Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          jOddGrqC08xNyLY0fd1j+B7FB5INIdtox9Ngsp/+FFs=
Subject key identifier:   3D:B1:6C:41:E0:E3:D0:1D:D9:2A:FD:93:92:BF:EE:5E:F0:20:62:43
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       0ADBB074EC71E6E4C7C17FEF94EB20418EABF19A
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:12 +0000
ROA not before:           Mon 25 Apr 2022 15:06:12 +0000
ROA not after:            Mon 24 Apr 2023 15:11:12 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:db:b0:74:ec:71:e6:e4:c7:c1:7f:ef:94:eb:20:41:8e:ab:f1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:12 2022 GMT
            Not After : Apr 24 15:11:12 2023 GMT
        Subject: CN=3DB16C41E0E3D01DD92AFD9392BFEE5EF0206243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:0c:95:45:1b:72:06:c4:9c:b8:35:ac:b8:
                    00:ec:46:7e:b0:c6:68:7f:36:68:c2:80:fd:cd:dc:
                    80:31:c4:ef:c3:03:02:4e:ec:4a:31:b3:18:64:c1:
                    a8:f1:ee:51:25:cc:66:79:c4:65:4d:44:01:79:14:
                    88:c7:d4:69:70:74:45:87:dd:e0:30:b0:0c:84:bd:
                    32:6d:48:38:f4:c1:8a:1f:07:3b:4c:28:a6:88:49:
                    c3:44:a0:7a:01:94:e9:a2:03:f2:da:e6:22:3d:69:
                    93:c0:97:ce:d6:c6:54:ac:6e:d7:ca:5f:7a:bc:a1:
                    94:af:27:3c:d1:45:d5:7e:1c:10:ee:25:c4:64:66:
                    65:da:97:fc:79:e4:ef:0f:b5:0c:b9:e6:47:59:73:
                    dd:91:64:17:35:41:b9:47:46:5b:d0:eb:1a:5b:47:
                    7d:7f:80:31:7b:7b:8d:16:56:18:a7:1e:c9:d3:98:
                    30:1c:7b:f6:71:a8:20:29:6e:ad:6a:d5:72:fb:96:
                    c0:fc:e4:a9:e5:7f:5e:37:0b:cc:c8:62:d6:e5:29:
                    e3:6c:50:2f:02:0c:1f:1f:79:f7:7b:fd:8e:40:fb:
                    c1:e5:b5:63:0d:18:0f:b5:49:0a:de:78:89:a6:e4:
                    f5:64:99:d6:a9:5c:e9:60:d8:a8:a9:c8:04:a3:d7:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B1:6C:41:E0:E3:D0:1D:D9:2A:FD:93:92:BF:EE:5E:F0:20:62:43
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:04:99:ae:84:bc:a2:85:41:d6:67:cf:bb:58:4b:16:00:
         df:1a:bb:dd:ee:b4:10:39:d7:4d:62:a9:14:d6:93:ea:f4:cc:
         9c:65:1a:13:74:3d:31:6f:8c:e4:85:03:26:dd:7e:2c:0f:28:
         d3:9b:77:d8:fa:19:cf:58:0c:ab:e1:da:e2:47:47:0e:be:b1:
         7e:9c:95:91:0a:ac:b6:e4:eb:2b:56:60:5a:64:3e:a9:f1:5d:
         ab:ee:4f:93:97:36:56:59:17:fd:d5:0a:51:f9:70:9b:30:8b:
         f3:bd:ce:fa:3e:6b:57:47:98:80:4f:86:4a:bc:66:76:02:e1:
         b2:dd:18:06:93:0f:d2:de:b2:b5:dc:61:0d:62:b6:01:c6:82:
         24:6d:f4:f3:b6:dc:bd:30:17:5f:ff:31:ff:3a:cc:8c:ea:f4:
         d3:a4:c5:0e:de:49:08:26:88:56:86:dd:c1:d5:35:13:7b:99:
         80:f5:01:f0:52:ec:10:66:99:16:c1:98:86:30:0b:08:34:0d:
         c4:f5:f0:d6:76:70:d3:2c:c2:a7:37:27:51:c9:35:48:08:88:
         5c:8b:92:46:ac:3f:ee:df:22:c7:92:ca:82:05:7e:ca:e0:c4:
         4d:06:86:0f:28:24:3c:5e:00:d6:e5:31:d4:47:bf:9c:86:8b:
         02:37:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----