Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34382d3438203d3e203631333137.roa
File:                     323630323a666636323a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          IVBE5VGXp82YucSubBUUeXJVrU3Ya+wDAsPBMo+d+Ds=
Subject key identifier:   1F:04:85:6C:21:D6:4B:4C:54:81:7C:BC:29:8A:6C:10:11:1C:D0:10
Certificate issuer:       /CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
Certificate serial:       3BEB6C45CED91F9F4C213162EFB8215A9DEBCBF5
Authority key identifier: 9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34382d3438203d3e203631333137.roa
Signing time:             Mon 06 Jun 2022 14:17:36 +0000
ROA not before:           Mon 06 Jun 2022 14:12:36 +0000
ROA not after:            Mon 05 Jun 2023 14:17:36 +0000
asID:                     61317
IP address blocks:        2602:ff62::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:eb:6c:45:ce:d9:1f:9f:4c:21:31:62:ef:b8:21:5a:9d:eb:cb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c
        Validity
            Not Before: Jun  6 14:12:36 2022 GMT
            Not After : Jun  5 14:17:36 2023 GMT
        Subject: CN=1F04856C21D64B4C54817CBC298A6C10111CD010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:24:b1:3d:82:63:6f:c9:e3:18:59:cf:d2:
                    57:c6:f2:c6:1b:36:43:83:67:f0:e6:bf:10:38:52:
                    8e:e6:05:e8:3c:42:50:94:af:cc:55:3a:20:28:06:
                    83:9a:1a:ee:91:0f:79:ee:97:18:54:92:a6:0c:16:
                    33:78:8c:2d:f8:93:2f:48:7b:b0:0a:63:f9:f6:08:
                    86:a2:f4:51:0d:8a:0b:47:4f:8a:1d:a7:97:33:5f:
                    27:a8:93:fb:0f:79:3c:28:11:7c:2b:b8:92:f8:b6:
                    b5:79:6c:02:08:32:bd:0c:f1:88:fa:4b:46:40:51:
                    d5:92:6a:0e:a5:d7:9b:0f:bb:4b:25:ec:c4:46:5c:
                    7f:b7:ac:5c:27:d7:a3:69:6b:9e:8f:89:a2:f3:54:
                    4c:4b:ec:2d:24:39:a7:4d:72:ac:90:eb:89:e8:e7:
                    4e:3b:ec:bb:f5:7e:04:97:7a:27:70:7b:df:63:91:
                    09:3d:14:0a:55:01:ce:01:c4:1e:1b:7a:10:39:3d:
                    80:6d:af:43:02:06:51:f4:29:30:32:5c:ab:d4:2f:
                    c4:ec:c7:c4:3e:53:79:d3:14:cb:4c:59:ac:3c:12:
                    46:b6:ec:a3:fb:87:1f:c5:0f:ef:62:b2:47:cf:1e:
                    19:e1:58:48:12:31:de:27:2c:9f:fa:e9:2c:5b:0d:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:85:6C:21:D6:4B:4C:54:81:7C:BC:29:8A:6C:10:11:1C:D0:10
            X509v3 Authority Key Identifier:
