Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          50hjzfgpmqPlhZX4a3c59cJn3naqa8ciLarzOg3Fzgo=
Subject key identifier:   F9:72:BC:9F:A5:73:AE:5A:D5:3C:53:72:08:F9:E7:95:5C:2F:78:44
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       6E3ACEA5FE18BACE4EA8B84678EE1BFADF5849DF
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:35 +0000
ROA not before:           Wed 01 Jun 2022 18:54:35 +0000
ROA not after:            Wed 31 May 2023 18:59:35 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:ce:a5:fe:18:ba:ce:4e:a8:b8:46:78:ee:1b:fa:df:58:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:35 2022 GMT
            Not After : May 31 18:59:35 2023 GMT
        Subject: CN=F972BC9FA573AE5AD53C537208F9E7955C2F7844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:67:ff:56:11:38:9e:c0:b8:de:0d:90:00:
                    a5:83:13:90:4c:ea:31:68:78:56:33:ae:3e:40:24:
                    44:07:66:57:e2:71:12:37:4f:ce:a2:be:68:90:e1:
                    31:f7:3d:9d:dc:a0:4c:89:ed:50:e0:29:5d:b3:94:
                    5e:49:72:c8:ca:79:7a:e2:98:99:86:17:d6:ad:87:
                    0e:62:6e:22:f8:e9:f1:f9:cf:db:7c:f8:98:31:e7:
                    4c:7f:47:34:12:6f:f7:7f:0b:5c:99:ac:ef:a2:54:
                    21:03:ec:55:11:d7:c2:c6:ec:97:71:f6:a5:e5:60:
                    f1:8c:41:95:81:c1:48:70:a6:ee:3c:9e:ce:0b:ce:
                    d0:0c:19:3f:c8:b2:4d:81:90:68:2b:f8:18:c0:d3:
                    7c:08:a9:17:6c:71:b0:b9:32:3a:bd:fe:1b:f5:16:
                    05:0b:f6:25:ea:41:52:15:a2:d2:dc:72:40:b1:ca:
                    06:a5:ae:f8:a0:e1:8d:14:d8:00:b9:20:c7:cf:0a:
                    00:5f:26:fa:d8:b8:0b:5b:b6:df:51:6e:71:0b:0f:
                    4c:c3:e6:70:4a:39:70:25:b5:10:c0:89:4f:bb:81:
                    17:c4:b8:3d:51:27:71:d4:65:74:1c:e7:1b:5c:d5:
                    94:2a:1c:79:03:ac:ff:70:9e:eb:65:4e:36:be:5e:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:BC:9F:A5:73:AE:5A:D5:3C:53:72:08:F9:E7:95:5C:2F:78:44
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:73:ba:e3:c7:d0:ff:43:07:af:98:2a:31:80:6a:87:37:
         a8:30:79:54:e0:05:ca:dd:64:4c:33:c8:0b:06:2f:2f:9e:b4:
         0d:04:ac:b6:3f:be:9b:13:b1:e9:4d:fe:a6:0b:dd:d4:f7:c6:
         f5:c4:f9:cd:5c:1a:c6:3d:90:41:a9:64:2b:f5:32:da:39:0f:
         31:07:ad:81:3f:1f:81:93:a7:f1:3e:4f:3f:83:38:83:54:b1:
         3c:8a:4a:7e:f0:52:8b:80:88:53:31:3e:b9:22:41:bc:58:a7:
         99:74:c7:28:06:e4:21:07:f7:c2:0a:30:e5:21:53:35:91:3e:
         43:4b:90:ca:37:bd:1a:76:8a:4d:b3:6b:0b:a6:55:bc:fe:b5:
         84:90:60:66:ca:23:b4:22:a1:90:42:eb:9c:34:ea:fe:94:18:
         8a:af:bb:21:bb:7a:63:39:eb:ed:26:1b:42:3d:b7:fd:2c:0d:
         2d:ff:ff:02:b7:da:60:fa:18:db:c6:57:24:15:3b:52:b6:31:
         80:44:09:84:18:39:09:42:3e:9e:47:c8:19:f5:88:ca:97:bb:
         19:2c:da:e3:5f:21:dc:ee:0f:f9:8c:47:3e:17:af:8c:87:71:
         a5:30:94:c6:85:b2:0b:ff:49:dc:b4:3e:bf:7a:c8:e9:7b:ac:
         d7:cb:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----