Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          WfX5sPVJDxoZ10JyJeZNlWNHEr70HK96m/vgNMSwnuQ=
Subject key identifier:   CD:32:D7:AD:DC:20:4D:B7:86:D2:0C:12:91:F4:44:D2:54:FB:A5:AC
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3C047C33A3A124287EDC8F4F5A4EE038B69582E1
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:16 +0000
ROA not before:           Thu 30 May 2024 12:24:16 +0000
ROA not after:            Thu 29 May 2025 12:29:16 +0000
asID:                     9009
IP address blocks:        2602:ff62:114::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:04:7c:33:a3:a1:24:28:7e:dc:8f:4f:5a:4e:e0:38:b6:95:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:16 2024 GMT
            Not After : May 29 12:29:16 2025 GMT
        Subject: CN=CD32D7ADDC204DB786D20C1291F444D254FBA5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:cf:38:63:da:34:c6:73:4e:7e:da:24:3b:
                    94:5e:1a:3d:c0:c2:b2:a8:ed:0a:a7:42:5c:0b:87:
                    54:8d:c1:9b:67:e0:a9:46:0f:f1:90:91:38:35:85:
                    61:9f:51:3a:d6:ae:13:63:a4:19:04:c3:94:b8:b4:
                    1f:ec:d0:ce:4d:b7:1f:a9:7f:67:5e:5a:3b:c8:19:
                    33:1a:b7:80:06:3b:2b:bd:43:27:f5:c9:89:4f:e2:
                    7b:64:4d:89:30:34:31:be:34:ce:b7:5d:c2:d3:e7:
                    63:a4:e5:d3:7b:8a:10:55:40:0d:98:d7:15:ed:8c:
                    a9:ce:9c:7d:9a:2b:31:9b:f1:0c:8e:c8:48:e8:76:
                    fd:cf:07:a6:35:e0:fe:e3:7a:ea:b6:ba:7d:1f:bc:
                    89:65:83:70:7e:c2:d8:ae:37:12:ba:23:98:08:eb:
                    de:40:61:8b:f9:cf:01:10:25:5f:65:07:76:f4:2d:
                    ba:97:4f:c0:9f:1f:8c:76:9a:fa:a5:87:a4:e6:f8:
                    c1:f1:55:92:73:6b:64:bc:bf:46:f6:6d:82:08:91:
                    cb:b4:89:e9:49:6d:3f:02:04:2d:f8:90:8f:ac:e3:
                    ce:dc:7c:2f:f8:40:74:41:c0:24:6f:9b:e8:83:b6:
                    1e:1e:05:62:ff:0d:47:5b:ca:7c:9b:87:30:3e:30:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:D7:AD:DC:20:4D:B7:86:D2:0C:12:91:F4:44:D2:54:FB:A5:AC
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:1c:8b:7a:f7:d8:b2:8b:d3:3a:35:ad:58:43:83:e4:09:f3:
         f0:cb:8f:76:37:65:9e:fa:14:b7:dc:0e:4e:41:6e:7d:21:6e:
         47:bf:82:5f:94:68:fc:fd:09:05:6a:92:21:99:62:6a:1c:cc:
         8f:d4:62:81:6f:a4:1e:02:da:35:38:16:2e:07:4b:67:02:eb:
         bf:52:a1:58:e4:f6:ca:7f:d1:f8:66:c4:58:f1:7a:8a:18:7e:
         4d:67:0c:e7:bc:30:ef:e2:9b:6c:16:d8:3c:d6:4e:19:b9:0c:
         8a:87:84:73:62:11:48:d8:f0:79:5f:7b:46:45:06:10:44:95:
         37:00:9d:b2:fd:5b:9a:eb:7d:6b:9c:65:87:55:c0:d4:81:80:
         b6:8d:c4:85:3b:c0:05:fa:17:78:57:57:ae:80:9a:64:24:10:
         e9:a3:69:7c:d6:50:0d:85:06:55:d4:f7:3c:e2:3a:e9:20:28:
         af:46:db:39:73:5f:a6:34:da:b6:ee:86:7b:49:43:0d:e8:87:
         b3:bf:80:7b:58:d6:b0:88:f5:c7:72:43:88:a6:ff:7e:c2:ee:
         32:af:41:5c:cc:68:6c:37:41:e2:17:d9:2c:c6:d5:f2:2e:1d:
         05:41:1f:a5:c2:32:4d:51:f2:06:af:b2:dc:0e:dc:ee:37:80:
         f0:ae:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----