Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          29DhuM2Droy8JBPi2D+yRfWD6XV0APCWh2eya4VeUjU=
Subject key identifier:   B1:50:71:DA:BF:0E:C2:AB:A2:23:15:FF:DC:B5:7F:69:F0:27:F6:E5
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       10C948591D264BDB5FA62EE34AE760C92F1A3CE8
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:01:10 +0000
ROA not before:           Thu 13 Jan 2022 18:56:10 +0000
ROA not after:            Thu 12 Jan 2023 19:01:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c9:48:59:1d:26:4b:db:5f:a6:2e:e3:4a:e7:60:c9:2f:1a:3c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 18:56:10 2022 GMT
            Not After : Jan 12 19:01:10 2023 GMT
        Subject: CN=B15071DABF0EC2ABA22315FFDCB57F69F027F6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:5b:c4:91:ae:f7:05:1a:a8:8f:d9:8f:3d:
                    03:a3:5e:e6:86:6e:4c:f5:51:59:9c:0f:ee:5d:b2:
                    80:86:68:cd:c8:4c:26:f1:cf:60:e4:b4:cf:16:01:
                    23:43:fb:35:4a:22:9e:1e:9c:4e:31:b7:85:c9:47:
                    5a:70:69:c6:30:01:6a:da:ee:97:93:46:c2:fe:f9:
                    3c:8b:0c:f2:e4:20:d9:de:07:34:5f:95:46:b8:76:
                    db:37:e4:33:a8:2e:a0:06:ad:54:0f:99:e3:25:c2:
                    20:78:2a:ce:9e:55:d1:04:07:eb:dd:aa:f0:7c:e6:
                    39:14:37:c7:dc:0c:ed:3f:97:c4:be:08:dc:1c:24:
                    67:e8:65:de:6c:cd:c8:3f:2c:44:18:62:3a:f3:2a:
                    92:24:29:3e:b8:a4:2c:8b:da:b3:4e:1f:e4:6c:af:
                    42:7e:64:d3:f2:e4:9b:25:48:34:e5:72:ac:19:1f:
                    ac:35:a0:7d:9f:9c:40:ad:4d:ea:c5:dc:24:10:24:
                    35:96:e2:13:fc:4f:e6:6c:df:62:dd:a7:ab:05:e8:
                    06:6b:4b:31:5b:1a:64:94:54:fa:b3:b9:8e:e2:16:
                    09:62:11:23:e7:f4:24:e9:25:22:95:b9:51:5a:00:
                    e1:1b:c0:4b:0e:5c:60:26:7b:eb:00:26:17:c5:b7:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:71:DA:BF:0E:C2:AB:A2:23:15:FF:DC:B5:7F:69:F0:27:F6:E5
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:9f:b6:56:e1:0a:7b:1a:2b:fa:88:19:cf:95:90:7d:69:58:
         97:4a:be:8a:d1:69:6d:f5:4f:fe:42:63:4f:8d:21:23:90:60:
         90:34:11:6f:d2:c7:88:cd:fa:b2:7c:55:07:6b:11:52:23:63:
         7c:b6:c2:5c:97:04:24:3a:59:de:36:0f:7e:25:bc:3b:d6:c1:
         59:25:ed:46:05:47:a3:33:eb:67:54:78:66:f1:f6:e0:21:7b:
         7e:2a:95:b0:10:e5:0e:24:4b:45:d3:bf:b7:e5:57:66:fa:2f:
         0a:23:59:33:5e:2d:90:81:6b:82:6d:d1:88:ac:67:13:3b:d8:
         1a:a8:bc:4e:ea:c4:5a:0f:fa:79:e0:11:64:a3:fe:0c:a4:41:
         8f:03:dd:06:33:b3:29:a7:4b:97:d9:52:e4:c6:b2:07:88:04:
         6d:4d:5c:ce:00:9a:17:bb:18:79:93:e0:e4:97:b4:9f:4a:df:
         a9:a1:3c:78:a2:85:4f:52:52:c3:d2:dc:ff:15:7a:d9:45:38:
         15:78:bc:15:c8:94:e0:87:ab:0a:d0:c0:22:fa:63:7f:be:33:
         92:75:d3:ba:9f:da:2a:12:d9:21:f0:a0:3c:49:6e:63:d2:b6:
         88:b1:2e:94:2e:fc:d5:09:3d:ef:3f:c5:71:5d:bb:00:11:d1:
         8a:6d:e2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----