Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          JB/9bLCUF5VNmG3e6djZU8wLeEQY5EWF2sITbWRqThg=
Subject key identifier:   42:1E:4A:C4:34:F7:DE:D2:73:8E:D7:0D:D6:BF:3A:A3:A5:F8:6A:70
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       4F9C209E58E6854923F5BB7E5290509F55BD23E3
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:32 +0000
ROA not before:           Thu 24 Oct 2024 20:58:32 +0000
ROA not after:            Thu 23 Oct 2025 21:03:32 +0000
asID:                     54148
IP address blocks:        2602:fa43:40::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9c:20:9e:58:e6:85:49:23:f5:bb:7e:52:90:50:9f:55:bd:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:32 2024 GMT
            Not After : Oct 23 21:03:32 2025 GMT
        Subject: CN=421E4AC434F7DED2738ED70DD6BF3AA3A5F86A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3e:71:35:44:0b:cf:7b:28:58:99:bc:81:94:
                    a8:6e:d2:da:05:44:06:e2:2d:01:ae:dd:cb:92:bc:
                    17:34:98:ed:25:9b:b2:ff:38:81:0b:02:95:e0:a0:
                    a5:57:68:88:82:a7:d6:08:bc:14:2a:85:0c:05:44:
                    79:5f:02:2d:e1:86:f0:ae:20:44:90:bc:d4:55:7b:
                    a0:fd:a2:b1:97:17:c2:2e:8c:70:e5:8f:0b:e4:f3:
                    56:0b:0e:39:8c:55:9e:a3:ac:74:ba:0f:fb:bf:a8:
                    6e:fa:a4:1d:2f:c6:83:46:86:5c:26:5e:4c:9c:e6:
                    33:0e:1d:34:54:92:17:19:2a:85:cb:a4:14:71:47:
                    71:17:62:10:79:5b:50:50:6f:d0:a5:14:37:0c:96:
                    b9:69:d4:96:dd:a0:19:49:e3:63:49:1c:85:0b:0d:
                    c4:86:38:8f:99:1b:f7:ac:4d:9c:1e:13:e8:43:8f:
                    a4:0a:2c:b0:55:ba:e5:35:9a:2f:3b:81:f3:4a:0b:
                    e2:19:55:51:87:95:16:00:b0:d6:cc:f1:79:38:38:
                    7a:ee:1c:67:ef:92:36:4c:09:b3:db:1b:03:d0:85:
                    60:ac:5a:e8:a1:9c:ba:6f:64:5e:49:40:2d:42:b8:
                    ff:62:41:3f:61:4e:6d:17:6e:8f:9f:04:c5:06:c2:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1E:4A:C4:34:F7:DE:D2:73:8E:D7:0D:D6:BF:3A:A3:A5:F8:6A:70
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a34303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:29:ce:df:26:88:3f:aa:b5:03:e6:33:3e:dc:ed:43:27:7e:
         5a:75:50:aa:b5:c5:dd:84:3c:fe:9c:53:f0:fa:87:d1:61:0c:
         fb:94:ad:4a:6f:c1:92:6b:f7:f1:f3:45:ac:e9:e8:30:66:97:
         f7:92:94:5a:af:e0:98:57:c3:9b:82:87:a9:7c:57:95:14:41:
         b2:e7:14:2f:97:a9:3b:47:4a:73:b5:57:7d:57:6e:14:6d:f3:
         32:67:6d:a6:15:ba:2b:60:e7:26:b1:6c:25:1d:a5:d4:4e:8a:
         57:df:66:34:e9:37:97:d5:7c:8a:c9:c9:0f:5c:b1:36:b9:ac:
         e2:b6:59:53:5c:96:13:47:32:1c:6f:f9:6f:f8:71:9b:b6:f1:
         26:1b:05:21:c5:51:62:b3:9c:ba:1e:cc:72:27:e8:da:ae:d6:
         1a:0c:ea:33:59:ab:ee:92:ea:63:5e:f2:f7:9a:24:4c:5b:0d:
         b3:1c:79:58:fc:b5:bb:f3:c0:ed:1f:bb:7d:ca:4f:f6:41:a8:
         fe:17:71:b9:88:9e:02:04:57:5f:ad:ae:0e:23:d5:f4:10:d9:
         b8:66:58:64:e7:e2:9d:f5:32:d3:67:66:ad:27:cc:a5:d1:4e:
         25:70:57:ed:15:ee:86:34:25:21:ce:82:da:8e:d3:b4:bb:c5:
         d9:a2:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----