Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
File:                     323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa (raw, json)
Hash identifier:          cJrzF52gwhkKI4YlGgGuiImYj3hYqZvs0hntiHwAymc=
Subject key identifier:   16:0E:02:B5:F2:A7:1C:F4:3A:1C:DD:FD:76:EF:86:DC:05:36:D0:86
Certificate issuer:       /CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
Certificate serial:       350DCD4D4BF00AAC47FBB631A6623E5A0E4912D4
Authority key identifier: 13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa
Signing time:             Fri 03 Nov 2023 23:11:52 +0000
ROA not before:           Fri 03 Nov 2023 23:06:52 +0000
ROA not after:            Fri 01 Nov 2024 23:11:52 +0000
asID:                     198585
IP address blocks:        2602:fa6e:200::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0d:cd:4d:4b:f0:0a:ac:47:fb:b6:31:a6:62:3e:5a:0e:49:12:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368
        Validity
            Not Before: Nov  3 23:06:52 2023 GMT
            Not After : Nov  1 23:11:52 2024 GMT
        Subject: CN=160E02B5F2A71CF43A1CDDFD76EF86DC0536D086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:71:2d:8a:17:71:bf:83:3e:f4:f3:06:da:
                    15:1e:68:2d:8f:a5:fb:16:68:80:9d:0d:49:eb:57:
                    fd:29:d9:24:cc:29:73:c8:a1:8a:75:2b:c3:86:09:
                    ae:f5:e1:f3:b1:ac:4d:bc:67:f9:c8:8a:cd:b6:c7:
                    90:8d:88:9f:f0:32:5e:f9:4b:a3:ff:3a:27:e1:ec:
                    de:d5:95:d7:55:e5:fe:28:cf:4f:35:01:28:64:eb:
                    03:9e:fa:38:19:59:f9:d6:83:56:f4:6c:fb:9f:c7:
                    f3:8b:04:67:f7:69:e9:37:2c:b5:66:22:6c:6b:5b:
                    74:71:80:07:56:ad:f8:97:42:94:43:d9:71:77:6f:
                    36:ef:27:37:01:35:5d:bc:b1:f6:33:49:ae:ab:49:
                    03:00:45:d8:6b:52:4b:94:ce:ea:73:e6:fa:5e:5e:
                    bf:37:cb:41:cf:e6:9d:0b:ad:67:80:3d:50:d0:5d:
                    84:eb:56:b7:df:b9:b9:c5:aa:88:e8:1b:f7:60:ca:
                    ac:36:76:0e:b3:8f:e6:3e:88:80:46:96:8c:b2:2b:
                    6d:de:cb:bb:09:d4:5c:52:c0:e9:f5:ef:eb:6d:13:
                    78:8e:97:02:9c:16:8e:53:61:f7:ee:d1:8c:17:5c:
                    89:7f:85:e6:00:5f:a7:74:75:aa:35:d1:e2:59:9a:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0E:02:B5:F2:A7:1C:F4:3A:1C:DD:FD:76:EF:86:DC:05:36:D0:86
            X509v3 Authority Key Identifier:
                keyid:13:06:58:B3:EC:48:6D:78:16:11:A5:7E:BD:A7:A4:F2:44:7E:3E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/130658B3EC486D781611A57EBDA7A4F2447E3E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/4372999715730374ece56d4e0146f0ab0ff8a29101c9f21368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d801892b69c7690293/0/323630323a666136653a3230303a3a2f34342d3434203d3e20313938353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6e:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:a3:9e:a9:75:32:7b:a6:6d:be:cf:e5:6f:5c:41:ab:5d:
         3e:58:ed:b8:af:6b:e8:57:aa:29:3d:ac:7e:84:5f:bb:d3:e0:
         1b:73:9a:0f:3e:3e:ab:66:02:83:88:3a:e4:23:4e:48:9c:91:
         79:66:a9:cf:57:d5:b5:f4:44:4f:2b:97:bf:80:86:55:ac:e9:
         64:cf:d6:b3:a2:25:38:0e:92:bd:24:f4:52:77:d9:a9:fa:be:
         a8:9f:47:83:f5:8b:80:2b:83:e5:ea:59:28:9b:34:48:96:94:
         74:95:64:b0:bf:34:b1:32:2a:ca:cb:6a:96:24:fe:86:dd:5f:
         2a:08:6d:e2:f0:9c:25:ba:2b:c4:89:ef:ea:64:e7:0c:06:3e:
         8d:64:aa:57:4e:b7:3c:24:e7:ce:c3:75:0e:e2:db:c1:c9:52:
         3a:8c:9b:24:d2:2b:8a:8d:37:0f:cc:2d:64:e7:02:04:61:a5:
         b8:74:d2:af:af:1a:e0:f7:8d:f6:f1:99:75:5d:f3:c3:1e:3f:
         ee:a1:a2:dc:1d:84:fe:54:c5:27:2b:db:da:2e:a0:d5:d3:b3:
         fc:48:aa:c1:cc:ef:cc:bc:b2:ab:2b:1a:93:32:59:e7:69:01:
         e3:de:63:54:ac:c4:5c:10:3d:e8:03:54:34:73:a3:b0:4e:0b:
         e0:99:59:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----