Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          J0ZZ4f5UfOKB9EeUvg9KrjmysseLOdTKFahJJYh8wU0=
Subject key identifier:   09:9A:FA:08:D2:38:B7:13:62:25:06:61:DC:2E:B5:12:85:3E:72:15
Certificate issuer:       /CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
Certificate serial:       0B628EC165750D2A735517C0E1665A205CCC318A
Authority key identifier: BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 25 Apr 2022 15:11:08 +0000
ROA not before:           Mon 25 Apr 2022 15:06:08 +0000
ROA not after:            Mon 24 Apr 2023 15:11:08 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:62:8e:c1:65:75:0d:2a:73:55:17:c0:e1:66:5a:20:5c:cc:31:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65
        Validity
            Not Before: Apr 25 15:06:08 2022 GMT
            Not After : Apr 24 15:11:08 2023 GMT
        Subject: CN=099AFA08D238B71362250661DC2EB512853E7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:f4:c1:0b:86:ee:cd:37:e0:3f:cc:c4:a5:
                    e7:12:bb:4f:7a:01:8f:f9:2f:f8:bb:af:99:ab:49:
                    70:ff:41:2e:25:e4:76:f3:da:b0:8c:c2:44:d5:77:
                    e7:5e:e6:9f:23:e0:bd:ac:4c:76:fe:a4:52:f4:a9:
                    5b:db:f0:a6:5f:b8:6b:cb:42:7f:18:ee:11:de:2f:
                    92:64:76:0c:5d:6f:8f:8e:65:be:9c:12:dd:8f:e1:
                    4c:f7:48:9c:60:fd:33:e1:97:74:0f:1e:d0:75:4b:
                    19:4d:ae:71:3d:1a:48:b8:dc:40:0a:51:44:95:bc:
                    b7:4a:72:bb:ab:35:35:04:6a:77:8d:ad:80:04:0c:
                    aa:4f:87:dc:ac:1d:b0:18:46:5a:b2:cf:f9:eb:99:
                    0e:2a:f7:b1:b6:06:6b:d5:a5:54:28:5d:47:f9:32:
                    55:ea:0b:85:90:e1:7d:63:1e:65:a7:0c:52:6c:72:
                    af:70:06:eb:79:0c:90:34:ad:aa:9a:e6:54:fd:24:
                    35:b6:ca:7e:3b:7f:46:ef:47:ab:70:e7:e5:63:80:
                    2a:c1:8b:28:44:03:a3:38:b7:11:f6:fb:9e:e8:9a:
                    e2:20:f3:4e:ef:b4:84:6e:6e:7f:0c:98:d1:43:26:
                    d5:37:d8:9d:23:21:c8:85:b4:42:7f:86:08:06:6f:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:FA:08:D2:38:B7:13:62:25:06:61:DC:2E:B5:12:85:3E:72:15
            X509v3 Authority Key Identifier:
                keyid:BA:53:E3:A8:C6:A2:05:3E:E8:03:4F:EA:EF:58:FE:51:FE:F4:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/BA53E3A8C6A2053EE8034FEAEF58FE51FEF4B775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93e3cbba-b64a-4f86-b06f-9cd3813e9bde/fcb20f5966cf6a75fca5d199c7d9489f8d24f713e87d112d65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8047657e018061427a600e84/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:39:03:28:cd:11:ec:9e:99:15:f4:5e:5a:6e:c1:59:cf:63:
         e5:77:08:6f:c7:51:c8:b9:1a:11:91:bb:8b:63:f4:b8:fd:61:
         93:01:b0:91:ab:3b:c9:96:8a:01:53:13:fe:ef:9e:4e:49:25:
         b2:80:d5:71:bb:9a:cc:25:d2:37:b3:9b:39:89:dc:f2:0f:42:
         5c:f5:45:31:1f:cd:8d:5f:d7:49:77:93:a6:4f:51:33:e5:18:
         a4:0d:17:22:06:e3:aa:0d:78:d1:c8:bb:76:ae:d5:d8:1e:ab:
         ab:54:38:61:80:ac:d1:fa:09:6f:f5:8d:2d:72:69:94:64:15:
         0b:bf:ac:b3:01:d5:00:61:81:c4:86:b8:39:9a:23:fc:2d:8f:
         62:c8:ee:82:10:be:ce:90:e9:be:32:3f:3e:b3:22:16:8b:11:
         97:e3:d5:1a:f9:1a:b5:62:0d:e3:5f:ef:31:d5:31:56:0d:c5:
         7b:75:50:7d:92:17:c1:95:a5:4b:1a:e5:4d:b4:a5:f0:de:0c:
         10:92:1f:12:91:c9:ed:70:f5:db:5a:f7:dc:96:d8:e9:9d:9a:
         9d:80:3a:93:e6:07:f1:a9:aa:0f:f2:5d:ba:12:c1:07:a3:e2:
         e7:65:9d:46:f9:5f:fa:04:a0:fb:0d:00:8d:2d:43:17:18:56:
         40:cc:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----