                keyid:9B:04:6B:66:CA:99:83:6C:E8:03:06:7D:7D:51:35:D7:6A:C0:62:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/9B046B66CA99836CE803067D7D5135D76AC06268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f4687d9bd4bb3033cae60030cd57bb36e433067c87c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/0/323630323a666636323a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:04:bf:fa:50:cf:64:63:d7:ba:10:a2:7b:c5:6d:f2:21:
         55:36:c0:33:eb:ab:c4:f3:f8:e1:c8:9a:95:8e:77:8c:21:34:
         5a:b9:8c:a0:08:ba:43:d5:c2:66:43:11:e9:a9:57:80:25:8c:
         46:03:31:e5:d2:aa:31:31:23:48:dc:15:c9:a3:93:44:53:50:
         36:17:a7:42:58:65:d5:e2:fa:79:49:82:8e:c1:b3:93:67:a1:
         94:2c:f4:24:5d:e3:bd:1a:c5:fc:23:81:db:af:72:06:72:65:
         f8:dc:b0:5d:fd:0e:f4:ae:44:09:cd:6d:89:85:50:47:a5:98:
         93:da:26:8e:55:f8:b9:6e:dd:07:84:fb:28:b9:ab:b8:88:a2:
         33:43:d2:3d:a5:ea:7d:7c:4b:d9:51:7d:6e:6e:56:1d:78:60:
         96:90:d9:85:b6:69:12:74:57:27:6a:11:9c:ca:79:1e:b0:c7:
         df:81:1c:6b:5d:5e:ec:db:1d:c6:42:a1:54:51:19:78:70:30:
         41:de:11:ff:bf:53:b7:d2:a6:eb:77:6c:4f:8c:49:a4:dc:3b:
         bd:2b:95:6d:6f:6d:53:f9:10:f2:d5:7c:f5:d0:0e:f6:be:b6:
         c2:0c:c4:6d:a3:b3:6f:d1:7e:32:6b:25:c2:68:03:a0:62:15:
         67:c2:74:bf
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUO+tsRc7ZH59MITFi77ghWp3ry/UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0Njg3ZDliZDRiYjMwMzNjYWU2MDAzMGNk
NTdiYjM2ZTQzMzA2N2M4N2MwHhcNMjIwNjA2MTQxMjM2WhcNMjMwNjA1MTQxNzM2
WjAzMTEwLwYDVQQDEygxRjA0ODU2QzIxRDY0QjRDNTQ4MTdDQkMyOThBNkMxMDEx
MUNEMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3UksT2CY2/J
4xhZz9JXxvLGGzZDg2fw5r8QOFKO5gXoPEJQlK/MVTogKAaDmhrukQ957pcYVJKm
DBYzeIwt+JMvSHuwCmP59giGovRRDYoLR0+KHaeXM18nqJP7D3k8KBF8K7iS+La1
eWwCCDK9DPGI+ktGQFHVkmoOpdebD7tLJezERlx/t6xcJ9ejaWuej4mi81RMS+wt
JDmnTXKskOuJ6OdOO+y79X4El3oncHvfY5EJPRQKVQHOAcQeG3oQOT2Aba9DAgZR
9CkwMlyr1C/E7MfEPlN50xTLTFmsPBJGtuyj+4cfxQ/vYrJHzx4Z4VhIEjHeJyyf
+uksWw0YEwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFB8EhWwh1ktMVIF8vCmKbBAR
HNAQMB8GA1UdIwQYMBaAFJsEa2bKmYNs6AMGfX1RNddqwGJoMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzAv
OUIwNDZCNjZDQTk5ODM2Q0U4MDMwNjdEN0Q1MTM1RDc2QUMwNjI2OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2ODdkOWJkNGJiMzAzM2NhZTYwMDMwY2Q1N2JiMzZlNDMzMDY3Yzg3Yy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8wLzMyMzYzMDMyM2E2NjY2MzYzMjNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAAAwDQYJKoZIhvcNAQEL
BQADggEBAAouBL/6UM9kY9e6EKJ7xW3yIVU2wDPrq8Tz+OHImpWOd4whNFq5jKAI
ukPVwmZDEempV4AljEYDMeXSqjExI0jcFcmjk0RTUDYXp0JYZdXi+nlJgo7Bs5Nn
oZQs9CRd470axfwjgduvcgZyZfjcsF39DvSuRAnNbYmFUEelmJPaJo5V+Llu3QeE
+yi5q7iIojND0j2l6n18S9lRfW5uVh14YJaQ2YW2aRJ0VydqEZzKeR6wx9+BHGtd
XuzbHcZCoVRRGXhwMEHeEf+/U7fSput3bE+MSaTcO70rlW1vbVP5EPLVfPXQDva+
tsIMxG2js2/RfjJrJcJoA6BiFWfCdL8=
-----END CERTIFICATE-----