Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230343a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3230343a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          VSydAX4xS74O69METeou8ZyIbKHaTgPRNedV8yzwJ/8=
Subject key identifier:   3C:14:9B:A0:56:FD:2B:1C:03:E7:89:86:1A:81:82:16:A2:71:E0:D4
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       5011F75E2A11CC7E2517CCE87BE7EA5A2927BCA0
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230343a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:18:02 +0000
ROA not before:           Mon 06 Jun 2022 14:13:02 +0000
ROA not after:            Mon 05 Jun 2023 14:18:02 +0000
asID:                     61317
IP address blocks:        2602:ff62:204::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:f7:5e:2a:11:cc:7e:25:17:cc:e8:7b:e7:ea:5a:29:27:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:13:02 2022 GMT
            Not After : Jun  5 14:18:02 2023 GMT
        Subject: CN=3C149BA056FD2B1C03E789861A818216A271E0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:bd:d5:4b:06:84:0b:8a:88:21:63:ea:4a:
                    83:04:93:53:1b:f3:df:62:d2:84:27:ef:be:dc:64:
                    01:c5:fd:75:66:98:99:7b:e5:41:98:fc:f4:1b:c9:
                    47:5b:b3:0a:22:67:af:4e:b1:6f:64:fc:9e:b1:43:
                    c1:62:02:dc:56:5b:2e:41:13:87:fc:e4:d5:c7:bc:
                    76:b2:cd:65:c8:ca:55:0d:4f:06:52:40:3e:e8:75:
                    b1:c1:55:aa:4c:7d:a8:0e:18:fb:4e:c6:9c:ef:4d:
                    75:f1:a7:28:4f:92:3b:31:e5:12:32:3a:2f:48:ef:
                    d7:3d:a7:67:61:16:f3:bc:aa:3b:44:09:06:1d:f1:
                    65:d5:45:fc:f3:13:ea:11:35:b1:b3:7c:9a:c7:ed:
                    9b:b2:82:15:67:25:c9:9e:a4:c9:29:3b:37:f3:b0:
                    49:52:f3:54:94:5a:b8:15:61:61:ea:c1:e8:d6:e2:
                    c3:34:e7:52:9c:05:44:cd:89:a3:73:88:ec:fd:81:
                    84:bf:9f:ba:19:10:c1:19:d7:78:ba:c8:95:0f:07:
                    17:f8:52:ee:9d:c7:6a:95:51:77:d8:1d:91:1d:72:
                    57:c4:34:98:f4:1d:4f:88:da:ba:9e:9d:3b:21:07:
                    7d:7c:9f:55:5d:df:c2:12:95:97:a9:48:14:7f:fb:
                    8c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:14:9B:A0:56:FD:2B:1C:03:E7:89:86:1A:81:82:16:A2:71:E0:D4
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230343a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:204::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:06:99:25:ba:e8:71:62:b5:80:ba:c2:45:43:16:e6:b5:67:
         cf:92:b9:3a:13:9f:04:a6:be:db:cf:86:63:f0:fa:8f:cb:81:
         60:df:ef:2f:95:25:9b:55:71:76:a1:40:bc:56:95:b2:dd:24:
         c2:ad:8e:f6:45:1e:5d:f1:48:f6:34:53:e5:cb:46:24:0f:8c:
         06:87:76:bc:e0:14:ff:33:8e:19:70:4a:05:d5:02:a3:4e:ba:
         0a:14:7e:96:11:50:96:fe:85:2d:c2:6d:18:e3:3e:23:b2:c4:
         8e:08:03:8d:08:2f:73:85:ab:46:b0:db:26:37:3e:f0:53:ac:
         02:f0:1e:b4:09:5a:22:66:0a:2f:f4:f1:6e:60:0f:72:c7:18:
         da:d1:ce:a7:c6:e0:a8:46:73:29:93:86:64:8b:86:69:9c:3a:
         38:47:1c:c3:a9:1a:c8:ce:f8:14:96:dc:84:84:1e:31:a3:d0:
         e8:01:5f:79:e1:8d:47:49:da:64:ad:89:cd:c4:8f:48:6c:ac:
         e3:12:31:98:ea:2c:c6:03:50:94:da:4a:be:38:11:73:29:99:
         e4:3c:1d:c9:2b:ef:e7:75:00:2f:e5:ff:37:f3:35:ef:84:08:
         4e:29:ef:31:b8:f9:39:8b:ef:dc:75:83:76:9c:3a:03:1c:fb:
         4c:56:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----