Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230373a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3230373a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          znUN8Bhjn8P8eCyHoS17vQkA9J5XRbtjIsaMzlYaeC0=
Subject key identifier:   E5:13:B6:07:B3:E4:52:A6:E0:21:02:E3:9F:96:C0:1A:02:20:21:5C
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       73F29586D6E6E46018838B4D94F08F744BA3D42A
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230373a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:18:05 +0000
ROA not before:           Mon 06 Jun 2022 14:13:05 +0000
ROA not after:            Mon 05 Jun 2023 14:18:05 +0000
asID:                     61317
IP address blocks:        2602:ff62:207::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:95:86:d6:e6:e4:60:18:83:8b:4d:94:f0:8f:74:4b:a3:d4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:13:05 2022 GMT
            Not After : Jun  5 14:18:05 2023 GMT
        Subject: CN=E513B607B3E452A6E02102E39F96C01A0220215C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:b4:7f:be:b0:9a:91:15:04:9e:3a:54:35:
                    8c:62:d2:ce:55:ea:b2:49:8e:e2:8f:bb:92:82:b6:
                    d0:eb:ae:30:7c:3c:42:c6:2b:05:04:de:f1:db:1f:
                    72:cc:99:a2:e0:96:b2:80:60:88:df:2b:f8:70:af:
                    a0:a0:a8:c4:2a:e9:b9:27:22:1d:f6:5a:1e:c2:cc:
                    58:f0:2d:14:29:c0:41:6d:2a:2a:8f:19:de:47:b0:
                    2e:9c:18:a3:90:50:f1:53:b2:82:bc:9d:58:a3:0a:
                    f2:2a:35:cd:2b:7b:f4:f5:6c:ec:c9:db:d4:cc:97:
                    55:a8:43:df:24:7d:ff:a0:b3:7e:7b:c9:c0:81:f5:
                    a4:a8:65:9b:c4:5b:34:9c:4b:c9:55:77:df:17:3b:
                    b4:85:c0:47:99:f8:9b:0e:5d:05:69:19:bf:6c:b4:
                    2e:ac:a8:2f:81:75:38:3d:dc:c5:ce:67:ed:71:e5:
                    5b:93:2c:8e:a6:68:3f:05:6f:59:38:90:62:6c:54:
                    23:a1:ce:50:5f:ad:30:af:55:ba:ce:35:3b:59:70:
                    22:6b:da:01:3e:c2:1d:57:39:4f:97:a7:62:fa:87:
                    c8:e8:3c:d2:a9:c3:bc:61:8c:ef:cb:4b:4b:f0:c2:
                    f9:af:7b:81:d4:69:a6:bc:61:9a:8f:0b:fe:68:51:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:13:B6:07:B3:E4:52:A6:E0:21:02:E3:9F:96:C0:1A:02:20:21:5C
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230373a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:207::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:a5:a3:09:56:55:3a:94:a3:b1:87:be:98:be:eb:b4:00:
         1d:a4:23:e4:8c:fb:0a:e1:06:a2:99:8a:7e:90:b2:ed:31:6e:
         a5:3f:65:eb:29:7b:0a:54:78:15:26:57:e4:af:e1:74:e2:5d:
         23:88:93:a2:3b:37:88:fd:da:75:4e:63:9f:e1:51:b8:f8:35:
         7a:5a:12:95:d6:2a:ad:5b:32:a3:76:f9:3a:c0:c8:88:28:21:
         05:0a:5b:2c:ef:42:b9:bc:8a:f6:42:f5:03:46:f7:5b:93:23:
         64:48:8c:82:fc:e2:8f:ea:3d:b6:c0:54:5b:75:9c:6d:9d:f3:
         4f:f4:45:47:33:63:cb:be:b1:6a:ae:2b:14:f4:c6:0e:45:ae:
         11:5e:30:52:ce:f1:d0:eb:a1:a6:6a:52:58:f7:c9:aa:42:2c:
         4f:d5:2e:c8:20:79:8d:dd:22:7e:a3:7e:0c:17:28:45:1d:f4:
         84:e5:b0:5b:f5:65:51:51:4e:30:73:e9:ae:d3:cc:dc:c7:c1:
         af:18:34:5d:79:36:c3:f8:1a:e2:96:c8:d6:ff:75:3c:a0:43:
         03:38:f7:2f:27:28:9b:72:fa:6c:06:6a:0d:52:68:bb:d9:cb:
         40:76:ee:db:2c:57:b9:db:e3:cb:af:31:0a:75:4f:99:1d:a4:
         0b:66:05:da
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUc/KVhtbm5GAYg4tNlPCPdEuj1CowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMzA1WhcNMjMwNjA1MTQxODA1
WjAzMTEwLwYDVQQDEyhFNTEzQjYwN0IzRTQ1MkE2RTAyMTAyRTM5Rjk2QzAxQTAy
MjAyMTVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3a0f76wmpEV
BJ46VDWMYtLOVeqySY7ij7uSgrbQ664wfDxCxisFBN7x2x9yzJmi4JaygGCI3yv4
cK+goKjEKum5JyId9loewsxY8C0UKcBBbSoqjxneR7AunBijkFDxU7KCvJ1Yowry
KjXNK3v09WzsydvUzJdVqEPfJH3/oLN+e8nAgfWkqGWbxFs0nEvJVXffFzu0hcBH
mfibDl0FaRm/bLQurKgvgXU4PdzFzmftceVbkyyOpmg/BW9ZOJBibFQjoc5QX60w
r1W6zjU7WXAia9oBPsIdVzlPl6di+ofI6DzSqcO8YYzvy0tL8ML5r3uB1GmmvGGa
jwv+aFEgFQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOUTtgez5FKm4CEC45+WwBoC
ICFcMB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMDM3M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2ICBzANBgkq
hkiG9w0BAQsFAAOCAQEASnmlowlWVTqUo7GHvpi+67QAHaQj5Iz7CuEGopmKfpCy
7TFupT9l6yl7ClR4FSZX5K/hdOJdI4iTojs3iP3adU5jn+FRuPg1eloSldYqrVsy
o3b5OsDIiCghBQpbLO9CubyK9kL1A0b3W5MjZEiMgvzij+o9tsBUW3WcbZ3zT/RF
RzNjy76xaq4rFPTGDkWuEV4wUs7x0OuhpmpSWPfJqkIsT9UuyCB5jd0ifqN+DBco
RR30hOWwW/VlUVFOMHPprtPM3MfBrxg0XXk2w/ga4pbI1v91PKBDAzj3Lycom3L6
bAZqDVJou9nLQHbu2yxXudvjy68xCnVPmR2kC2YF2g==
-----END CERTIFICATE-----