Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          E2YhC9f1fKjRx32STflHkSUCljJx+op3MBifPAeleTk=
Subject key identifier:   A5:FD:0A:88:B7:5B:85:A5:E9:01:10:E5:24:3E:F0:EC:D1:9F:42:6B
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       E7A279B829DB050CB21C955F0567FB33C76770
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:50 +0000
ROA not before:           Wed 01 Jun 2022 18:54:50 +0000
ROA not after:            Wed 31 May 2023 18:59:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e7:a2:79:b8:29:db:05:0c:b2:1c:95:5f:05:67:fb:33:c7:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:50 2022 GMT
            Not After : May 31 18:59:50 2023 GMT
        Subject: CN=A5FD0A88B75B85A5E90110E5243EF0ECD19F426B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:13:8d:71:86:3e:c7:ab:52:2e:d3:84:16:
                    86:99:56:ac:b2:8e:23:6a:0c:0f:a8:94:ce:ac:03:
                    3e:f0:24:c7:f1:23:a2:65:4b:3b:0a:39:55:4c:ed:
                    b5:67:ac:6a:02:dc:1e:b9:98:62:e2:c5:cb:74:3c:
                    9a:16:04:3f:87:9a:d2:91:7c:87:c7:f6:09:11:fe:
                    c3:15:ab:7c:9d:5d:f5:65:b7:05:d6:6b:2b:39:a3:
                    e2:1c:a0:93:b9:01:af:fa:12:98:23:3e:14:98:26:
                    21:cc:de:10:39:21:d9:ef:b1:c4:18:56:cb:6f:05:
                    56:04:09:01:91:4d:71:b3:73:71:63:1e:ad:b6:01:
                    41:fb:c5:6c:1f:47:68:18:a6:71:da:8e:36:c7:df:
                    f0:4e:97:d1:83:52:f8:d9:c1:b5:aa:7e:58:1a:bf:
                    63:8c:73:57:c4:21:31:d4:6a:28:5d:89:a3:0b:d8:
                    d5:dd:82:e6:3d:e6:e2:59:07:42:51:ff:9c:cc:d8:
                    2a:25:55:8e:a6:89:3b:9e:90:df:14:d8:04:18:39:
                    e2:8a:c6:4a:83:d2:5c:6e:36:4c:52:4e:66:3c:e7:
                    24:57:6b:e9:35:1e:19:d3:b1:17:03:f6:5f:5e:5f:
                    db:65:a9:71:ea:86:8e:fa:05:d4:09:02:1b:96:89:
                    37:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FD:0A:88:B7:5B:85:A5:E9:01:10:E5:24:3E:F0:EC:D1:9F:42:6B
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:35:4e:2f:d4:33:2e:9b:a4:c4:93:d8:d7:1e:4b:b8:7a:
         bd:a1:52:86:fa:a5:18:ef:8a:1a:dd:0d:cb:86:c6:39:80:c1:
         e5:bf:11:04:a8:75:76:e6:21:b8:1a:cf:b8:e5:66:30:dc:b8:
         a3:16:fe:07:99:00:96:2d:82:f0:d5:ca:86:cb:1d:82:1b:33:
         2a:9f:4a:b1:58:f0:63:4b:af:de:a6:fb:40:91:84:49:40:3a:
         53:26:55:cc:ae:98:1f:5b:7d:2c:c4:00:00:aa:53:32:ad:ca:
         ec:34:b7:c7:7f:90:dd:de:ed:d5:a1:67:e2:f7:92:bd:d1:c2:
         7f:b7:d8:10:05:b0:94:54:af:2e:49:ce:72:4d:bf:b5:86:70:
         50:09:e8:45:d6:ba:34:49:3d:a4:5e:ec:0e:e9:b0:03:2b:f8:
         2a:e5:52:1a:95:f4:58:5a:08:9a:5f:dc:1e:23:d0:6a:35:0c:
         6f:fa:c8:a7:98:99:88:8a:fd:4f:9d:63:c3:ff:57:cb:4b:1d:
         f4:a8:0e:4d:39:ab:92:82:02:63:0b:e1:ea:9b:91:39:ff:9a:
         15:ea:99:1e:5b:cd:a6:d3:b6:a4:29:f2:b5:9b:92:9e:41:01:
         e6:29:32:f6:9f:d0:22:7a:6d:0d:3e:fb:c0:e2:10:7e:37:18:
         f0:49:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----