Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34382d3438203d3e203539373330.roa
File:                     323630323a666161383a3a2f34382d3438203d3e203539373330.roa (raw, json)
Hash identifier:          5MMUDVLsi6XdfYgalyBBvWd5A30H88c+eHVJMrObyyA=
Subject key identifier:   65:7F:30:65:79:99:A5:CD:45:C6:43:EC:6D:C1:D9:53:97:2C:3B:CB
Certificate issuer:       /CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
Certificate serial:       6766D69CDB0B2EAFD4B659A233413B742CDF0C1D
Authority key identifier: E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34382d3438203d3e203539373330.roa
Signing time:             Mon 10 Apr 2023 03:41:43 +0000
ROA not before:           Mon 10 Apr 2023 03:36:43 +0000
ROA not after:            Mon 08 Apr 2024 03:41:43 +0000
asID:                     59730
IP address blocks:        2602:faa8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:66:d6:9c:db:0b:2e:af:d4:b6:59:a2:33:41:3b:74:2c:df:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0
        Validity
            Not Before: Apr 10 03:36:43 2023 GMT
            Not After : Apr  8 03:41:43 2024 GMT
        Subject: CN=657F30657999A5CD45C643EC6DC1D953972C3BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:71:88:7b:46:27:33:17:bd:b1:de:11:de:71:
                    1a:d1:17:61:a8:36:5d:a1:02:bc:53:d2:45:33:92:
                    69:fe:cf:24:a3:9e:e2:89:2e:e2:1a:81:65:c3:51:
                    87:fd:02:82:f0:bf:a0:92:ee:86:21:06:c3:b1:73:
                    74:16:86:90:e9:55:28:e3:0f:94:71:d5:52:5d:1c:
                    d3:f9:75:57:c7:8c:99:49:f9:3f:5b:66:b5:2d:48:
                    d6:7f:f1:b6:a3:0d:da:ad:bf:aa:3d:0d:d3:9a:93:
                    5d:64:ec:1b:e5:32:97:d2:53:cc:e0:54:4a:72:d4:
                    22:16:ba:c3:b5:65:1a:f4:5f:8f:37:d4:63:31:91:
                    0b:32:59:a5:e7:64:37:b9:c1:3b:d6:fe:64:06:ae:
                    dd:c2:e3:e6:e8:5f:4d:dc:fb:d7:ff:1c:0e:61:15:
                    13:37:85:ed:9d:8e:84:5a:45:cd:15:a7:3a:7d:cc:
                    7e:16:39:7e:84:51:2a:5d:c7:d9:7e:fa:90:56:e5:
                    84:8b:88:18:1b:72:bd:7e:03:eb:64:9a:72:b0:a2:
                    7f:f1:fb:63:88:13:91:6c:98:fc:b3:02:16:d8:f6:
                    f9:8b:9a:2c:c6:94:b8:86:4f:d2:08:3e:18:ac:a9:
                    30:35:a3:be:1b:0f:5a:7e:bf:2d:08:dd:cf:a9:8f:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7F:30:65:79:99:A5:CD:45:C6:43:EC:6D:C1:D9:53:97:2C:3B:CB
            X509v3 Authority Key Identifier:
                keyid:E6:93:D1:C7:7F:F6:45:B5:C9:57:59:A0:D6:CE:A4:88:2D:05:9D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/E693D1C77FF645B5C95759A0D6CEA4882D059D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb59f20ce7d37fb6bf2102ec02adfa51449bb941a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/323630323a666161383a3a2f34382d3438203d3e203539373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:ea:31:ef:83:24:d7:94:b4:fb:f9:fb:21:2d:38:ad:64:
         96:e0:dc:48:d9:81:5a:37:44:77:27:96:85:79:51:06:5d:25:
         c2:89:29:4a:8c:e1:e2:49:fd:9d:a1:2a:76:96:e2:14:00:68:
         a0:17:91:da:6d:b7:67:d3:c4:6d:f2:c0:c1:4d:c5:58:51:30:
         fd:09:c4:38:4e:2f:6f:4e:af:ae:ad:66:bf:f1:b3:c3:12:5d:
         90:c2:4d:aa:78:f6:67:55:c3:b8:ef:74:9b:73:52:37:3f:cd:
         ed:7e:0b:c8:ba:f8:87:fb:59:e3:3e:12:08:bf:11:a1:82:f0:
         53:75:f4:49:86:2d:f1:7c:d4:1d:a3:11:4b:63:f2:9c:a8:72:
         11:e6:d1:3d:3f:df:4e:ff:58:d3:49:17:99:b6:bf:ab:c6:d6:
         44:6f:77:45:fb:19:64:9a:9f:9c:02:ee:e2:fa:27:2f:f2:6e:
         cc:d1:63:76:ef:9d:51:34:f0:d0:d5:31:07:9b:37:11:b3:61:
         cd:cb:02:16:94:99:d6:34:35:24:99:3d:62:17:92:76:3b:e4:
         5a:6e:12:c7:87:c0:e1:b8:dc:cc:52:28:ed:88:4a:b3:f4:18:
         1e:5d:a1:28:7b:db:06:d0:57:61:fc:a2:6d:c8:66:04:ea:4e:
         a0:c2:be:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----