Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34352d3435203d3e203631333137.roa
File:                     323630323a666636323a3a2f34352d3435203d3e203631333137.roa (raw, json)
Hash identifier:          aWjj30Ip1JMHVM5c0e5piEc3zKPE8iQ3ksmNEwY+1Eo=
Subject key identifier:   EB:21:AD:0D:00:AD:88:43:91:CA:ED:52:A0:A8:59:70:E7:8A:1A:97
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       26CCFB49C7B807AFA05B62A38FA7030AD5B6D3AE
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34352d3435203d3e203631333137.roa
Signing time:             Thu 07 Jul 2022 13:46:28 +0000
ROA not before:           Thu 07 Jul 2022 13:41:28 +0000
ROA not after:            Thu 06 Jul 2023 13:46:28 +0000
asID:                     61317
IP address blocks:        2602:ff62::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cc:fb:49:c7:b8:07:af:a0:5b:62:a3:8f:a7:03:0a:d5:b6:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jul  7 13:41:28 2022 GMT
            Not After : Jul  6 13:46:28 2023 GMT
        Subject: CN=EB21AD0D00AD884391CAED52A0A85970E78A1A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:81:4a:77:b5:91:52:08:a9:ab:64:a7:1a:
                    02:7c:01:05:19:77:5b:af:7b:2f:24:5a:65:e7:e6:
                    b2:08:cf:39:0d:08:00:7a:12:61:76:a2:96:25:35:
                    4d:38:f9:df:b1:cd:78:29:2b:77:15:03:e7:94:35:
                    86:0a:71:3e:0f:0c:02:db:e1:f7:b9:c4:b8:f5:12:
                    4f:87:e9:40:f2:9b:2c:29:b0:50:6a:3b:29:24:f8:
                    3a:e5:2e:e4:a2:15:50:c2:18:43:ef:12:bf:28:58:
                    c6:72:53:d4:84:f7:2c:8d:de:cc:38:02:2b:fe:b2:
                    e3:5f:f9:23:70:c0:5a:29:80:7b:10:61:41:07:aa:
                    be:78:68:98:69:75:96:c3:93:0d:2f:e2:bd:ed:02:
                    4b:f0:a0:07:2f:46:20:79:bc:52:e5:68:b7:72:0c:
                    6e:ca:40:83:ea:57:b8:ce:f3:3e:07:57:6f:3a:c8:
                    e9:b3:f9:59:25:1b:0e:e6:5b:b0:09:56:30:56:4b:
                    d1:c2:91:73:dc:df:df:ea:ee:f7:bf:f1:bd:52:d5:
                    ad:d4:5d:58:f3:05:38:dd:80:15:94:1d:6a:66:dc:
                    aa:ac:f2:dc:5b:a9:9e:0a:64:c9:39:09:95:8a:66:
                    e7:73:56:82:ab:97:6b:e5:33:21:c7:57:32:11:c3:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:AD:0D:00:AD:88:43:91:CA:ED:52:A0:A8:59:70:E7:8A:1A:97
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34352d3435203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/45

    Signature Algorithm: sha256WithRSAEncryption
         29:a5:79:1c:b6:30:0e:d3:58:6f:c1:75:3d:88:70:88:96:7e:
         12:0a:fd:2b:7a:32:64:35:8a:a6:59:d0:7b:a3:83:c8:fe:47:
         c6:72:60:5e:54:58:a5:d7:f3:b1:f3:b5:5e:84:99:cd:7f:b5:
         5a:64:1d:b4:33:c3:05:47:aa:be:4b:f6:d7:05:17:07:dc:c4:
         1d:98:32:39:ef:a5:d5:0d:76:2c:36:41:77:1b:7e:e5:be:00:
         0f:62:74:eb:9a:50:4e:f3:91:d6:3e:26:31:bb:ba:f4:27:2b:
         9f:81:52:24:b5:5d:7b:c6:f1:ef:e7:ff:67:21:ed:5f:69:30:
         4f:3b:e6:06:7f:b1:3c:78:e6:d2:05:26:85:25:68:87:f8:c7:
         fe:e6:2b:29:25:5c:be:77:98:11:80:25:77:31:a6:0e:90:b5:
         56:16:73:a3:97:07:b0:2d:b4:f0:c7:05:db:f8:34:58:9e:87:
         6f:cb:e1:d5:f1:98:b7:31:1a:53:b6:2a:7e:a9:d5:0d:7b:50:
         34:cd:40:98:b1:62:3b:41:a2:ad:4f:f4:b3:52:2b:a4:73:33:
         22:bc:4c:31:cc:bf:c1:8f:06:79:ca:bc:d2:53:00:8f:51:07:
         9d:3b:bd:4f:a8:b6:8d:e0:27:a8:84:ae:0d:8b:7d:43:fe:b7:
         8d:ec:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----