Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          L24tZxp3Co+F1GczoWAfQKlDyPYyfl1+Y1UAKUDhRpY=
Subject key identifier:   40:33:9F:5F:E6:09:C4:E1:EA:31:DB:73:8C:EE:FF:DC:3D:7D:EC:87
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       527DD47C6E0A376E66E4F3CEBC058B4AC53DC145
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:21:54 +0000
ROA not before:           Thu 13 Jan 2022 19:16:54 +0000
ROA not after:            Thu 12 Jan 2023 19:21:54 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:d4:7c:6e:0a:37:6e:66:e4:f3:ce:bc:05:8b:4a:c5:3d:c1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 19:16:54 2022 GMT
            Not After : Jan 12 19:21:54 2023 GMT
        Subject: CN=40339F5FE609C4E1EA31DB738CEEFFDC3D7DEC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:79:23:3e:57:a2:5f:66:6d:e1:57:0e:62:
                    45:ec:72:c8:84:85:54:c0:c0:bb:3b:ee:96:c0:2f:
                    d0:fa:d1:d7:d8:78:d7:8f:14:58:eb:22:bb:4a:7c:
                    a4:93:9c:08:61:a2:87:4d:71:d5:1b:8c:a0:ac:a4:
                    46:ef:37:55:9d:ac:b9:88:7e:ef:ec:38:44:15:3c:
                    21:cc:2e:ae:fb:83:27:ba:f4:9d:a1:9e:28:7d:b7:
                    27:5e:dd:8d:bf:8e:52:4c:b6:d0:c3:3a:ff:29:4e:
                    c5:88:03:03:d0:1b:1d:c2:46:74:ac:fa:24:91:6f:
                    6b:6a:a2:2d:32:4a:a5:97:c8:86:84:db:3b:d5:40:
                    f7:57:b0:ee:a4:7c:1c:71:1a:68:43:11:0b:95:b0:
                    d7:d7:e5:ed:bd:d0:33:56:16:a3:15:97:23:f1:f6:
                    22:67:17:4f:3a:fe:5f:7f:b3:5e:7c:79:ec:45:b3:
                    ca:af:80:49:13:5b:9d:18:de:a3:b0:e9:f9:7a:96:
                    f8:8a:d9:aa:b6:64:a0:a3:67:80:c7:cc:a3:fa:b9:
                    d6:37:60:3f:a7:94:ab:ee:2b:2a:95:39:b7:34:b8:
                    7d:5a:31:b3:0e:1c:b9:13:8c:f4:66:fe:5a:7a:36:
                    6f:96:2d:8a:bc:da:65:11:7d:ad:f6:a5:e8:e9:5d:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:9F:5F:E6:09:C4:E1:EA:31:DB:73:8C:EE:FF:DC:3D:7D:EC:87
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:65:a2:ed:d1:db:c5:ba:ef:4a:bc:b9:87:49:9f:9b:de:
         1c:4e:e3:e2:8c:03:8f:75:1d:2d:f2:eb:ad:b3:69:7b:57:39:
         43:3c:86:be:04:70:93:f7:10:d2:7d:ab:aa:46:74:35:26:2d:
         4e:e1:01:7a:b8:03:83:67:00:5d:f1:de:f5:17:5c:9f:13:b0:
         22:fb:88:d7:10:f5:58:29:a5:d2:a2:5d:b7:a8:ab:92:05:23:
         61:08:78:32:69:59:b3:48:c6:e2:53:70:42:6a:3e:90:ed:ac:
         8e:60:93:dd:1c:73:1b:92:63:d5:c7:3b:d6:b9:2e:e2:80:10:
         f8:38:24:fc:93:a6:40:cd:ec:48:cd:99:55:3c:32:bb:c1:d2:
         9d:8b:92:6f:75:68:2a:99:65:3c:73:2f:17:8b:db:2b:af:8d:
         cb:4d:ed:1f:57:33:2e:48:db:e6:85:09:4e:e9:d7:03:a8:a6:
         b9:36:fd:aa:c3:32:de:b3:00:ac:c8:0e:c3:06:19:1b:96:2a:
         ae:2d:06:6e:8a:90:c6:cd:ce:ec:d7:61:99:e7:90:f6:8d:cd:
         68:a7:03:ec:76:f5:ed:63:99:13:eb:7d:47:fe:08:d2:4e:02:
         b2:02:4c:7f:19:08:b0:04:cf:5b:54:9d:d0:20:7d:e6:cf:16:
         1d:1a:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----