Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34302d3430203d3e203631333137.roa
File:                     323630323a666636323a3a2f34302d3430203d3e203631333137.roa (raw, json)
Hash identifier:          olcZ+Gzxyv7gddR0/tYRo+wzWW5OuC8L3z0haunswy0=
Subject key identifier:   84:04:EF:6F:9D:08:5C:BF:7B:4D:01:EF:3A:1E:F4:99:B0:D7:47:33
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       6FFC73BF6BA839B4982047C3760650B489F5759E
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34302d3430203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:34 +0000
ROA not before:           Mon 06 Jun 2022 14:12:34 +0000
ROA not after:            Mon 05 Jun 2023 14:17:34 +0000
asID:                     61317
IP address blocks:        2602:ff62::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:73:bf:6b:a8:39:b4:98:20:47:c3:76:06:50:b4:89:f5:75:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:34 2022 GMT
            Not After : Jun  5 14:17:34 2023 GMT
        Subject: CN=8404EF6F9D085CBF7B4D01EF3A1EF499B0D74733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:a1:fb:cd:8b:76:04:10:6b:62:37:f6:8b:
                    ec:19:9d:84:2b:d2:88:a7:55:07:7d:0a:85:98:9d:
                    97:95:0f:98:b7:3b:76:f6:a3:d0:fc:24:15:5e:50:
                    07:18:dc:0c:80:be:bd:e8:5d:e4:97:35:c1:21:38:
                    47:2d:4a:b0:45:5b:41:fe:44:b4:7c:14:e1:6a:78:
                    83:8d:04:f6:1b:88:64:b5:85:53:a0:07:1f:2a:50:
                    42:5e:a3:45:26:db:5f:17:d6:33:64:fc:28:2f:ca:
                    18:7d:bc:06:91:99:84:e4:70:4d:77:6e:92:29:d9:
                    73:3a:bd:1f:bc:8c:c3:71:18:6d:90:63:db:4d:58:
                    0b:bd:9a:74:f7:59:32:1c:7e:a5:01:31:e6:40:92:
                    c7:6c:7d:aa:41:cd:b0:3a:ee:89:f9:63:26:c1:8d:
                    b1:da:68:8c:32:21:47:d0:45:03:9a:2a:8c:00:71:
                    cb:0f:df:fa:9c:00:81:7a:02:4e:ab:66:07:d6:81:
                    a9:6c:34:cb:03:b2:7f:17:7a:f0:32:c7:6e:b7:55:
                    73:e7:55:97:a3:12:f1:2c:e5:c1:9c:dc:ca:74:3e:
                    8b:9a:d5:a0:10:06:0c:4e:fd:4b:3a:60:17:f1:b9:
                    96:79:43:60:f7:e7:95:07:a8:9d:97:e1:74:e6:52:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:EF:6F:9D:08:5C:BF:7B:4D:01:EF:3A:1E:F4:99:B0:D7:47:33
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34302d3430203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:b1:ea:a6:9b:b5:b9:f2:1e:7e:f9:54:b2:2b:18:c5:01:
         d2:f9:97:d3:06:ef:13:e8:92:89:76:1b:f5:df:3a:d3:5a:24:
         4a:5e:a5:19:ce:57:03:0f:da:d8:43:9a:47:c6:49:f7:af:9c:
         ab:d5:39:19:45:1f:ea:9b:05:20:62:1a:fb:f8:8e:f4:b9:30:
         91:f4:d8:56:d9:19:98:4c:66:27:0d:1a:c8:d6:c5:57:3a:37:
         17:e7:cd:7c:78:9d:c9:85:2c:b0:a1:61:04:6c:b6:e0:36:40:
         52:1c:7d:11:c3:73:15:05:94:fb:f5:6e:4d:6b:d1:4b:f8:47:
         f0:32:a6:34:28:68:20:bf:bc:85:5b:6c:b0:f5:66:87:45:38:
         2a:12:67:e9:bf:36:d1:4d:b7:78:fb:dc:a9:95:3e:8c:2a:46:
         5c:57:ce:d7:87:5d:be:c4:09:1e:20:79:5a:86:e9:59:10:6b:
         d8:25:0c:88:45:37:97:69:38:41:41:7d:3a:8a:52:21:b1:ca:
         0a:af:de:a7:da:a9:d3:7f:be:ca:fd:05:a8:ad:29:42:84:f8:
         d1:4f:8c:38:bb:81:3c:a0:48:fe:11:64:18:e8:5b:65:d9:8e:
         b2:4a:b9:ce:31:67:07:19:c3:c7:0c:04:1e:6f:6c:ba:99:4e:
         53:f9:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----