Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030393a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030393a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          MaYFeqHz5RJC3f9ZoEDbEXvyTkWa8Q3hkEgM6ZifINM=
Subject key identifier:   43:FC:3E:ED:06:EB:BD:5E:20:EE:A1:FB:64:DC:84:4D:14:21:F3:47
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       0B071A1B0ECB782B18952C404505CC8DA2BBDCC4
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030393a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 30 Dec 2024 04:07:00 +0000
ROA not before:           Mon 30 Dec 2024 04:02:00 +0000
ROA not after:            Mon 29 Dec 2025 04:07:00 +0000
asID:                     215907
IP address blocks:        2602:817:1009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:1a:1b:0e:cb:78:2b:18:95:2c:40:45:05:cc:8d:a2:bb:dc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec 30 04:02:00 2024 GMT
            Not After : Dec 29 04:07:00 2025 GMT
        Subject: CN=43FC3EED06EBBD5E20EEA1FB64DC844D1421F347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:4e:91:20:f1:d6:38:4a:6f:b1:9d:3b:00:
                    9d:a1:83:ad:10:b7:29:5e:a9:1b:18:6f:c9:61:66:
                    2f:9e:2a:2c:82:a0:70:21:17:79:57:5e:ad:46:94:
                    58:3e:d3:69:7e:40:7c:ce:21:b6:0a:77:32:51:79:
                    5e:cd:f8:03:9a:d6:75:de:61:fa:49:84:26:01:ba:
                    c2:ef:37:4d:8e:14:9f:1b:fc:50:f1:f6:7b:b8:3d:
                    b0:86:10:2d:0f:9c:b3:22:25:e5:a4:f0:f4:6b:1a:
                    49:65:61:d2:83:0e:ca:e1:29:33:09:0d:ff:3d:c6:
                    b7:bd:f7:81:0f:c9:9e:02:c5:d0:4b:9f:37:d8:e8:
                    61:02:76:2b:98:e2:08:f2:ba:04:ef:ec:f1:a9:18:
                    39:c1:17:4c:4e:92:57:36:97:40:00:e6:a5:bd:63:
                    ad:d0:4b:01:68:ff:df:78:c9:20:5e:54:15:da:03:
                    6f:7c:d8:2f:63:a5:3c:b7:dc:e8:e6:b4:14:a3:ac:
                    9c:66:24:d5:f8:47:cd:87:09:5b:fb:e7:bf:1e:57:
                    64:8d:df:47:28:42:01:d5:d7:ee:12:a0:b4:0c:ea:
                    87:83:ee:49:9c:5e:3b:d5:61:67:00:86:a2:3b:d1:
                    e1:27:8c:ec:41:c7:26:b7:a6:79:ca:f8:b4:05:b3:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:3E:ED:06:EB:BD:5E:20:EE:A1:FB:64:DC:84:4D:14:21:F3:47
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030393a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1009::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:57:d4:a6:7a:72:dc:65:43:ee:f9:fb:74:bb:85:2c:b5:
         cd:9b:6e:2f:c6:f9:9c:02:92:cd:f4:01:43:8f:69:19:f2:a1:
         15:91:15:4a:a5:70:06:7c:84:00:48:b2:bc:17:7b:df:61:fe:
         59:ff:c1:d5:3c:bb:41:a0:1f:99:3d:44:77:a3:48:b1:ba:23:
         1f:f2:5e:a0:df:9a:fa:7f:37:a5:e5:84:ae:89:15:a5:29:cf:
         b6:91:b4:8c:86:53:46:de:e1:c0:38:91:ef:12:89:eb:bf:9e:
         75:4d:28:91:ab:67:b8:2b:2a:d5:b0:80:13:ca:2a:34:7e:9a:
         41:a9:95:1d:55:d9:47:23:6f:54:f8:82:ea:65:5a:7d:2e:8a:
         92:5f:95:64:b6:ec:00:0e:6c:69:cc:ca:3d:7b:ed:51:e8:39:
         89:47:84:eb:22:ff:ea:9e:5a:fc:d1:92:f2:27:3f:ea:ee:31:
         67:b3:91:dc:a7:97:20:6c:7a:ae:68:bb:e0:4e:35:c8:02:f3:
         46:67:5e:eb:6a:c1:25:7a:4f:1e:c3:ee:cb:85:32:2f:6b:b5:
         6c:28:60:67:a1:d5:3f:bc:ba:3a:3a:01:62:24:70:6f:ad:97:
         03:85:e3:a7:eb:7c:fb:a3:91:9d:e4:bf:de:3f:23:f5:e0:db:
         87:a5:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----