Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          rer5b2Fuogs1qXAUOJhRI0a1UnAmRtEmEMwLaBUvEts=
Subject key identifier:   05:DC:7C:19:57:B0:70:C0:C8:25:2B:13:0A:40:E4:F1:6A:2A:A8:95
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       1B132E26A102B613A2BFD9A56B4DAEFC9100108E
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:18 +0000
ROA not before:           Mon 25 Apr 2022 15:06:18 +0000
ROA not after:            Mon 24 Apr 2023 15:11:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:2e:26:a1:02:b6:13:a2:bf:d9:a5:6b:4d:ae:fc:91:00:10:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:18 2022 GMT
            Not After : Apr 24 15:11:18 2023 GMT
        Subject: CN=05DC7C1957B070C0C8252B130A40E4F16A2AA895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:1f:33:c4:02:e6:36:4d:39:8d:0f:6b:77:
                    52:a7:eb:64:fc:e0:b2:ff:a9:4d:84:f6:44:2b:1d:
                    f0:68:d6:29:91:71:b8:cf:9e:f5:34:c6:97:6a:df:
                    a4:8b:46:48:dc:5f:03:f3:04:f9:7a:92:2f:da:95:
                    46:5f:2d:b9:b5:66:e9:af:74:e2:a4:49:92:30:65:
                    5d:58:d5:22:a7:04:81:63:43:42:11:f1:51:83:77:
                    37:11:42:e4:fe:70:69:d8:b9:5d:71:ef:82:99:32:
                    48:6a:fa:15:ae:ca:f5:1f:b6:39:df:7a:3d:2f:91:
                    0b:c7:8e:ad:78:25:c5:da:3e:ff:ed:af:fe:3d:bc:
                    46:6b:4d:d2:a3:d7:0b:dc:f4:53:79:fa:71:29:54:
                    34:4d:85:48:35:3d:c2:a4:48:55:5f:b8:ae:aa:51:
                    77:01:44:20:12:0a:ec:24:9a:c1:18:3d:bb:dc:f2:
                    19:f5:0e:8a:7e:ba:c0:94:34:97:6d:ac:45:7a:36:
                    a3:e5:65:09:7b:4d:1e:bd:5c:24:cf:d6:59:64:3b:
                    0f:75:72:04:f2:38:02:1b:2e:3e:e3:4d:1a:9f:bf:
                    f2:11:8e:3e:84:dd:87:f9:69:ab:b1:ce:2c:6f:09:
                    53:03:e9:df:14:fa:11:4f:b7:46:4b:9d:17:9e:4c:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:7C:19:57:B0:70:C0:C8:25:2B:13:0A:40:E4:F1:6A:2A:A8:95
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:e6:b2:78:07:8f:99:d0:28:0b:fd:94:06:3b:58:30:20:83:
         30:c0:19:3e:cb:e0:43:8b:fd:dc:bb:30:bb:dd:7e:92:df:a9:
         93:3e:6e:8c:71:35:81:e7:ad:28:1f:19:14:3a:c4:22:6a:45:
         82:39:01:52:72:ec:77:32:4b:a0:ae:d5:a8:83:0e:f4:2a:b5:
         96:20:e7:83:a5:49:e9:7e:b6:2c:39:e1:95:e8:45:67:6a:f6:
         65:2b:77:16:9a:0c:40:2a:e7:a6:25:44:8d:93:cc:42:ea:58:
         4b:53:70:20:fe:86:c6:5e:74:f6:0d:79:2c:d6:28:61:84:f9:
         85:f7:fa:c4:39:4b:41:e6:48:d1:49:88:9b:29:91:49:c9:85:
         29:26:24:1e:8e:77:96:48:42:31:bd:a0:d7:38:5f:f6:4e:33:
         74:67:b1:04:5f:ee:fc:d6:68:9c:d5:b9:93:fa:79:e0:33:24:
         ef:d3:42:62:6b:0c:f5:3b:cc:55:51:a6:36:83:62:5a:e0:cc:
         ab:8b:d2:00:0c:f4:e1:18:83:9f:50:7f:a8:d8:b2:33:a6:2c:
         d1:01:f7:fe:df:f3:a6:03:50:eb:cb:a3:28:50:be:9a:da:2b:
         7c:fd:4d:e7:06:56:39:73:74:50:dc:a6:15:47:a2:04:d7:4e:
         62:c3:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----