Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230323a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3230323a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          3j5f/vOGmOzHOdDlmx0Q+NCLgYJJcZXn9LtXwKwTVNQ=
Subject key identifier:   31:1D:41:41:12:43:54:72:BA:48:63:A4:AC:28:9D:0A:AD:F4:67:52
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       0A53759287CCA46F3BC61F7DFEFEDDA8AF6B9B27
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230323a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:59 +0000
ROA not before:           Mon 06 Jun 2022 14:12:59 +0000
ROA not after:            Mon 05 Jun 2023 14:17:59 +0000
asID:                     61317
IP address blocks:        2602:ff62:202::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:53:75:92:87:cc:a4:6f:3b:c6:1f:7d:fe:fe:dd:a8:af:6b:9b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:59 2022 GMT
            Not After : Jun  5 14:17:59 2023 GMT
        Subject: CN=311D414112435472BA4863A4AC289D0AADF46752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:dc:b8:26:df:89:eb:f6:53:99:cc:a0:31:
                    3a:26:ff:9d:4d:8b:1a:0c:93:f7:96:c1:7b:ea:a0:
                    fb:65:87:cc:ea:10:52:54:c4:62:79:d2:c0:8d:ef:
                    41:11:4e:0d:29:5a:40:97:a5:d9:73:70:37:58:03:
                    83:a5:0b:43:95:3c:c2:18:c9:10:4d:e0:45:f4:75:
                    b9:d3:18:42:c3:9a:83:e5:f0:c8:c1:15:5f:42:a3:
                    d2:11:bf:3a:b2:26:f5:0e:6b:5b:34:23:30:4b:41:
                    2b:5a:78:61:00:3f:5d:77:80:03:f7:a1:a7:0b:cf:
                    65:cf:ea:4a:10:3e:e3:a0:b6:71:34:08:04:cb:0d:
                    95:89:1d:e3:ae:37:d0:18:48:66:38:8f:3e:76:e5:
                    52:3c:55:b0:fb:35:97:0f:68:fa:fe:c2:08:38:8a:
                    9b:76:dc:05:7c:ff:85:0f:9a:29:4c:9e:51:f4:ee:
                    21:0f:55:24:be:e3:33:b7:b7:3d:c7:c0:2f:4c:e2:
                    d3:63:04:92:bd:9b:f5:70:7e:c3:a7:c3:70:97:31:
                    a4:2d:af:14:36:e3:3a:6f:9a:4b:f4:1d:0c:73:2f:
                    2d:3a:3e:3a:2b:3f:50:f2:5b:df:fd:06:40:7e:3d:
                    84:c3:06:d4:5e:37:14:41:5c:5c:30:1f:3c:ba:16:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1D:41:41:12:43:54:72:BA:48:63:A4:AC:28:9D:0A:AD:F4:67:52
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230323a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:84:26:61:74:01:e0:f7:03:4d:a1:e3:ed:6d:20:41:b2:8c:
         5c:5b:fd:a2:0b:d5:6c:09:16:97:df:94:ce:14:b5:a6:76:d4:
         09:03:b4:fe:fb:db:65:2a:44:ec:0d:06:ee:4d:38:1a:13:7b:
         13:24:b0:a6:56:a7:33:b5:a5:64:ee:94:5e:81:f6:39:50:49:
         a1:c5:a3:e3:07:f0:ff:b3:0f:18:3d:67:09:a7:08:ca:8a:e6:
         57:74:75:4b:5e:24:d4:37:b6:2b:c1:71:8f:41:9d:29:bf:be:
         a7:92:34:d7:c7:53:ec:1c:cd:5d:44:e2:ef:f1:63:8f:c8:1e:
         5c:a8:95:e7:7e:04:f3:28:67:e3:9e:ef:a9:39:a3:9f:40:97:
         75:ac:02:21:91:a2:1e:28:15:ad:2d:61:a5:f7:e9:b9:e2:9c:
         1a:aa:76:4c:56:2a:42:71:47:c4:31:e0:d4:b4:28:29:10:b5:
         a5:2e:24:89:3a:de:6c:7c:a2:a4:3f:aa:80:43:7b:43:ec:d8:
         20:62:e0:77:ad:b1:7d:49:7d:78:ec:80:e7:ff:62:6d:7d:62:
         ad:b3:bd:aa:80:16:25:5a:cf:a8:56:68:cf:0e:75:b0:21:9a:
         af:1f:78:7b:e9:92:96:9b:16:96:59:bc:6d:9e:9b:69:c7:cb:
         75:a9:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----