3e:be:f3:6e:14:e5:42:6f:cf:7b:80:00:
                    bb:79:15:d9:b8:05:a3:ec:c6:a7:23:33:7c:d6:bb:
                    48:6a:e5:41:5c:32:c5:77:ee:e6:e6:4e:fc:c8:9e:
                    91:10:2c:c2:f2:54:02:e8:f0:83:e8:4e:20:a8:88:
                    51:99:10:b9:3e:d5:27:05:e9:c4:2b:6d:5f:c6:03:
                    5c:01:6a:9b:ea:7e:ad:60:9c:8e:a5:be:92:cd:5b:
                    d1:1f:58:70:76:0c:5a:07:39:a0:83:d5:e1:4c:51:
                    fd:a0:54:a9:1f:cc:53:a0:fd:64:d8:b2:42:ee:9d:
                    03:81:a7:bb:f0:ca:3d:85:6f:36:60:dd:38:51:44:
                    4a:97:c8:f5:51:93:2a:11:8d:c8:e9:77:ae:4f:7f:
                    6e:a4:dc:46:4f:8d:9d:b2:e6:16:5e:68:8f:69:b7:
                    04:4f:b8:48:1a:61:86:97:72:17:31:0c:fd:e2:28:
                    1f:9c:4c:c3:38:02:73:5e:f6:c7:3f:54:1a:ef:a5:
                    87:db:8a:90:65:67:8e:96:ea:49:03:91:a1:de:a4:
                    6f:1d:a2:f9:9d:fb:43:44:49:45:df:dd:3b:3c:15:
                    a0:5c:38:0a:04:c8:ff:02:1e:17:99:db:32:46:35:
                    f5:91:8b:c1:77:1a:72:14:c7:a4:7b:67:8e:82:5d:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:C0:65:86:62:B8:42:4E:57:23:98:C0:AD:17:58:D8:6B:3D:B4
            X509v3 Authority Key Identifier:
                keyid:C5:63:E9:39:D5:3B:5B:57:D8:79:BA:6F:4F:70:EF:58:58:40:D2:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970191fce51a14079a/0/C563E939D53B5B57D879BA6F4F70EF585840D2C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d712342bbdf47d0e8b30a518111c3d0222d32954f1a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970191fce51a14079a/0/323630323a663833643a3a2f34302d3438203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:42:64:c5:77:f4:a1:95:02:a9:24:ce:b7:7d:1e:cb:d9:
         c4:50:76:f3:86:59:e4:81:6b:2e:79:4e:2a:f5:81:d3:68:2e:
         3d:66:e8:ae:36:d9:81:59:8c:1c:8d:7a:52:7a:85:86:d2:89:
         07:a2:cc:a2:e9:04:89:f6:a6:ea:d7:3b:84:bb:c5:bb:cb:03:
         9d:5d:e4:84:f8:84:51:5d:0b:93:f5:db:c0:9f:5d:40:99:27:
         33:5f:73:df:1b:95:8e:ba:7c:1a:77:22:be:5f:8d:7c:c4:b7:
         e3:81:75:45:e6:7e:a6:97:61:4e:0d:ed:ba:20:dc:0a:35:c1:
         16:5d:d8:2d:4b:3d:78:a1:86:88:71:ca:8e:50:fb:b3:e1:7f:
         82:9b:ad:0e:e1:c5:3f:32:9a:52:c0:c0:81:86:fc:be:9e:dd:
         4f:10:d9:02:e7:0c:e9:17:af:ff:d3:fd:ab:0a:13:cc:62:bb:
         7c:e8:1e:89:13:06:b8:9b:17:f1:d5:1e:12:22:0b:b3:64:ee:
         d1:c6:ba:4b:eb:e2:2b:b3:71:7d:dd:75:20:10:cf:af:d6:c6:
         70:0f:0b:ac:b2:6a:25:c3:c1:c8:e8:ae:fe:f5:68:aa:ce:3a:
         62:c1:74:e2:f8:d4:8e:25:d0:fe:2c:ec:e1:d6:1e:fe:39:d8:
         c5:87:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----