Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138313a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3138313a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          70eqnkibhCprzMrJ089qDAnQe5D9tVQpsxnktJ8EydM=
Subject key identifier:   CF:9C:C8:2E:01:31:40:39:2F:20:22:9A:A3:2B:0D:61:64:24:12:95
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       120AFCB53CBB5F2385C2742F3321C64415592E29
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138313a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:49 +0000
ROA not before:           Mon 06 Jun 2022 14:12:49 +0000
ROA not after:            Mon 05 Jun 2023 14:17:49 +0000
asID:                     61317
IP address blocks:        2602:ff62:181::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0a:fc:b5:3c:bb:5f:23:85:c2:74:2f:33:21:c6:44:15:59:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:49 2022 GMT
            Not After : Jun  5 14:17:49 2023 GMT
        Subject: CN=CF9CC82E013140392F20229AA32B0D6164241295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:96:46:31:0c:46:a9:65:34:60:e0:7d:f2:
                    f3:bc:61:53:72:e0:2d:29:51:00:3a:ce:6c:e5:97:
                    d3:fa:ae:66:57:39:fb:80:4d:18:1e:89:a7:eb:ee:
                    ba:dc:3c:1d:12:d1:e6:be:5e:34:ff:60:a9:41:12:
                    9b:0a:12:2d:6f:da:9d:89:1e:03:69:6d:cf:c4:43:
                    9f:0a:ba:b7:d5:0e:93:d7:14:38:3e:c6:50:da:22:
                    c2:c8:b7:61:c7:96:2a:10:d5:50:47:22:e1:99:62:
                    42:67:8b:86:db:a0:0b:a9:a6:a6:41:7a:ae:6c:d9:
                    ce:7f:85:ee:86:5e:b9:67:9a:29:c5:cb:a6:bc:1b:
                    b7:d7:d3:d7:d7:78:db:93:e7:3c:37:4a:85:27:d3:
                    5e:e1:95:30:93:c8:73:16:af:df:10:93:31:aa:39:
                    01:0d:66:72:e0:f9:a7:3b:2b:ce:e0:47:11:67:a9:
                    57:17:56:5f:c2:79:c4:95:94:02:7d:0e:6a:7c:18:
                    f9:a9:e8:bb:06:33:ad:8b:72:ab:95:6c:11:a8:e2:
                    26:1d:c4:9d:10:71:a6:8e:ca:a1:24:19:35:28:16:
                    92:62:89:ad:04:aa:47:60:fa:0c:d0:f0:ac:4d:bf:
                    11:86:3f:21:42:0d:b4:08:85:3a:8b:65:7c:c6:27:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:C8:2E:01:31:40:39:2F:20:22:9A:A3:2B:0D:61:64:24:12:95
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138313a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:f7:12:91:91:23:c1:cb:5a:08:09:c6:2b:ea:0a:6f:d3:
         1c:23:1f:38:cb:2c:6a:3d:15:58:5e:9d:6a:94:39:08:76:63:
         12:74:44:e5:8f:93:fd:f6:1a:ea:18:00:4f:22:76:9c:78:e6:
         c2:5e:d5:3a:8e:e9:3c:c8:49:74:d7:b7:95:b2:a0:ea:3e:1a:
         9f:42:51:3b:35:0b:03:53:41:cb:00:b8:17:1e:9f:12:db:d1:
         85:41:5f:13:a8:03:79:3f:85:25:37:53:91:96:0a:c3:7a:bb:
         21:68:9b:e5:4f:0d:19:7c:85:86:e8:c1:63:b5:c0:ab:09:08:
         27:96:5d:8a:db:44:92:16:86:8a:51:73:d2:66:5a:6d:cf:5d:
         83:51:cc:76:71:22:f2:5d:77:39:50:5a:c0:cd:e5:89:b2:f4:
         ee:e2:7e:3a:e2:bb:74:ff:24:ea:f5:ac:2c:4a:71:8b:8b:ae:
         a7:c1:cb:62:a7:5c:fb:87:be:73:36:c5:45:1a:bf:79:91:63:
         cf:c9:86:07:28:a5:ed:37:45:14:6b:76:35:55:93:aa:4c:d8:
         c4:97:fd:0d:05:49:39:5a:e6:c9:26:ce:36:a2:15:0a:98:13:
         b6:00:7c:8a:40:47:3c:22:02:35:d8:fe:3d:89:46:5a:13:cb:
         db:41:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----