Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          WwrLuLw4vHK+4C93PDIfnaA/x9kLi3O2bLYvrpp76c8=
Subject key identifier:   BB:5F:F9:09:6E:1A:A5:02:F1:55:D1:AF:54:CB:D2:55:8F:2B:DA:D4
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       2E12132F7AF3A6D3A40425EAA4B52FAC155F70AD
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 27 Apr 2022 15:03:56 +0000
ROA not before:           Wed 27 Apr 2022 14:58:56 +0000
ROA not after:            Wed 26 Apr 2023 15:03:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:13:2f:7a:f3:a6:d3:a4:04:25:ea:a4:b5:2f:ac:15:5f:70:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 27 14:58:56 2022 GMT
            Not After : Apr 26 15:03:56 2023 GMT
        Subject: CN=BB5FF9096E1AA502F155D1AF54CBD2558F2BDAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:d4:b8:e4:70:57:3e:89:42:4b:de:85:4f:
                    63:6a:1b:f4:e7:6b:b6:70:83:9a:42:c6:17:1d:8e:
                    dc:23:0d:5e:4b:1b:ad:c1:56:c7:5d:87:ea:13:65:
                    01:1f:36:ff:0b:d2:8c:99:d7:f3:22:19:b9:7c:91:
                    16:5f:38:42:6c:1d:bd:03:d3:a0:fc:52:02:7b:11:
                    ee:e3:ff:94:63:e1:cf:79:36:7f:5a:9d:29:f6:9b:
                    3d:a1:05:84:4e:7b:cb:df:f1:86:55:b3:d8:af:8d:
                    8b:36:bc:41:2a:8c:32:cd:dd:4e:cb:5d:27:e3:43:
                    4d:b5:5c:4c:95:89:6e:1b:82:dc:b8:10:c0:b4:e6:
                    bb:29:33:a8:da:62:54:b1:25:8b:2a:3c:7f:fe:cf:
                    60:f4:63:83:16:92:23:89:70:c9:9c:1f:62:c5:14:
                    ac:e1:9e:f2:95:eb:8f:e5:3f:67:fa:53:f1:04:f7:
                    24:8a:8a:64:5b:ad:a9:36:1c:a4:c4:84:24:db:38:
                    4a:06:59:6b:a5:7a:db:83:a6:d5:57:88:09:bd:a8:
                    76:bf:88:de:84:85:34:2a:15:a5:f4:95:74:c9:ea:
                    6a:7c:7b:85:c2:97:aa:b2:19:3f:b1:29:3f:3a:bc:
                    4f:c3:65:e4:31:81:77:13:ce:94:3b:a4:a1:e5:b3:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5F:F9:09:6E:1A:A5:02:F1:55:D1:AF:54:CB:D2:55:8F:2B:DA:D4
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:55:39:c8:b1:c0:84:ba:f4:1f:a3:66:6b:c8:51:7b:97:7f:
         e9:2f:3c:16:2f:30:fb:b6:f0:42:0f:93:d2:ab:17:10:52:ce:
         c7:c3:98:ff:81:c6:5e:38:0e:5b:f0:64:bf:55:00:45:7e:32:
         39:63:21:68:31:0a:7f:5a:f2:9b:15:7d:4d:66:e0:14:98:b1:
         de:6e:c5:a2:b9:de:4d:a7:03:11:d4:b3:a2:8d:f3:9b:60:95:
         e6:ad:f5:c4:1b:f1:62:77:a2:18:8b:7d:db:ab:1b:1b:5d:7b:
         28:7c:8a:0e:55:ee:bd:07:4e:f3:52:32:90:0f:26:91:7c:db:
         21:54:de:6d:2c:21:b3:a6:08:8b:67:50:11:44:8f:72:da:81:
         07:ff:d5:6e:25:86:5d:26:d8:f4:e8:4c:e0:13:f2:94:5c:0f:
         b2:e7:4c:0b:2b:f2:5d:1a:14:bc:ff:1d:ab:fe:22:87:79:63:
         37:26:f3:39:63:0f:67:e6:a7:2d:15:58:b9:61:41:20:8a:1a:
         81:8e:8a:0d:3b:ed:eb:30:e5:41:ef:28:97:7a:33:4d:46:19:
         9a:9b:47:af:de:28:c8:24:9b:7e:5a:ac:f9:09:d6:8b:7e:84:
         e5:dd:ca:ca:51:7b:a9:9c:9e:99:4f:3f:59:fa:45:34:6e:5c:
         95:27:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----