Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          vHoNj6VMz6NHgrs8GIUKdqUu4fKGmV+1aBK8orL5JcY=
Subject key identifier:   65:81:2B:3C:FF:B8:47:CA:21:22:06:43:FF:45:EA:68:00:83:8D:25
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       62703A96F1B4C51930FE6071F1089F2205177C87
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:08 +0000
ROA not before:           Tue 24 May 2022 21:09:08 +0000
ROA not after:            Tue 23 May 2023 21:14:08 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:70:3a:96:f1:b4:c5:19:30:fe:60:71:f1:08:9f:22:05:17:7c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:08 2022 GMT
            Not After : May 23 21:14:08 2023 GMT
        Subject: CN=65812B3CFFB847CA21220643FF45EA6800838D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:2c:97:86:24:d5:3d:f9:4c:f6:96:17:02:
                    5a:d5:5c:70:05:7a:51:31:b5:e8:73:3a:39:2d:fc:
                    32:55:a0:0d:f8:d7:95:45:7b:97:24:0f:2a:f2:c3:
                    76:ac:9a:29:72:1a:64:1f:fe:17:21:b3:3c:bd:ae:
                    f3:59:01:77:5c:34:fe:53:38:d3:f2:d1:8a:6f:64:
                    e2:66:75:71:0c:89:91:64:e8:e8:bd:43:00:a6:e5:
                    18:04:2e:eb:f6:c3:d7:76:f3:39:82:7f:db:98:20:
                    33:91:56:99:19:01:fb:44:05:bf:14:6e:0a:cd:34:
                    c5:79:04:62:ab:66:71:cf:1a:c4:3c:c8:59:cc:4a:
                    6a:d5:53:ea:8d:77:ea:25:62:97:57:c2:63:df:76:
                    aa:a8:45:da:3b:75:a8:63:bf:8b:b6:bf:c9:a8:d8:
                    ec:04:50:98:4f:af:f4:d2:ed:0c:71:4c:92:8b:cd:
                    02:90:f0:73:e5:c2:4c:0f:88:7c:8e:58:b5:72:55:
                    22:b8:0f:10:35:40:5a:5d:85:c9:70:e9:1a:d9:09:
                    4a:da:cd:a4:3c:36:2b:63:80:ec:13:9d:2d:92:1a:
                    30:ce:85:16:ae:5e:bc:b0:83:57:55:30:ef:c6:e2:
                    8d:1b:40:28:7b:c1:59:93:cd:97:cf:e6:a9:34:dd:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:2B:3C:FF:B8:47:CA:21:22:06:43:FF:45:EA:68:00:83:8D:25
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:58:dc:88:61:f3:a6:aa:5c:b6:90:e5:b5:9d:fb:b9:5c:e0:
         dc:47:c8:2a:98:c3:8b:f3:b1:3a:8d:76:d8:7f:62:9e:f9:33:
         8e:d0:3f:96:f2:01:4b:71:80:f7:e3:ad:73:09:93:57:1c:ab:
         69:af:27:7b:5a:a3:44:59:75:79:b0:d0:6f:cb:de:4b:4b:33:
         23:1f:0f:f9:56:a3:ac:6a:6a:ce:de:43:98:be:60:c2:4f:6b:
         c4:64:31:e7:89:ac:5d:0e:98:5c:d8:49:b6:61:bc:6f:18:54:
         ae:b6:38:7c:df:38:29:17:e9:49:7e:97:a2:c7:03:48:f3:c5:
         d4:59:6e:df:ba:29:63:8e:7c:94:ea:4e:27:40:ea:d4:7f:e9:
         a5:a8:fc:05:1d:17:02:d9:3a:e4:16:97:7a:ab:55:b1:5c:67:
         40:8e:05:2f:16:fe:5a:62:12:c9:01:7f:20:08:11:ec:e5:6e:
         a1:4e:53:7e:c8:64:0f:3c:61:9a:9b:e8:dd:3a:ef:87:77:00:
         6d:9c:ae:3b:51:88:38:52:ea:63:2e:22:a0:2d:89:ec:0e:f7:
         a8:68:e0:7a:97:43:ca:93:5e:91:c5:35:50:bb:ba:36:2f:52:
         e1:ed:45:c0:22:16:c3:28:ac:b5:80:57:99:6b:a9:56:84:23:
         42:d0:96:3f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYnA6lvG0xRkw/mBx8QifIgUXfIcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmYzZDNmZTEyYTZiNjdjM2YwZTJiNTJl
ZDU0ZGY2NTM0NDIzOWMzYzQwHhcNMjIwNTI0MjEwOTA4WhcNMjMwNTIzMjExNDA4
WjAzMTEwLwYDVQQDEyg2NTgxMkIzQ0ZGQjg0N0NBMjEyMjA2NDNGRjQ1RUE2ODAw
ODM4RDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqcsl4Yk1T35
TPaWFwJa1VxwBXpRMbXoczo5LfwyVaAN+NeVRXuXJA8q8sN2rJopchpkH/4XIbM8
va7zWQF3XDT+UzjT8tGKb2TiZnVxDImRZOjovUMApuUYBC7r9sPXdvM5gn/bmCAz
kVaZGQH7RAW/FG4KzTTFeQRiq2ZxzxrEPMhZzEpq1VPqjXfqJWKXV8Jj33aqqEXa
O3WoY7+Ltr/JqNjsBFCYT6/00u0McUySi80CkPBz5cJMD4h8jli1clUiuA8QNUBa
XYXJcOka2QlK2s2kPDYrY4DsE50tkhowzoUWrl68sINXVTDvxuKNG0Aoe8FZk82X
z+apNN00owIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGWBKzz/uEfKISIGQ/9F6mgA
g40lMB8GA1UdIwQYMBaAFMv6ZHYKtyB1SxpJsqQTPIR0N/r6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgwZjdlYTE0ZTAwNjNhLzAv
Q0JGQTY0NzYwQUI3MjA3NTRCMUE0OUIyQTQxMzNDODQ3NDM3RkFGQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzIwOWEzYWFlLWZkZjMtNDYyNi04OTNjLWQ0ZGJiYjYwN2RiYy9mY2Iy
MGY1OTY2ZjNkM2ZlMTJhNmI2N2MzZjBlMmI1MmVkNTRkZjY1MzQ0MjM5YzNjNC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MGY3
ZWExNGUwMDYzYS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzMzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwMAMA0G
CSqGSIb3DQEBCwUAA4IBAQCvWNyIYfOmqly2kOW1nfu5XODcR8gqmMOL87E6jXbY
f2Ke+TOO0D+W8gFLcYD3461zCZNXHKtpryd7WqNEWXV5sNBvy95LSzMjHw/5VqOs
amrO3kOYvmDCT2vEZDHniaxdDphc2Em2YbxvGFSutjh83zgpF+lJfpeixwNI88XU
WW7fuiljjnyU6k4nQOrUf+mlqPwFHRcC2TrkFpd6q1WxXGdAjgUvFv5aYhLJAX8g
CBHs5W6hTlN+yGQPPGGam+jdOu+HdwBtnK47UYg4UupjLiKgLYnsDveoaOB6l0PK
k16RxTVQu7o2L1Lh7UXAIhbDKKy1gFeZa6lWhCNC0JY/
-----END CERTIFICATE-----