Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          FbZxXzk/12f3GPs3vWdNCW9Fs1VorW0/haW/zyh7jBM=
Subject key identifier:   99:0A:F0:FF:78:78:59:1D:4E:AF:44:B2:E2:D9:F3:83:50:77:29:C8
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       145B2876112D20AE1AB5644C1E2EDB7FC8AB52C5
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:23 +0000
ROA not before:           Mon 25 Apr 2022 15:06:23 +0000
ROA not after:            Mon 24 Apr 2023 15:11:23 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5b:28:76:11:2d:20:ae:1a:b5:64:4c:1e:2e:db:7f:c8:ab:52:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:23 2022 GMT
            Not After : Apr 24 15:11:23 2023 GMT
        Subject: CN=990AF0FF7878591D4EAF44B2E2D9F383507729C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:36:47:b9:8c:ea:7c:20:8a:73:af:34:4c:
                    00:d5:c3:6f:47:a6:39:d6:2f:13:ca:63:33:a6:af:
                    e5:7b:97:4b:eb:46:a9:00:b6:d7:74:b7:fa:a0:55:
                    14:68:8e:37:5f:69:a8:89:ce:a4:67:23:00:78:89:
                    ea:1b:1e:05:1a:c6:c8:87:39:4c:a8:d6:d5:47:88:
                    6d:52:18:31:8b:bd:89:07:cf:da:99:da:48:25:7a:
                    72:e7:e8:7f:08:e3:1e:ae:a9:8b:ef:0b:c2:f5:ed:
                    d4:82:6b:64:8c:52:07:ea:9c:08:d4:25:5d:95:e8:
                    f7:a0:88:bb:c2:02:2f:d5:8c:8b:f5:0a:27:93:07:
                    59:f6:b1:6e:f3:ed:12:f1:8c:3a:f1:8a:b4:bc:d4:
                    9d:03:49:bd:45:2a:5f:a6:28:11:c4:38:14:ca:5f:
                    c0:3f:e3:ba:27:2d:77:0d:7a:b6:8c:b3:9c:54:87:
                    1a:7b:79:57:db:31:c4:3f:00:60:e3:a8:93:54:f0:
                    e2:94:c3:e1:44:08:a5:0f:d8:a5:bb:bd:1f:c3:fd:
                    ec:67:88:e4:d7:e5:db:cc:38:f2:2c:e5:c3:cd:07:
                    f7:3d:59:e1:ca:f4:71:53:5b:05:c2:14:98:ec:df:
                    9d:fc:9a:c8:4f:c5:f4:9f:82:cd:f1:d3:3d:7b:70:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:F0:FF:78:78:59:1D:4E:AF:44:B2:E2:D9:F3:83:50:77:29:C8
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:9b:f3:50:77:ca:2a:c2:00:95:98:03:11:e7:9e:5c:54:
         25:b0:0a:14:48:cf:b6:e1:e7:79:f9:19:67:2c:d4:30:bf:fd:
         9f:a0:8d:16:11:1a:9d:78:e8:55:f7:3f:da:2c:b9:14:3b:90:
         0d:7f:f2:d4:b2:5f:77:42:46:43:0c:55:df:8f:27:36:7e:be:
         72:e7:2a:35:08:69:0d:5f:a3:ed:bb:57:e1:c4:29:42:73:bc:
         8d:8e:c8:dc:fe:5c:8a:f1:e3:cc:bf:5a:ab:72:c2:d7:e3:a5:
         3a:4c:90:66:97:f6:2d:0f:f7:56:bd:17:32:61:85:1e:84:8a:
         ee:9d:a7:f7:36:c3:fa:de:e1:6f:73:50:26:27:08:30:1a:90:
         48:2d:88:05:ec:30:8c:56:a0:ec:3d:b7:f4:c3:29:b2:4f:25:
         5b:f9:1f:aa:f6:7d:0d:37:7c:6c:76:a4:e8:fb:01:7c:49:6b:
         1e:18:a4:ed:e6:2a:d2:0a:d7:db:b5:65:7c:48:dc:ae:44:fc:
         d5:f6:98:9c:e0:89:a0:14:ea:c2:3c:d4:53:ee:60:81:ae:d9:
         a1:d1:82:49:a7:12:00:dd:0a:c9:d9:15:44:5b:21:3d:46:82:
         90:36:09:c4:84:e7:78:77:c1:c7:f9:2a:7c:bf:d8:ff:61:37:
         6d:60:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----