Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/323630323a663863363a35343a3a2f34382d3438203d3e203534323831.roa
File:                     323630323a663863363a35343a3a2f34382d3438203d3e203534323831.roa (raw, json)
Hash identifier:          IqR3cGRBNjejfmHCCPnWEGNViok2OE8dHYPbTg1y8QA=
Subject key identifier:   59:B0:FC:C0:1F:28:7F:CD:0B:EE:D0:13:13:29:3C:B2:4D:9A:7A:E1
Certificate issuer:       /CN=cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b
Certificate serial:       65A67607031793E57D58C4B9E3BC588EFC50EFFD
Authority key identifier: 4E:A2:E4:D0:69:52:91:C7:87:2E:6C:F8:8E:64:BA:9B:A2:3E:F7:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/323630323a663863363a35343a3a2f34382d3438203d3e203534323831.roa
Signing time:             Wed 10 Jul 2024 14:57:45 +0000
ROA not before:           Wed 10 Jul 2024 14:52:45 +0000
ROA not after:            Wed 09 Jul 2025 14:57:45 +0000
asID:                     54281
IP address blocks:        2602:f8c6:54::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a6:76:07:03:17:93:e5:7d:58:c4:b9:e3:bc:58:8e:fc:50:ef:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b
        Validity
            Not Before: Jul 10 14:52:45 2024 GMT
            Not After : Jul  9 14:57:45 2025 GMT
        Subject: CN=59B0FCC01F287FCD0BEED01313293CB24D9A7AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:8a:f7:99:68:12:6a:30:cb:2f:b9:80:e0:
                    d7:8f:f4:55:12:cb:b9:82:f8:5a:ce:41:22:b6:d3:
                    fc:21:df:d6:f1:28:ba:6b:e0:3d:1c:e1:19:a9:d5:
                    89:aa:9f:59:22:3d:13:f5:c4:ee:7a:6b:e3:94:9f:
                    ec:8e:93:4d:f6:32:0d:7c:5f:3a:b0:3f:98:73:94:
                    4f:34:a6:28:da:44:8c:b3:3c:71:1d:1e:52:56:c0:
                    81:ad:7e:8c:ff:9e:6b:a9:98:ca:06:00:d1:ad:b0:
                    98:ad:08:a6:04:f6:6c:b3:82:54:a7:81:2c:d6:c5:
                    68:6d:70:a0:3c:42:36:cf:47:4b:20:d0:3b:02:c3:
                    fc:a0:02:49:00:d3:4d:5a:cb:d4:73:3b:a7:e8:62:
                    9e:28:89:f5:cc:f2:f6:92:8e:fd:82:57:04:d1:f4:
                    9f:83:d5:4f:81:60:3d:1a:62:35:81:d2:d7:4c:f6:
                    c8:d1:27:01:2f:e0:3a:e6:31:1b:d2:5a:16:9c:68:
                    8f:f5:cb:dc:88:fd:76:8b:f3:7c:8a:72:a3:2e:7d:
                    30:74:d2:d5:c6:c9:f1:64:a2:71:9d:7a:13:b8:66:
                    38:ad:2c:4b:56:ef:08:c8:5c:8e:c4:c5:e1:44:3a:
                    ae:72:9c:f7:e4:f4:2f:33:04:6b:5c:fa:b0:7b:58:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B0:FC:C0:1F:28:7F:CD:0B:EE:D0:13:13:29:3C:B2:4D:9A:7A:E1
            X509v3 Authority Key Identifier:
                keyid:4E:A2:E4:D0:69:52:91:C7:87:2E:6C:F8:8E:64:BA:9B:A2:3E:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/4EA2E4D0695291C7872E6CF88E64BA9BA23EF770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/323630323a663863363a35343a3a2f34382d3438203d3e203534323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c6:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:df:d5:b7:fc:cd:69:ca:88:7d:fb:50:e3:a5:1c:dd:d4:
         9b:86:3d:28:d9:86:2d:29:80:46:41:f6:19:df:2f:09:8a:77:
         94:3c:58:5e:8b:e8:4a:b2:f0:8b:1f:87:9e:6a:17:f4:9b:a6:
         2f:8f:91:85:74:3e:b2:de:e8:20:81:50:6d:bb:33:5c:02:7c:
         3e:b9:31:06:b7:19:b3:05:7e:8a:a9:0d:fd:b4:6e:fd:23:ff:
         76:7a:11:51:c3:8d:1e:2a:a4:88:72:5b:d1:46:6a:a2:51:a4:
         6d:84:d8:86:9e:a5:21:40:08:cf:dd:1f:d3:85:e1:7c:b0:1e:
         91:b8:02:91:c8:0e:cc:f4:3b:c2:35:d4:b7:4a:01:6a:c6:8c:
         5d:b4:c9:5e:ed:75:31:11:d6:68:2c:c9:bb:7d:25:c5:62:f1:
         86:13:b7:c4:36:37:e1:96:0d:48:95:ea:a8:3e:4d:20:d5:d4:
         b6:c9:3e:14:ed:04:fd:1a:6b:0e:6c:9e:97:df:f3:47:a6:2b:
         6f:42:66:0e:2e:e2:bb:2e:78:5d:cf:8e:1e:43:d8:b7:83:cb:
         85:e1:41:8d:9c:f8:84:ed:71:76:37:d0:da:d5:53:a0:65:f9:
         01:a3:a6:fa:ba:f4:46:01:3a:0d:e9:da:dc:ab:13:fa:b0:f9:
         b7:a2:a0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----