Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230643a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3230643a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          iag+nQk2SvncIOei9BOeP9t+a7rboeVg0E2WAiNNUqw=
Subject key identifier:   70:25:31:3E:AD:51:D9:6C:75:FC:E2:6F:4B:E9:CE:60:44:43:DE:56
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       2E024D22EAE86A60DAE6950535C1100F29DB0548
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230643a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:18:12 +0000
ROA not before:           Mon 06 Jun 2022 14:13:12 +0000
ROA not after:            Mon 05 Jun 2023 14:18:12 +0000
asID:                     61317
IP address blocks:        2602:ff62:20d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:02:4d:22:ea:e8:6a:60:da:e6:95:05:35:c1:10:0f:29:db:05:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:13:12 2022 GMT
            Not After : Jun  5 14:18:12 2023 GMT
        Subject: CN=7025313EAD51D96C75FCE26F4BE9CE604443DE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:8e:11:dc:c1:82:56:7b:96:45:d5:6a:db:
                    d5:51:94:4f:d1:43:06:f3:8c:09:bc:d2:9d:31:ff:
                    00:df:dc:85:7f:a9:38:6f:33:76:59:30:d3:72:96:
                    eb:2f:ec:c1:ec:f4:bd:a6:d4:98:26:05:f7:46:27:
                    3c:f9:cf:3e:9a:8d:7d:5e:ac:be:c9:a7:43:b0:db:
                    ab:e9:d5:7f:0b:01:0f:7c:3c:e0:32:64:d8:eb:de:
                    f5:b4:6a:2a:c4:74:b1:8f:e8:c1:9c:7b:83:88:27:
                    e7:f8:56:fd:af:d1:a3:9e:a5:b1:e7:db:55:82:0e:
                    b3:31:00:c9:da:20:ed:0a:d2:09:2e:60:ce:5f:2b:
                    0c:e4:80:f6:d1:96:2e:77:00:fd:ed:75:e6:ce:43:
                    63:82:5e:8a:e4:b1:12:ca:7e:27:85:5f:eb:41:12:
                    20:47:70:52:4e:76:86:bc:2d:02:81:91:14:9d:f7:
                    c4:8b:d0:73:fc:d3:11:d5:dd:95:f8:ff:19:96:54:
                    9a:25:b3:e9:eb:5c:b2:26:9a:7d:70:cc:3e:93:0e:
                    60:99:57:5c:56:65:de:55:85:3e:d7:06:f3:1e:9b:
                    41:69:8b:a3:bd:46:5c:d1:36:ae:43:4d:96:24:67:
                    ac:0b:d1:54:76:6e:5b:c9:17:23:e1:40:9c:29:e1:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:31:3E:AD:51:D9:6C:75:FC:E2:6F:4B:E9:CE:60:44:43:DE:56
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3230643a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:20d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:00:c8:50:7b:d5:df:ac:53:cc:fe:ec:2b:f1:d3:74:84:
         f8:9c:b2:28:bf:08:53:98:59:eb:4d:dc:a6:4e:dc:3c:30:95:
         5b:18:e1:7c:44:fc:dd:22:d1:e6:cb:f2:7f:69:b9:db:5e:56:
         41:55:d7:d6:71:0f:4f:7d:99:6f:80:50:f4:0f:44:3a:e6:da:
         58:66:3a:7f:40:dd:ea:b0:16:a3:2b:b3:dc:92:56:5a:aa:bd:
         b2:1f:34:69:de:af:ec:f6:43:8a:53:28:f6:54:dd:d4:15:2c:
         8f:cf:bb:e4:a0:74:ba:e0:eb:2d:9b:29:a3:77:ed:9a:f3:60:
         3e:b9:68:cd:65:31:11:75:51:5d:69:53:28:1a:7c:51:94:68:
         fc:c0:fe:6a:94:a7:a5:42:bf:9f:48:53:cc:47:7c:6c:f6:99:
         16:8c:1e:c0:ac:79:50:23:26:5d:00:ad:ea:fb:f5:da:6d:7c:
         a8:89:2d:9f:f8:5c:3a:ec:c9:ba:5a:7e:e8:0f:12:9b:03:83:
         98:6c:5a:c7:45:46:f1:66:49:11:d8:7c:9a:77:6d:32:33:a8:
         ae:b6:f1:e4:83:c6:bb:cd:c9:47:57:f4:67:70:44:2e:ca:a8:
         e0:1a:27:6f:7e:ff:82:94:9d:72:8a:e0:6c:e4:d4:a7:5b:cf:
         ff:05:1b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----