Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66303a3a2f34382d3438203d3e203531363932.roa
File:                     323630323a663836353a66303a3a2f34382d3438203d3e203531363932.roa (raw, json)
Hash identifier:          OKHldlyPDCcD2sEkt1Hgt+jC4tN/776wgbCl32neOCY=
Subject key identifier:   AA:8E:D2:98:03:BB:96:33:C4:8A:BC:AC:5E:E2:1D:24:BD:C8:E5:0F
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       1D422BC2D2C60EF05C80AA55FEAF735F24C4FFFE
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66303a3a2f34382d3438203d3e203531363932.roa
Signing time:             Sat 16 Nov 2024 20:58:26 +0000
ROA not before:           Sat 16 Nov 2024 20:53:26 +0000
ROA not after:            Sat 15 Nov 2025 20:58:26 +0000
asID:                     51692
IP address blocks:        2602:f865:f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:42:2b:c2:d2:c6:0e:f0:5c:80:aa:55:fe:af:73:5f:24:c4:ff:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 20:53:26 2024 GMT
            Not After : Nov 15 20:58:26 2025 GMT
        Subject: CN=AA8ED29803BB9633C48ABCAC5EE21D24BDC8E50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:9d:83:75:0d:fb:b0:0b:25:3d:23:ee:7b:
                    5e:26:07:da:90:f5:9a:0b:aa:18:3c:d9:c3:12:ea:
                    93:e0:bf:a1:55:6d:8d:8a:87:d7:88:b6:a4:03:58:
                    ab:b3:23:1b:5b:37:de:0b:50:f7:ba:cd:c0:12:6c:
                    3b:d3:07:46:80:bd:fe:6f:67:9b:8e:c3:3d:f5:67:
                    9e:cc:cd:cb:ea:2a:1c:b0:59:5f:f1:f2:ae:bb:4e:
                    06:af:b2:92:7d:ac:f6:b2:e7:ec:06:b7:12:4b:0d:
                    7e:12:7e:6a:3f:35:2e:4d:9d:6c:eb:a1:f4:43:cf:
                    f7:9b:94:15:a5:5d:85:7e:0d:44:4b:58:b9:4e:40:
                    03:a5:28:a4:5a:1d:74:39:48:a2:a1:e4:37:9d:0b:
                    b4:12:18:b6:ce:7d:92:68:cc:11:04:06:a7:85:b6:
                    10:b6:2f:3a:c9:7c:86:78:89:72:f6:0f:86:9c:35:
                    c9:ed:5d:cb:2e:90:61:b9:80:f6:d7:a7:a7:5b:63:
                    1c:d5:b0:36:2b:2d:08:45:92:ea:fa:8e:1e:f5:29:
                    a1:a4:cd:5f:ab:f5:a4:be:c0:0b:27:30:ad:6d:cc:
                    a4:ff:65:8e:80:30:e2:44:20:c6:15:60:9b:ca:41:
                    46:f0:c9:6e:45:67:97:28:22:07:70:27:27:35:d3:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:D2:98:03:BB:96:33:C4:8A:BC:AC:5E:E2:1D:24:BD:C8:E5:0F
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a66303a3a2f34382d3438203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:e1:d8:a4:02:19:ec:27:69:5d:68:d5:02:9b:bc:41:d9:1b:
         76:9f:b5:36:7d:73:39:d6:db:90:67:e2:33:38:d7:3e:54:3b:
         c7:77:28:9e:76:d1:c3:70:f2:b8:bc:0c:ad:90:2e:65:8f:9a:
         85:83:85:7e:b3:7a:7d:14:c3:b6:33:03:ce:77:9b:5d:50:a1:
         75:94:e2:41:55:be:b0:be:d3:37:a5:46:06:51:45:ae:35:50:
         2a:37:ff:72:2f:7c:68:d5:45:a4:c6:77:3e:c6:4e:d9:a0:8d:
         42:61:ce:0b:a3:c5:20:a8:64:97:30:ac:0f:14:81:b3:83:c1:
         67:8a:3e:75:c0:93:0c:c0:ca:11:82:53:50:45:e6:27:9d:0f:
         b4:89:38:90:32:9e:16:3c:af:79:8f:88:c4:cc:98:68:03:89:
         81:8a:88:2d:25:32:06:dc:2b:60:5d:e7:ef:07:7f:a2:03:a6:
         d5:aa:d8:a3:5b:eb:29:d0:5a:2b:17:65:a4:67:8f:19:4f:f2:
         4e:13:1c:74:b2:de:d0:92:d2:74:0e:ce:65:fe:60:6a:36:1e:
         6e:e9:fe:a8:a2:bf:e8:b1:08:6d:86:fc:97:0a:7b:ce:79:8b:
         81:e1:89:64:81:06:a1:ff:b3:09:0a:fc:48:aa:87:f0:40:3f:
         f5:b0:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----