Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          wYegxQoiL726xBYI3e/woxNedOCd2CDNUvmVN3J8RxE=
Subject key identifier:   CC:11:ED:09:21:E5:37:B2:C6:EC:C1:BD:E1:4E:A9:E8:E5:E7:DE:8A
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       227F81A997FCC9D821F7442277C3D561816F788B
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Tue 07 Jan 2025 15:01:03 +0000
ROA not before:           Tue 07 Jan 2025 14:56:03 +0000
ROA not after:            Tue 06 Jan 2026 15:01:03 +0000
asID:                     137908
IP address blocks:        2602:f9ba:a8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7f:81:a9:97:fc:c9:d8:21:f7:44:22:77:c3:d5:61:81:6f:78:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Jan  7 14:56:03 2025 GMT
            Not After : Jan  6 15:01:03 2026 GMT
        Subject: CN=CC11ED0921E537B2C6ECC1BDE14EA9E8E5E7DE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:bf:7a:44:1a:d0:e4:25:e8:20:a9:57:04:
                    f3:27:be:30:85:ec:85:c5:a9:1b:2a:9d:82:f8:dd:
                    e5:08:33:b9:cb:60:a7:c9:e4:12:28:8f:ed:c3:83:
                    ab:e6:7f:ef:95:f6:27:f3:fe:dc:33:e8:15:f5:73:
                    40:35:0f:ea:ab:8a:e6:c8:48:56:d2:ce:18:39:40:
                    f9:f7:13:a7:71:6c:c2:4f:07:5e:09:a6:bf:55:d3:
                    ae:20:10:55:08:53:23:ca:8e:83:f0:64:cc:c9:1a:
                    90:3c:38:83:6c:04:89:53:a3:47:91:a1:63:b8:09:
                    16:13:d7:be:2e:0e:63:b8:be:96:98:74:65:06:37:
                    c2:20:d7:74:8e:80:4b:6c:33:2b:36:05:10:66:6f:
                    37:4c:4b:4d:a7:40:0c:0f:04:db:c4:3f:e9:10:f6:
                    78:bc:9d:c0:9a:df:f6:d2:24:a1:c7:96:67:7f:94:
                    63:ec:ca:e2:d9:74:a9:da:ae:72:75:b9:45:59:58:
                    f3:d0:8c:49:76:b0:a8:7e:d8:15:b0:8c:71:53:7c:
                    44:58:a8:35:b1:d7:dd:e8:71:30:43:b2:6c:0d:da:
                    6d:27:fd:22:cf:21:5a:d0:4b:e8:d8:73:3a:7a:5c:
                    24:4a:81:52:d6:4b:57:f6:3c:92:7e:b2:e4:5f:2e:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:ED:09:21:E5:37:B2:C6:EC:C1:BD:E1:4E:A9:E8:E5:E7:DE:8A
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61383a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:48:6c:de:84:37:31:38:ac:78:42:c4:e7:1a:e9:1b:95:2e:
         1a:73:f2:e3:d7:1c:f9:c0:df:9b:59:92:27:70:7b:31:33:17:
         f8:c0:ef:5a:e7:ce:e6:3c:64:4a:44:97:74:30:a8:a8:64:25:
         2c:94:9d:ee:aa:9f:6a:e4:2a:a5:1d:35:5d:88:08:7a:a6:fe:
         b7:7b:bc:a6:f6:c8:82:48:ce:72:5b:b3:7a:80:d7:ae:7f:42:
         e2:99:23:77:53:60:f8:2a:3f:82:29:af:7c:90:dd:21:d1:38:
         36:41:80:17:74:cb:f2:8e:8a:e9:f4:75:0c:54:a2:d8:cc:80:
         e1:08:80:64:dd:4f:db:68:8d:af:d4:f2:1c:83:b2:8b:67:65:
         8b:db:fc:1f:49:50:8b:e8:1e:df:b6:eb:19:54:00:8a:21:5e:
         82:00:fb:0f:ad:cf:43:dc:01:c0:33:a2:74:f2:20:79:b2:cb:
         7f:dd:12:9a:8b:d3:46:fd:7d:bc:b0:14:91:74:00:70:7b:61:
         1c:09:e9:87:83:4c:d0:67:d3:b7:c3:7d:21:19:b8:28:64:70:
         d4:6b:27:05:a0:29:a7:c8:e3:3e:1f:84:c6:57:22:b3:9e:a0:
         58:4d:59:93:44:37:60:a2:09:15:ff:b3:30:73:72:4e:b2:d6:
         c1:72:56:3c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUIn+BqZf8ydgh90Qid8PVYYFveIswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzlhNzQxYjI5ZTVmZjZmYTUyMzFmNzc5
NDg4ZTcwN2IyOTBmMmYyNDcwHhcNMjUwMTA3MTQ1NjAzWhcNMjYwMTA2MTUwMTAz
WjAzMTEwLwYDVQQDEyhDQzExRUQwOTIxRTUzN0IyQzZFQ0MxQkRFMTRFQTlFOEU1
RTdERThBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNy/ekQa0OQl
6CCpVwTzJ74wheyFxakbKp2C+N3lCDO5y2CnyeQSKI/tw4Or5n/vlfYn8/7cM+gV
9XNANQ/qq4rmyEhW0s4YOUD59xOncWzCTwdeCaa/VdOuIBBVCFMjyo6D8GTMyRqQ
PDiDbASJU6NHkaFjuAkWE9e+Lg5juL6WmHRlBjfCINd0joBLbDMrNgUQZm83TEtN
p0AMDwTbxD/pEPZ4vJ3Amt/20iShx5Znf5Rj7Mri2XSp2q5ydblFWVjz0IxJdrCo
ftgVsIxxU3xEWKg1sdfd6HEwQ7JsDdptJ/0izyFa0Evo2HM6elwkSoFS1ktX9jyS
frLkXy6YdQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMwR7Qkh5TeyxuzBveFOqejl
596KMB8GA1UdIwQYMBaAFMGadEeFX3rFJw2VwW4TRVoqXbMqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTE1Y2IwYTQwMTkxOTAyMmVmMDcxZWZlLzAv
QzE5QTc0NDc4NTVGN0FDNTI3MEQ5NUMxNkUxMzQ1NUEyQTVEQjMyQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OWE3NDFiMjllNWZmNmZhNTIzMWY3Nzk0ODhlNzA3YjI5MGYyZjI0Ny5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxNWNiMGE0MDE5MTkw
MjJlZjA3MWVmZS8wLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjEzODNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzMzNzM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boAqDANBgkq
hkiG9w0BAQsFAAOCAQEAdUhs3oQ3MTiseELE5xrpG5UuGnPy49cc+cDfm1mSJ3B7
MTMX+MDvWufO5jxkSkSXdDCoqGQlLJSd7qqfauQqpR01XYgIeqb+t3u8pvbIgkjO
cluzeoDXrn9C4pkjd1Ng+Co/gimvfJDdIdE4NkGAF3TL8o6K6fR1DFSi2MyA4QiA
ZN1P22iNr9TyHIOyi2dli9v8H0lQi+ge37brGVQAiiFeggD7D63PQ9wBwDOidPIg
ebLLf90SmovTRv19vLAUkXQAcHthHAnph4NM0GfTt8N9IRm4KGRw1GsnBaApp8jj
Ph+Exlcis56gWE1Zk0Q3YKIJFf+zMHNyTrLWwXJWPA==
-----END CERTIFICATE-----