Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          VhQLPE2dKtvfDHjYnI7t/STb1uBGnTn+0cyeup5LPCs=
Subject key identifier:   47:4F:4F:CC:85:FE:7B:64:84:47:89:DD:66:75:59:74:86:E0:FB:4E
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       4256E8DE69C401397A5ADB069E61BE100A41DCE5
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:22:00 +0000
ROA not before:           Thu 13 Jan 2022 19:17:00 +0000
ROA not after:            Thu 12 Jan 2023 19:22:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:56:e8:de:69:c4:01:39:7a:5a:db:06:9e:61:be:10:0a:41:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 19:17:00 2022 GMT
            Not After : Jan 12 19:22:00 2023 GMT
        Subject: CN=474F4FCC85FE7B64844789DD6675597486E0FB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:64:1d:0f:9a:72:0a:ef:ad:d3:18:78:f8:
                    c2:f3:57:f2:42:46:1c:39:1d:ec:e3:88:da:67:f6:
                    08:d1:04:f7:d2:6a:12:05:4f:00:b1:b1:b3:66:53:
                    54:29:84:69:af:b0:22:cf:31:a9:2e:05:a4:a5:41:
                    b4:2a:3c:4d:41:d2:c5:a4:bf:25:04:1d:72:a0:fb:
                    90:1e:55:ce:34:19:b0:41:cc:5a:dd:17:d2:a3:ce:
                    03:21:f4:ce:80:3d:c9:73:d8:62:5d:f8:0a:16:2c:
                    e5:4b:a9:5e:79:d1:1c:87:85:70:18:7d:e3:0d:3b:
                    df:aa:6a:17:a5:5a:dc:f0:0f:70:4c:73:60:aa:17:
                    ce:c2:21:b4:fa:d6:83:86:d4:26:16:9f:83:32:50:
                    b9:93:5a:f6:63:df:71:71:24:d3:6e:e6:a1:7d:ef:
                    3e:e2:03:ca:bb:95:a1:e6:ab:4a:70:10:12:d9:f9:
                    c9:55:bd:2d:32:49:54:63:6d:56:a0:76:89:0d:e0:
                    c3:6a:3b:92:87:28:26:b7:7c:7e:01:ff:51:4f:36:
                    dd:22:72:13:19:40:b1:9d:e5:9d:8d:e5:16:ee:f1:
                    9b:05:61:3f:41:2b:7a:33:04:0f:b0:d0:50:f3:64:
                    fd:ac:39:cb:0b:e0:b8:f8:09:fe:f6:ba:2d:e2:84:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:4F:CC:85:FE:7B:64:84:47:89:DD:66:75:59:74:86:E0:FB:4E
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:00:d7:3d:2a:ab:ff:ab:c3:7c:6a:62:26:fe:8d:30:a4:35:
         4b:26:d6:4a:1b:bb:3f:c8:19:b3:21:02:92:cb:63:fa:87:5d:
         d6:8a:cf:ec:0c:21:19:b4:4f:21:e1:e1:08:79:75:13:98:84:
         03:bd:bc:3e:4c:35:46:26:bc:11:64:fb:5f:e1:c4:92:1c:92:
         ec:0e:11:a9:62:c8:76:dc:dc:3f:07:e2:a7:17:29:86:73:f8:
         25:f1:99:3b:86:be:9e:30:40:63:a9:e6:72:d3:96:e5:0b:fc:
         10:ec:9f:75:8a:b8:53:bf:67:ce:fd:c2:6d:45:47:57:92:b1:
         97:97:94:4b:d1:88:b7:63:0c:d0:22:40:60:88:3b:39:ee:17:
         42:68:1b:cf:a0:ae:74:e4:9d:55:a2:56:72:4e:f6:37:6e:6f:
         41:7d:38:58:74:c4:15:a9:8d:3e:0e:4a:8f:21:e6:ba:b7:88:
         94:e1:53:0e:95:24:4e:07:ab:7d:49:7b:12:76:39:82:26:48:
         b1:ef:b4:f9:db:e0:50:95:61:34:5e:38:78:de:7e:b7:f7:c6:
         e8:7a:e8:11:3f:96:54:14:91:1d:34:55:a4:66:c8:f9:7c:61:
         54:9d:83:19:c7:11:91:14:33:16:45:e9:00:4c:0b:89:d6:22:
         02:49:7e:ac
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUQlbo3mnEATl6WtsGnmG+EApB3OUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmIzMmQ2NTAyNTUxYWJhNGViYTU0NmI3
NDNkNzE2NmYyNGY5YTlmMjYwHhcNMjIwMTEzMTkxNzAwWhcNMjMwMTEyMTkyMjAw
WjAzMTEwLwYDVQQDEyg0NzRGNEZDQzg1RkU3QjY0ODQ0Nzg5REQ2Njc1NTk3NDg2
RTBGQjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15xkHQ+acgrv
rdMYePjC81fyQkYcOR3s44jaZ/YI0QT30moSBU8AsbGzZlNUKYRpr7AizzGpLgWk
pUG0KjxNQdLFpL8lBB1yoPuQHlXONBmwQcxa3RfSo84DIfTOgD3Jc9hiXfgKFizl
S6leedEch4VwGH3jDTvfqmoXpVrc8A9wTHNgqhfOwiG0+taDhtQmFp+DMlC5k1r2
Y99xcSTTbuahfe8+4gPKu5Wh5qtKcBAS2fnJVb0tMklUY21WoHaJDeDDajuShygm
t3x+Af9RTzbdInITGUCxneWdjeUW7vGbBWE/QSt6MwQPsNBQ82T9rDnLC+C4+An+
9rot4oTKzwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFEdPT8yF/ntkhEeJ3WZ1WXSG
4PtOMB8GA1UdIwQYMBaAFO6+7hiDDPOBmniQyBVfuXkh30XiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlN2UyNWI3ZTQwMTdlNTRjYzgzZmExMmJjLzAv
RUVCRUVFMTg4MzBDRjM4MTlBNzg5MEM4MTU1RkI5NzkyMURGNDVFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzEyZGM3YTk2LTQ3ZWEtNDUzYi1hM2FkLTM1MWM2ODI0MDlkOS9mY2Iy
MGY1OTY2YjMyZDY1MDI1NTFhYmE0ZWJhNTQ2Yjc0M2Q3MTY2ZjI0ZjlhOWYyNi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTdlMjViN2U0MDE3ZTU0
Y2M4M2ZhMTJiYy8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQC0ANc9Kqv/q8N8amIm/o0wpDVLJtZKG7s/yBmzIQKS
y2P6h13Wis/sDCEZtE8h4eEIeXUTmIQDvbw+TDVGJrwRZPtf4cSSHJLsDhGpYsh2
3Nw/B+KnFymGc/gl8Zk7hr6eMEBjqeZy05blC/wQ7J91irhTv2fO/cJtRUdXkrGX
l5RL0Yi3YwzQIkBgiDs57hdCaBvPoK505J1VolZyTvY3bm9BfThYdMQVqY0+DkqP
Iea6t4iU4VMOlSROB6t9SXsSdjmCJkix77T52+BQlWE0Xjh43n6398boeugRP5ZU
FJEdNFWkZsj5fGFUnYMZxxGRFDMWRekATAuJ1iICSX6s
-----END CERTIFICATE-----