Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138303a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3138303a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          gCNsREg/mfc1MnU50JniVl9oAMlS455nXCeFcLzqj28=
Subject key identifier:   2B:35:A9:A1:27:66:CC:8E:A4:62:CE:06:7F:56:49:5F:C1:F1:CC:1D
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       6EE61E0014501CE3EFED41934773108D6B7E13E8
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138303a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:47 +0000
ROA not before:           Mon 06 Jun 2022 14:12:47 +0000
ROA not after:            Mon 05 Jun 2023 14:17:47 +0000
asID:                     61317
IP address blocks:        2602:ff62:180::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e6:1e:00:14:50:1c:e3:ef:ed:41:93:47:73:10:8d:6b:7e:13:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:47 2022 GMT
            Not After : Jun  5 14:17:47 2023 GMT
        Subject: CN=2B35A9A12766CC8EA462CE067F56495FC1F1CC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:f4:71:6e:78:80:fb:7a:3c:c5:ed:47:5c:
                    99:d2:4f:f8:fe:7f:fc:0c:dd:47:f7:b2:7d:bc:a5:
                    51:d5:ec:e9:7e:91:31:53:55:e8:af:eb:4f:8c:37:
                    c4:b5:92:2f:04:ff:64:a7:8e:5f:e7:7b:3c:ef:15:
                    91:0b:7b:10:af:35:8c:6a:8c:d1:44:7c:68:64:a9:
                    b7:8d:e5:80:09:b0:ca:2b:0a:74:66:9e:1a:6d:d1:
                    74:97:d2:96:1d:c2:d3:0e:00:4b:21:82:36:53:85:
                    97:6f:09:23:fe:cc:8a:88:d6:59:20:dd:69:ac:ff:
                    01:cc:65:b9:52:db:f2:52:87:b0:54:43:ae:a8:2e:
                    f5:16:2f:4e:d3:ad:e9:9c:e8:af:fe:0e:25:ca:66:
                    79:45:30:cd:96:fc:c3:ce:84:1f:6d:c6:0c:33:68:
                    fe:bb:a2:a0:ef:89:e3:a5:85:b8:1e:77:72:f5:8a:
                    7b:4d:dc:02:2d:5d:6c:c4:ab:39:17:56:b0:c2:f7:
                    a4:43:fe:d2:63:c2:d6:d1:53:c0:d0:be:9a:91:b4:
                    83:4f:ee:47:9b:90:ab:c5:e5:8d:05:b1:51:85:09:
                    02:20:db:7c:9f:db:27:79:59:c3:2b:2d:dc:9e:2a:
                    5c:0e:2a:95:9c:95:16:e9:d6:2f:05:68:f4:85:29:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:35:A9:A1:27:66:CC:8E:A4:62:CE:06:7F:56:49:5F:C1:F1:CC:1D
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138303a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:54:50:f4:d0:11:f5:67:6f:36:78:74:dc:15:d4:86:ac:4b:
         56:56:e1:4d:46:ea:11:ec:7b:9c:d6:15:e9:00:6a:02:55:f6:
         37:a3:60:df:06:8d:df:1b:e7:0f:5b:89:6c:71:42:0f:42:60:
         e4:09:05:60:70:b1:53:1f:54:be:82:26:21:7e:23:71:c4:b8:
         59:d8:4e:27:a1:4a:17:a7:4e:a5:d3:9c:cf:8f:0c:bd:7e:5a:
         66:7d:86:92:3a:a4:52:ff:a5:31:cd:b7:5f:43:2b:70:e0:92:
         a9:3f:4a:a9:58:41:4e:d7:31:95:a9:11:8c:36:89:ed:fe:78:
         30:99:dd:0b:59:c1:d7:d1:19:d5:ca:c8:3b:84:63:1c:bb:27:
         17:51:7d:d3:8b:ba:b1:31:c3:7d:9a:da:59:c1:1f:97:97:23:
         35:95:0a:cd:bc:74:0a:03:d3:33:d7:6e:bc:4a:90:ca:94:d2:
         c4:e5:d4:12:f0:b0:9c:5e:b4:53:aa:eb:fc:c3:4a:7a:ff:02:
         8b:dd:f7:f0:dc:9f:a1:9c:2e:78:fb:6e:04:9a:d1:74:3a:63:
         77:81:f0:2e:81:4b:9f:85:63:16:32:6a:16:60:86:01:1b:6f:
         40:73:be:8e:40:eb:3b:47:d1:cd:69:7e:2c:0c:25:2f:6f:82:
         60:34:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----