Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          +XluSMeLuuX0ftsMK0+h4AENrlBp363vKsUvMjF1pwU=
Subject key identifier:   A3:FD:03:08:FA:D3:CD:7C:B0:C9:D6:B1:28:58:8B:42:E5:19:F6:AD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4858C92328D7E13004984A6E0CB2309F56DC6139
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jun 2024 15:01:15 +0000
ROA not before:           Mon 03 Jun 2024 14:56:15 +0000
ROA not after:            Mon 02 Jun 2025 15:01:15 +0000
asID:                     29802
IP address blocks:        2602:ff62:12f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:58:c9:23:28:d7:e1:30:04:98:4a:6e:0c:b2:30:9f:56:dc:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  3 14:56:15 2024 GMT
            Not After : Jun  2 15:01:15 2025 GMT
        Subject: CN=A3FD0308FAD3CD7CB0C9D6B128588B42E519F6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:81:c1:fa:5a:44:4c:de:cf:b9:2b:b7:02:
                    c7:52:e4:d9:c0:68:a4:28:e4:2b:79:5b:6c:db:25:
                    07:a1:3d:03:e3:bd:1c:bb:dc:ac:e4:c3:be:47:bf:
                    56:7b:09:54:7c:a0:4f:74:aa:c6:be:e0:7b:47:1b:
                    3b:ec:f6:27:c0:a4:21:c3:86:67:c6:a2:8c:8d:4e:
                    de:80:c8:f6:aa:ac:91:ea:e4:ac:91:4c:18:a9:b0:
                    1e:ea:b4:dd:6b:cf:8f:20:07:90:a2:be:88:b5:59:
                    a4:30:71:09:1a:17:66:0a:63:39:89:21:5c:a5:d1:
                    a7:47:d3:32:c6:71:00:58:e5:a0:f1:ee:d5:de:cf:
                    ea:2d:92:c1:4b:3f:c9:bc:2b:15:53:1c:68:45:22:
                    b4:a5:4b:c2:d0:76:dc:e7:12:b7:f3:f9:d3:b6:3c:
                    88:81:e3:57:5f:63:9f:a8:14:92:4a:3d:42:a5:0c:
                    7f:29:f8:43:71:89:32:6d:a6:2a:07:ed:33:c2:df:
                    e0:e2:97:1c:63:10:a4:b0:0f:00:c0:17:95:b8:be:
                    f3:50:44:95:58:02:67:4c:b8:35:00:a3:44:0c:44:
                    d1:c2:78:54:9a:9c:70:33:e4:5b:8c:bd:e6:0f:dc:
                    11:3f:b8:b4:11:ba:6e:53:95:2f:90:9b:c1:09:fa:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:03:08:FA:D3:CD:7C:B0:C9:D6:B1:28:58:8B:42:E5:19:F6:AD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:71:b5:8e:0d:6d:1c:3f:28:5c:00:37:aa:09:2e:7f:a7:
         4e:50:30:1a:c7:cf:a1:69:74:81:78:ae:bd:b1:e9:7a:a8:1b:
         7f:3a:2c:26:f2:96:2f:e4:15:97:1b:be:01:14:31:bf:4a:30:
         bf:3b:9c:26:c6:b6:3d:4f:97:24:f0:03:2e:a5:f0:64:d0:63:
         d1:be:c1:a5:dd:92:1f:f8:5b:3d:cc:fe:64:6b:3f:9d:72:10:
         ac:33:c3:48:1d:ed:12:54:f8:20:75:b8:30:ae:3a:0d:39:4d:
         14:82:a5:f5:30:d6:ac:e4:dc:66:0f:a5:76:c8:24:0e:cc:41:
         8e:af:62:19:48:ad:75:c7:cd:91:07:27:46:8c:cf:af:8c:b1:
         b2:35:42:e5:4f:28:69:c9:0e:55:28:55:48:b0:de:5f:67:8d:
         38:b3:0a:29:f2:39:41:3a:dd:e6:bc:c1:a2:aa:7c:ab:4c:66:
         d5:d7:c4:8d:36:f3:d6:66:0b:71:8a:d0:29:1d:cf:43:d2:e6:
         96:d4:c9:8b:86:46:b9:dd:10:50:58:0f:9c:5f:6f:d3:69:cf:
         38:f1:56:4c:00:c2:d2:0b:44:e5:bc:14:b0:f5:76:8b:79:07:
         1d:69:62:a7:71:2b:1e:d6:3c:80:4a:e0:d7:a5:e2:1c:e6:eb:
         4f:cc:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----