Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138323a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3138323a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          PjRJEpTme2JvZMhi9RfFCI1IYr57I4+SZEDXvEApo+w=
Subject key identifier:   A8:D2:D4:74:0C:F5:86:B5:13:9E:79:9D:59:3D:30:5E:E6:F4:31:BE
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       29C569501E4F87013B150D4EF3301A61EE8DFF61
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138323a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:53 +0000
ROA not before:           Mon 06 Jun 2022 14:12:53 +0000
ROA not after:            Mon 05 Jun 2023 14:17:53 +0000
asID:                     61317
IP address blocks:        2602:ff62:182::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c5:69:50:1e:4f:87:01:3b:15:0d:4e:f3:30:1a:61:ee:8d:ff:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:53 2022 GMT
            Not After : Jun  5 14:17:53 2023 GMT
        Subject: CN=A8D2D4740CF586B5139E799D593D305EE6F431BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:76:a1:65:17:98:2e:f1:49:8e:df:f4:3a:
                    ea:ab:9e:6f:94:35:83:04:cc:df:93:5a:d6:b1:6f:
                    4b:2f:3a:8a:e8:80:f8:1e:78:ba:5b:4a:c3:ee:d5:
                    a0:ba:5c:59:f5:a8:71:53:32:5a:36:0d:69:26:2b:
                    79:b6:a1:fc:1f:da:47:58:26:ec:5f:a4:e0:98:89:
                    64:d4:7f:ac:40:7b:25:7a:97:63:5d:7e:59:6a:0a:
                    ad:12:c9:d5:86:0e:a8:2e:3f:94:83:c6:d0:f3:20:
                    5b:49:be:45:de:4a:a4:3f:6c:86:43:fc:57:06:83:
                    ad:67:d6:08:9f:55:5e:aa:cd:3d:47:98:76:07:2a:
                    32:43:19:88:b7:d6:50:1b:f3:e3:76:1e:e4:d7:f5:
                    a7:03:e9:c1:d9:bf:4f:e1:ff:66:6f:98:53:af:b1:
                    c3:4c:e6:f2:73:a9:1d:6b:cc:b3:06:99:6d:31:81:
                    7c:b4:1a:ee:77:5b:b1:4e:b6:bb:99:5a:29:63:bb:
                    8e:cd:eb:38:a8:d4:18:c6:f4:2a:e4:3b:65:64:4f:
                    af:86:24:76:3b:25:f4:3e:57:11:d5:6c:c8:31:22:
                    72:f6:46:44:1d:a1:61:da:18:f7:cf:f8:c2:23:6e:
                    50:33:94:3e:bf:72:26:1c:4e:6e:3a:e6:b6:21:b8:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:D4:74:0C:F5:86:B5:13:9E:79:9D:59:3D:30:5E:E6:F4:31:BE
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3138323a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:182::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:e9:a0:99:77:68:99:25:92:eb:f6:17:0b:bb:73:15:93:
         a1:1b:dd:99:b8:6f:76:e9:9a:a2:84:96:0d:b3:35:6d:53:61:
         db:e6:c0:39:96:ec:4a:7a:da:13:f3:ae:93:63:41:3a:51:1d:
         80:f6:92:3d:97:31:54:5d:ad:57:ec:11:b8:59:35:c7:e0:76:
         be:9b:24:ff:0e:1b:96:83:a4:2b:ba:32:ec:20:46:d1:44:ab:
         8d:68:57:47:3e:6c:0e:bf:81:d3:15:d5:27:e3:13:f1:af:26:
         49:c4:fa:c9:8d:e0:aa:e5:21:7a:58:e4:e3:f1:26:ed:dd:c8:
         7c:41:01:0e:bb:a1:ed:77:7a:79:56:d3:2f:3d:bd:45:0a:45:
         a9:7e:e7:e7:f5:a5:a5:53:a6:aa:57:3d:e4:84:42:2a:50:af:
         15:ca:56:88:2b:1c:e8:86:cd:0f:ac:9d:49:f3:83:db:0a:89:
         52:78:6a:64:e7:3c:4a:f7:c0:2e:36:2c:5b:9e:89:36:10:cf:
         e5:eb:34:21:ed:9d:0d:60:f9:a3:dd:1e:74:b4:aa:38:26:18:
         00:b3:bf:b4:d5:33:f7:bd:9a:40:fa:bc:a3:fb:df:a1:81:a6:
         e7:a3:df:0f:70:49:c9:e9:7d:86:f4:4a:36:73:b7:f6:3b:41:
         56:48:b6:ce
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUKcVpUB5PhwE7FQ1O8zAaYe6N/2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMjUzWhcNMjMwNjA1MTQxNzUz
WjAzMTEwLwYDVQQDEyhBOEQyRDQ3NDBDRjU4NkI1MTM5RTc5OUQ1OTNEMzA1RUU2
RjQzMUJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuJ2oWUXmC7x
SY7f9Drqq55vlDWDBMzfk1rWsW9LLzqK6ID4Hni6W0rD7tWgulxZ9ahxUzJaNg1p
Jit5tqH8H9pHWCbsX6TgmIlk1H+sQHslepdjXX5ZagqtEsnVhg6oLj+Ug8bQ8yBb
Sb5F3kqkP2yGQ/xXBoOtZ9YIn1Veqs09R5h2ByoyQxmIt9ZQG/Pjdh7k1/WnA+nB
2b9P4f9mb5hTr7HDTObyc6kda8yzBpltMYF8tBrud1uxTra7mVopY7uOzes4qNQY
xvQq5DtlZE+vhiR2OyX0PlcR1WzIMSJy9kZEHaFh2hj3z/jCI25QM5Q+v3ImHE5u
Oua2IbipKwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKjS1HQM9Ya1E555nVk9MF7m
9DG+MB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzODMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBgjANBgkq
hkiG9w0BAQsFAAOCAQEACW7poJl3aJklkuv2Fwu7cxWToRvdmbhvdumaooSWDbM1
bVNh2+bAOZbsSnraE/Ouk2NBOlEdgPaSPZcxVF2tV+wRuFk1x+B2vpsk/w4bloOk
K7oy7CBG0USrjWhXRz5sDr+B0xXVJ+MT8a8mScT6yY3gquUheljk4/Em7d3IfEEB
Druh7Xd6eVbTLz29RQpFqX7n5/WlpVOmqlc95IRCKlCvFcpWiCsc6IbND6ydSfOD
2wqJUnhqZOc8SvfALjYsW56JNhDP5es0Ie2dDWD5o90edLSqOCYYALO/tNUz972a
QPq8o/vfoYGm56PfD3BJyel9hvRKNnO39jtBVki2zg==
-----END CERTIFICATE-----