Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          kFCBgJh9Osi58ENVb/KiQQBaxUG9cEAQ9hBQ2PebUvQ=
Subject key identifier:   27:30:8B:68:36:65:9F:7F:C1:85:1B:8C:77:12:CD:65:79:3C:97:17
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       65D7211BCFAC9CDB3BA118816DF09910D0786779
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 04 May 2022 17:53:22 +0000
ROA not before:           Wed 04 May 2022 17:48:22 +0000
ROA not after:            Wed 03 May 2023 17:53:22 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d7:21:1b:cf:ac:9c:db:3b:a1:18:81:6d:f0:99:10:d0:78:67:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: May  4 17:48:22 2022 GMT
            Not After : May  3 17:53:22 2023 GMT
        Subject: CN=27308B6836659F7FC1851B8C7712CD65793C9717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:27:87:94:87:63:2d:0b:0c:9b:2b:e5:64:
                    c4:f8:4c:c0:44:09:fa:89:6f:75:c5:2b:59:cc:c1:
                    28:8c:85:de:87:7d:75:94:3f:90:9d:87:9a:ea:f3:
                    2b:73:08:18:2e:22:23:34:2a:66:e5:92:ba:13:6e:
                    5e:34:bb:bd:af:92:8f:c6:1c:35:75:1c:56:9c:68:
                    43:72:e7:5c:f6:60:42:6b:ed:8a:96:b7:f3:58:fe:
                    16:74:f0:cd:26:0b:63:ae:d8:01:17:4d:59:a2:44:
                    c7:10:ca:8d:d7:4a:a9:71:27:63:78:05:74:7f:48:
                    19:60:ff:8c:55:6f:c2:48:51:dc:b3:e3:6e:28:0f:
                    02:9f:2f:70:d0:f2:c3:68:f6:df:5e:31:82:cf:1f:
                    fd:fa:c1:ba:87:e9:98:df:2a:aa:e3:d5:63:56:38:
                    d4:78:a2:b7:e8:66:2c:b1:83:79:c9:d8:db:0c:ad:
                    4a:5b:60:a5:93:cd:2f:1c:ea:04:ab:4a:71:2b:43:
                    3f:84:d8:51:81:87:11:d8:7c:4c:94:ea:86:dc:ca:
                    41:9c:34:e4:89:e0:0c:39:d0:82:90:71:b8:0d:1c:
                    05:54:31:3f:91:e8:8d:24:2a:e2:58:98:45:fb:fb:
                    99:f3:0b:93:4c:bc:99:46:6d:35:8a:41:15:05:ef:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:30:8B:68:36:65:9F:7F:C1:85:1B:8C:77:12:CD:65:79:3C:97:17
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:52:87:83:ba:1a:fd:60:dc:fc:12:a6:7c:db:0d:4a:f3:
         ee:1a:94:2e:9c:d4:fa:33:32:dc:29:4f:6b:54:c8:7a:4c:c3:
         87:db:17:18:e0:22:26:4b:30:2d:6f:76:3f:d5:b3:2f:72:71:
         30:ec:24:73:b3:3b:e5:e0:84:e2:ac:a4:8a:1e:41:31:ec:7a:
         3c:a5:dc:6e:97:79:8d:b8:9f:ff:6d:bc:77:8a:9f:28:7c:3a:
         61:3b:d6:b8:e9:52:cf:cc:f9:c9:30:bc:fd:5a:ce:7c:04:27:
         c2:91:17:eb:71:01:5a:68:86:ef:9b:21:41:a4:49:9a:25:ea:
         6d:d7:8c:07:fb:61:81:ad:f5:67:9b:73:99:17:2f:1e:34:30:
         0e:d4:08:b6:e1:51:8f:d7:a1:32:0a:9d:01:d3:13:54:4c:8e:
         53:ba:8d:08:76:d9:4b:4a:2d:4b:4b:6f:e5:72:fd:08:74:92:
         3c:23:f2:85:08:fe:66:42:3c:6d:63:71:02:1a:56:53:0c:e4:
         5f:4f:12:b3:c9:9f:38:0a:f2:8c:a3:c0:87:4f:23:d5:0e:c1:
         cb:13:4d:2b:55:09:cf:51:d3:e0:d6:9d:eb:94:6e:35:b0:d1:
         e1:b5:b7:5e:c8:df:c3:87:8d:c1:1e:5f:86:98:ca:9e:f4:0b:
         59:ec:07:13
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUZdchG8+snNs7oRiBbfCZENB4Z3kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmNmNmE3NWZjYTVkMTk5YzdkOTQ4OWY4
ZDI0ZjcxM2U4N2QxMTJkNjUwHhcNMjIwNTA0MTc0ODIyWhcNMjMwNTAzMTc1MzIy
WjAzMTEwLwYDVQQDEygyNzMwOEI2ODM2NjU5RjdGQzE4NTFCOEM3NzEyQ0Q2NTc5
M0M5NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW0nh5SHYy0L
DJsr5WTE+EzARAn6iW91xStZzMEojIXeh311lD+QnYea6vMrcwgYLiIjNCpm5ZK6
E25eNLu9r5KPxhw1dRxWnGhDcudc9mBCa+2KlrfzWP4WdPDNJgtjrtgBF01ZokTH
EMqN10qpcSdjeAV0f0gZYP+MVW/CSFHcs+NuKA8Cny9w0PLDaPbfXjGCzx/9+sG6
h+mY3yqq49VjVjjUeKK36GYssYN5ydjbDK1KW2Clk80vHOoEq0pxK0M/hNhRgYcR
2HxMlOqG3MpBnDTkieAMOdCCkHG4DRwFVDE/keiNJCriWJhF+/uZ8wuTTLyZRm01
ikEVBe+hRwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCcwi2g2ZZ9/wYUbjHcSzWV5
PJcXMB8GA1UdIwQYMBaAFLpT46jGogU+6ANP6u9Y/lH+9Ld1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODA0NzY1N2UwMTgwNjE0MjdhNjAwZTg0LzAv
QkE1M0UzQThDNkEyMDUzRUU4MDM0RkVBRUY1OEZFNTFGRUY0Qjc3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzkzZTNjYmJhLWI2NGEtNGY4Ni1iMDZmLTljZDM4MTNlOWJkZS9mY2Iy
MGY1OTY2Y2Y2YTc1ZmNhNWQxOTljN2Q5NDg5ZjhkMjRmNzEzZTg3ZDExMmQ2NS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwNDc2NTdlMDE4MDYx
NDI3YTYwMGU4NC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzUzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBLcVKHg7oa/WDc/BKmfNsNSvPuGpQunNT6MzLcKU9r
VMh6TMOH2xcY4CImSzAtb3Y/1bMvcnEw7CRzszvl4ITirKSKHkEx7Ho8pdxul3mN
uJ//bbx3ip8ofDphO9a46VLPzPnJMLz9Ws58BCfCkRfrcQFaaIbvmyFBpEmaJept
14wH+2GBrfVnm3OZFy8eNDAO1Ai24VGP16EyCp0B0xNUTI5Tuo0IdtlLSi1LS2/l
cv0IdJI8I/KFCP5mQjxtY3ECGlZTDORfTxKzyZ84CvKMo8CHTyPVDsHLE00rVQnP
UdPg1p3rlG41sNHhtbdeyN/Dh43BHl+GmMqe9AtZ7AcT
-----END CERTIFICATE-----