Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          +iv7uA5A2D4H8Tn18lYxhnoOVq9K3hQOHGMnB2ljtVk=
Subject key identifier:   5E:40:29:CC:04:88:BA:7F:96:91:81:9D:E1:F5:24:10:6B:D2:A3:3A
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       5CEC0EA7F0E3E842D78FBD5D5777E6CA36685CEA
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Tue 10 Dec 2024 03:06:50 +0000
ROA not before:           Tue 10 Dec 2024 03:01:50 +0000
ROA not after:            Tue 09 Dec 2025 03:06:50 +0000
asID:                     215907
IP address blocks:        2602:817:1006::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ec:0e:a7:f0:e3:e8:42:d7:8f:bd:5d:57:77:e6:ca:36:68:5c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec 10 03:01:50 2024 GMT
            Not After : Dec  9 03:06:50 2025 GMT
        Subject: CN=5E4029CC0488BA7F9691819DE1F524106BD2A33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:60:56:9d:b0:3f:b7:3c:32:a0:96:ca:52:
                    fd:1c:b1:ef:24:e1:59:85:5d:96:7d:d9:de:23:d2:
                    9b:3d:2c:8c:ed:38:cb:65:66:af:60:8e:4f:8f:4d:
                    89:a0:7d:0a:46:b0:23:32:2b:52:fe:3a:c4:53:13:
                    8b:0f:a8:b4:35:7a:4d:25:a9:93:2d:22:ab:06:82:
                    ea:f6:5f:e2:70:b5:e2:59:50:88:d1:cb:03:37:19:
                    c5:63:8f:6d:96:57:ff:59:5b:16:aa:ce:42:b7:20:
                    94:5b:54:34:43:df:7f:4c:dd:cc:79:5b:81:1b:1e:
                    9a:72:ca:b6:3c:14:98:98:17:2e:f2:db:99:36:6c:
                    75:8b:5c:79:7e:ee:d7:b1:3c:28:f3:a5:f9:f1:42:
                    8b:2f:04:eb:39:60:94:6f:93:59:4f:02:34:f5:ae:
                    bb:b6:af:63:09:36:72:a7:85:0f:61:61:32:5c:6b:
                    bc:06:bf:a2:10:0d:e8:8b:89:9a:9f:fb:f1:e8:cd:
                    c1:1d:43:83:74:19:13:49:45:f7:71:c3:f2:b7:c5:
                    6d:04:a7:0b:1b:e3:29:85:13:2a:fe:fe:f9:df:82:
                    a0:d4:ff:63:12:f6:5b:29:5a:12:c2:23:b0:f8:65:
                    1c:61:13:f9:56:a0:19:62:11:4d:6f:8a:96:27:fa:
                    2b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:29:CC:04:88:BA:7F:96:91:81:9D:E1:F5:24:10:6B:D2:A3:3A
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:ae:68:a8:c1:b2:ef:04:57:bf:52:d5:4e:f8:38:a3:30:
         97:9e:88:2a:e6:fd:2f:ea:72:9b:1e:fa:b8:3d:84:5a:39:a8:
         bb:03:04:87:72:0a:4d:5e:3f:7c:37:1e:6b:3e:d2:f3:1a:1c:
         50:10:f6:38:46:48:bd:2b:89:e0:21:f6:4b:d0:48:5d:8e:37:
         e9:dd:d2:89:83:75:e5:f6:1b:69:a3:f0:87:18:3b:5d:b9:0a:
         be:ab:48:0a:9b:3f:fe:fb:25:bb:86:13:b5:32:9a:16:6c:40:
         dd:db:2a:bc:b9:72:1e:8f:a9:60:91:cf:f5:c1:29:9e:af:52:
         fa:be:6d:3f:37:2c:b9:28:21:24:53:d2:1a:5c:5c:e0:85:13:
         7a:30:ca:65:f5:76:8f:7f:57:2b:9b:e5:05:c1:8a:63:f0:15:
         12:ee:90:c3:0a:0f:dc:0c:5c:b1:2c:d1:80:cb:6e:0a:2c:d4:
         c1:61:19:50:3b:ac:c7:75:1d:f9:85:58:93:ac:43:f7:8a:27:
         1a:66:0a:21:53:e4:24:aa:52:5a:aa:75:a0:18:b5:d5:f0:bd:
         d3:97:f9:84:da:0e:4f:0b:28:c7:8b:75:b6:b4:b8:23:07:fc:
         d1:97:3b:3c:22:8f:59:87:90:c0:4b:b2:d6:dc:97:d2:4f:aa:
         31:66:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----