Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a38313a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a38313a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          /xh7lhoo967sgnml3QLYWCh0Xcld98EQfjKiZ7PTNes=
Subject key identifier:   7A:08:1C:99:44:5E:95:30:E5:92:BB:D7:FB:D8:5C:68:C6:F5:93:11
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       75E4D09A87B595851902C4C85B245DECC2203E0A
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a38313a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:37 +0000
ROA not before:           Mon 06 Jun 2022 14:12:37 +0000
ROA not after:            Mon 05 Jun 2023 14:17:37 +0000
asID:                     61317
IP address blocks:        2602:ff62:81::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:d0:9a:87:b5:95:85:19:02:c4:c8:5b:24:5d:ec:c2:20:3e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:37 2022 GMT
            Not After : Jun  5 14:17:37 2023 GMT
        Subject: CN=7A081C99445E9530E592BBD7FBD85C68C6F59311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:99:0f:41:3d:a5:4e:23:42:18:05:2f:fd:
                    ed:7a:ed:f9:e9:b1:55:e8:25:52:71:fc:f4:92:74:
                    2f:62:ae:ed:c4:3d:ed:84:0d:8b:7b:b3:f9:8f:a1:
                    2e:11:fb:39:64:8f:91:d5:83:a5:9a:6a:80:05:a9:
                    e0:b3:ca:e4:c0:ef:32:a9:b7:61:3f:27:e0:41:10:
                    34:29:85:7b:64:91:9c:7d:f5:71:12:8f:e9:41:92:
                    5a:e0:91:2f:29:6c:d0:3c:2c:49:c0:52:85:7e:d0:
                    ec:b6:92:53:a9:32:6f:5a:0b:13:87:f2:18:d9:56:
                    dd:a3:f2:d6:e2:36:58:c3:f9:8f:56:ba:58:3f:b8:
                    d9:92:d7:bd:e7:7c:68:3c:90:67:7e:67:30:46:ac:
                    61:3c:80:c1:53:fb:f7:a1:c5:5d:27:85:18:90:b3:
                    74:09:b1:64:70:a0:19:9b:05:03:53:7f:ad:43:02:
                    39:2c:2f:17:f3:eb:89:8f:95:22:b6:52:2c:0c:85:
                    0b:f7:6d:fb:7a:cb:89:52:e5:ca:a6:44:33:e0:03:
                    5a:4a:78:a5:81:84:cf:f6:23:01:4f:c5:54:1f:b2:
                    1e:1c:d0:7f:8f:f0:16:1b:78:dc:94:a1:b1:db:60:
                    eb:b7:ce:17:64:f5:dd:31:9b:9c:ed:cc:9a:4f:02:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:1C:99:44:5E:95:30:E5:92:BB:D7:FB:D8:5C:68:C6:F5:93:11
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a38313a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:67:52:e9:14:7e:c0:51:82:d4:8d:23:46:87:6d:03:24:6c:
         cf:74:9b:9b:d1:a8:35:5d:03:46:f4:df:6f:ad:7d:d7:c2:05:
         89:f2:09:d3:27:ab:47:18:ce:9e:60:2b:23:b1:01:91:56:4d:
         d6:29:d7:d4:3f:94:45:44:e6:4c:a9:44:22:b4:54:6c:a1:34:
         83:b1:4c:65:0c:e6:71:af:be:7a:9c:cc:33:02:f5:12:b0:00:
         e3:f3:a2:a9:3c:19:a6:b0:1d:cb:15:9a:35:29:eb:ce:f8:49:
         f5:d0:77:67:4c:40:43:06:c8:07:93:55:6e:5b:9d:11:70:5b:
         c6:6b:c1:e5:19:be:63:d9:44:b4:73:d4:5b:77:07:a8:51:2c:
         d7:89:a9:b1:54:f1:3f:1a:aa:e6:8c:76:ca:d5:6d:8f:e0:7b:
         47:2e:3e:44:a7:b9:e7:ca:ee:26:8a:27:18:45:f1:23:70:49:
         2f:03:91:b1:6c:54:f8:71:6e:ec:9a:be:d0:d4:f5:13:ce:78:
         21:aa:e3:d8:33:fc:aa:41:28:a5:3d:6a:73:53:2f:8e:49:a8:
         b8:48:e6:89:ac:43:27:37:31:45:69:4e:e9:54:8b:a8:b5:fd:
         28:42:ce:72:26:48:6d:06:fe:61:0f:25:72:31:da:6f:d3:3e:
         6f:e8:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----