Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230633a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3230633a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          rHL6s75qBBo6yUd0kr+RIHVkbvuMkF0PV8nKlJ+ytp4=
Subject key identifier:   72:01:0D:18:50:3A:D2:8A:3C:0D:46:5F:78:5C:5D:E5:89:73:A6:C5
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       7605CB80548DE879026E5CB12971C0554F64F8BE
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230633a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:18:09 +0000
ROA not before:           Mon 06 Jun 2022 14:13:09 +0000
ROA not after:            Mon 05 Jun 2023 14:18:09 +0000
asID:                     61317
IP address blocks:        2602:ff62:20c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:05:cb:80:54:8d:e8:79:02:6e:5c:b1:29:71:c0:55:4f:64:f8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:13:09 2022 GMT
            Not After : Jun  5 14:18:09 2023 GMT
        Subject: CN=72010D18503AD28A3C0D465F785C5DE58973A6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:9a:19:df:12:f7:3d:ea:d3:8b:eb:35:13:
                    8a:52:3e:e8:65:60:ea:30:7e:7b:72:e8:47:78:ad:
                    5b:e6:cf:2e:d4:15:1f:a4:c0:61:04:4e:1c:b9:26:
                    89:48:2a:35:1d:76:92:e0:3f:f1:9e:f8:e1:4c:a2:
                    b5:1e:b5:c0:12:99:5e:07:d3:80:5e:45:47:a6:8d:
                    08:d0:c5:5f:74:fa:67:bf:4e:a5:bd:16:0b:36:ed:
                    4e:a5:a7:23:87:3e:b7:b1:ef:0f:3b:23:8d:85:c8:
                    65:30:ad:f7:7d:27:53:8b:9f:97:e0:58:28:6b:0d:
                    da:0a:85:b3:b8:d7:7e:7f:4c:c7:26:d5:74:19:85:
                    fb:1f:6f:6e:c3:a1:7b:ac:3e:a5:9a:be:ae:9d:54:
                    2e:9f:bd:46:04:98:1b:9b:f6:dc:ab:46:93:6a:5c:
                    11:26:58:d6:36:ac:58:0f:3a:53:e0:b6:f4:91:76:
                    5e:56:c1:bf:ad:c9:3e:ce:ea:0c:9b:04:46:27:2c:
                    3f:bd:90:07:0c:f9:d7:03:6a:f4:15:c9:7a:46:f0:
                    00:d7:a4:ab:2d:fe:b8:2e:97:2b:4e:19:b7:45:05:
                    c4:d9:71:ee:38:f2:c0:5f:00:b3:00:30:8c:dd:4c:
                    31:4f:f0:40:cf:1e:1f:07:04:e6:37:8a:f8:b2:9b:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:0D:18:50:3A:D2:8A:3C:0D:46:5F:78:5C:5D:E5:89:73:A6:C5
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230633a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:20c::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:5a:6c:a7:03:ba:2c:3e:af:0e:00:19:7d:90:a4:a7:b1:
         ab:fa:70:f1:13:ba:83:38:ab:cb:97:ce:8f:bf:c9:f5:70:89:
         35:53:0b:2a:3e:9f:2d:64:a4:b3:04:09:c5:98:53:10:59:59:
         00:ba:4c:5f:c6:84:94:ce:39:f2:b8:e6:33:e5:7c:7f:8c:c1:
         ec:2e:fa:b4:a9:5d:c8:21:2b:7c:9c:41:50:4f:8d:99:8b:b7:
         75:9a:70:84:5a:26:d4:c0:b3:52:f2:24:1e:61:a6:ac:8b:0b:
         f5:81:46:dd:2a:ae:0f:4e:66:47:d5:e7:92:49:55:40:44:fc:
         e3:14:3c:80:97:04:96:33:b6:71:51:4f:97:48:d7:60:a2:13:
         0d:b2:8f:db:92:92:cb:66:1e:94:56:c3:a5:b6:02:4c:a3:20:
         72:42:07:36:15:0b:7d:55:57:7d:a2:f1:64:e2:fe:9e:c3:76:
         0f:66:b9:45:d0:73:11:28:f5:11:48:1b:98:ce:3e:64:7b:1c:
         46:e3:ef:92:c1:fa:c4:fb:63:e9:d7:12:68:1e:77:6a:be:35:
         2d:44:f4:56:38:14:18:41:dc:ec:66:26:21:ef:ea:5d:31:12:
         a3:9d:5e:ed:a1:25:8d:6d:bf:82:7f:62:23:ca:fe:97:79:34:
         cb:be:55:6c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUdgXLgFSN6HkCblyxKXHAVU9k+L4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMzA5WhcNMjMwNjA1MTQxODA5
WjAzMTEwLwYDVQQDEyg3MjAxMEQxODUwM0FEMjhBM0MwRDQ2NUY3ODVDNURFNTg5
NzNBNkM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF2aGd8S9z3q
04vrNROKUj7oZWDqMH57cuhHeK1b5s8u1BUfpMBhBE4cuSaJSCo1HXaS4D/xnvjh
TKK1HrXAEpleB9OAXkVHpo0I0MVfdPpnv06lvRYLNu1Opacjhz63se8POyONhchl
MK33fSdTi5+X4Fgoaw3aCoWzuNd+f0zHJtV0GYX7H29uw6F7rD6lmr6unVQun71G
BJgbm/bcq0aTalwRJljWNqxYDzpT4Lb0kXZeVsG/rck+zuoMmwRGJyw/vZAHDPnX
A2r0Fcl6RvAA16SrLf64LpcrThm3RQXE2XHuOPLAXwCzADCM3UwxT/BAzx4fBwTm
N4r4spsz7wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFHIBDRhQOtKKPA1GX3hcXeWJ
c6bFMB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMDYzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2ICDDANBgkq
hkiG9w0BAQsFAAOCAQEAcF5abKcDuiw+rw4AGX2QpKexq/pw8RO6gziry5fOj7/J
9XCJNVMLKj6fLWSkswQJxZhTEFlZALpMX8aElM458rjmM+V8f4zB7C76tKldyCEr
fJxBUE+NmYu3dZpwhFom1MCzUvIkHmGmrIsL9YFG3SquD05mR9XnkklVQET84xQ8
gJcEljO2cVFPl0jXYKITDbKP25KSy2YelFbDpbYCTKMgckIHNhULfVVXfaLxZOL+
nsN2D2a5RdBzESj1EUgbmM4+ZHscRuPvksH6xPtj6dcSaB53ar41LUT0VjgUGEHc
7GYmIe/qXTESo51e7aEljW2/gn9iI8r+l3k0y75VbA==
-----END CERTIFICATE-----