Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          GuGY4A3iQq1mSK8XL+bld45R8JpjS47qfPzo2a+WpXU=
Subject key identifier:   5B:4F:3B:D0:24:71:BE:40:81:DE:45:D9:0A:46:48:FD:BF:B8:FF:D9
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       4F00D319E49EDD458E8A47226650A424E518E17B
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:05:51 +0000
ROA not before:           Sun 22 May 2022 06:00:51 +0000
ROA not after:            Sun 21 May 2023 06:05:51 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:00:d3:19:e4:9e:dd:45:8e:8a:47:22:66:50:a4:24:e5:18:e1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:00:51 2022 GMT
            Not After : May 21 06:05:51 2023 GMT
        Subject: CN=5B4F3BD02471BE4081DE45D90A4648FDBFB8FFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dc:f6:36:82:b2:b8:fc:0f:f3:3f:d4:a5:ff:
                    bb:26:68:61:a7:a6:10:1e:62:69:3c:99:81:78:bc:
                    9e:b4:f2:c6:d1:c5:8f:fc:8f:60:63:f7:09:07:b6:
                    21:e9:cd:9a:29:01:8a:ff:ee:36:34:b1:b9:15:f2:
                    42:12:eb:eb:81:55:92:8b:4b:87:69:4a:25:a2:44:
                    62:fe:c7:02:21:78:19:84:14:a2:b0:66:f2:d6:8b:
                    e5:12:58:61:2c:e2:d3:ae:45:52:80:42:73:2a:1d:
                    73:84:1c:5b:93:59:e7:85:1a:24:e1:79:ab:e8:92:
                    dd:d9:97:1c:0e:20:60:d3:d9:b5:7b:41:21:b7:7d:
                    95:81:a7:8f:d0:37:0a:57:f4:29:54:49:2a:cc:c1:
                    61:bd:4b:ed:49:2e:58:82:4c:2b:2c:33:d4:8a:aa:
                    56:3c:d7:32:11:3b:87:c5:05:de:b7:a1:f3:32:53:
                    27:6a:31:78:cd:a3:dd:ef:68:18:3e:c0:60:04:fc:
                    01:3a:16:ec:b5:69:bf:b8:90:ad:5f:87:1c:c8:7c:
                    86:e7:cd:9c:78:92:8a:91:f6:76:1b:81:14:de:a6:
                    d0:e4:b7:fe:d2:60:d7:b6:6b:b2:4b:19:2a:46:2c:
                    ea:71:c5:6c:8c:a6:56:f1:3b:5d:40:f8:1b:c6:ee:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:3B:D0:24:71:BE:40:81:DE:45:D9:0A:46:48:FD:BF:B8:FF:D9
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:4d:15:dc:44:cd:95:21:42:f0:79:c7:32:54:4a:5b:f5:
         ab:17:75:85:28:e4:f5:24:19:9b:14:6a:ca:3c:2a:0c:2c:a3:
         0b:c4:0d:ed:a9:bb:c0:4f:1f:c4:3b:5a:17:b5:0c:f9:06:93:
         7a:61:d0:88:40:92:fd:fe:19:98:4d:31:5d:30:6c:52:d0:60:
         5a:86:fb:2b:82:32:d5:01:33:37:33:ef:df:e8:16:18:66:77:
         ae:d4:57:72:23:e2:04:b9:a1:b2:b3:88:ce:ab:4f:88:21:75:
         27:fe:11:67:39:bf:d4:04:f4:d8:7a:d7:f7:cc:2b:98:b6:a1:
         1b:25:25:b5:f9:c0:8c:e6:e2:5b:d6:3a:5f:32:9c:e1:4f:b8:
         7e:4b:1c:34:10:a2:3c:b1:f5:e3:0b:a6:2a:b8:8f:81:af:61:
         24:6a:58:29:34:c9:34:ea:94:24:f0:1f:23:2a:cf:2f:49:cc:
         8c:19:08:77:bb:71:66:0a:0f:3a:af:c7:74:b4:28:5c:5c:fa:
         66:8d:d3:49:c6:70:97:61:8f:33:e4:7c:1b:a6:9a:59:89:1f:
         34:7d:3a:3f:4b:70:11:81:48:79:f6:01:1b:d2:4c:26:c3:6f:
         84:83:7b:2d:a2:5b:65:82:1f:02:3b:5c:85:d3:1d:11:f7:6f:
         22:97:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----