Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          uk4BR94CmCnUH0sD8L/dxIpsm3Ws3naMb635Z6nqm4M=
Subject key identifier:   60:E0:A5:1A:78:3A:A2:B4:19:3D:3E:CA:81:E7:A4:37:1C:89:A7:02
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       5540A70A0C84623261217BBE7547A9CCA485E80C
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:01 +0000
ROA not before:           Tue 24 May 2022 21:09:01 +0000
ROA not after:            Tue 23 May 2023 21:14:01 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:40:a7:0a:0c:84:62:32:61:21:7b:be:75:47:a9:cc:a4:85:e8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:01 2022 GMT
            Not After : May 23 21:14:01 2023 GMT
        Subject: CN=60E0A51A783AA2B4193D3ECA81E7A4371C89A702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:31:93:a4:5f:41:ab:4a:f4:6b:d8:08:50:
                    67:71:91:3a:5c:23:47:13:12:4b:c2:2f:40:84:e5:
                    aa:43:74:c5:7e:d4:2e:f6:07:dd:a0:1c:43:54:09:
                    74:bf:a9:0d:9c:b5:e5:5e:a7:cd:2c:58:06:a1:5f:
                    bc:b2:02:98:ed:a7:7a:de:df:ed:10:42:4d:12:03:
                    ff:52:d0:d4:18:d1:57:f8:b8:41:34:98:de:a5:65:
                    fe:a0:22:50:5a:5f:ca:18:da:ef:bb:58:e5:ce:99:
                    bf:55:9f:14:bd:96:29:70:35:ac:da:c6:26:6c:b0:
                    2a:7b:9e:db:2e:46:76:7f:a2:5d:fa:25:e2:0d:49:
                    f1:2b:b3:bd:df:2a:2c:47:cd:9a:83:16:b8:16:c9:
                    35:88:a3:01:ec:89:89:17:1d:3c:80:bb:7f:42:a9:
                    3b:a0:6d:7d:72:9c:52:4e:0d:34:0b:af:ae:40:7c:
                    77:18:04:56:fc:f0:64:33:c6:1c:87:df:43:8e:da:
                    eb:95:63:ca:da:ee:f6:96:49:7a:e2:39:bd:e9:c7:
                    d0:6b:73:bd:71:8c:17:0e:9c:6d:14:6d:68:62:b3:
                    9e:c7:a3:3a:91:e7:84:59:da:65:98:a5:1f:b8:c6:
                    0b:39:be:1d:cd:10:34:a6:6c:52:90:b8:5f:7c:46:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E0:A5:1A:78:3A:A2:B4:19:3D:3E:CA:81:E7:A4:37:1C:89:A7:02
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:5c:bd:e3:d1:15:3b:85:41:11:7f:de:f8:19:e1:30:1b:
         28:9f:dd:eb:e2:86:2b:a8:94:81:07:9b:58:2e:f9:d9:97:ef:
         a1:d2:d7:29:05:5d:e1:56:c2:5c:86:f6:18:e0:b3:91:7d:a9:
         82:a9:92:6d:78:88:6d:09:68:12:b4:7e:9e:c9:f2:7b:61:9b:
         f8:18:1e:d4:43:04:5c:07:17:9c:b3:a3:57:0b:bc:db:fc:70:
         06:11:08:52:7f:d9:27:54:50:58:aa:28:27:44:02:b4:9f:3c:
         b6:e1:b3:94:ab:10:f2:90:d6:df:de:3e:64:26:c5:76:ff:f7:
         c7:31:8e:b2:60:ba:57:70:f1:9b:eb:9e:c7:24:48:c8:1f:6e:
         ca:7a:aa:cb:3b:15:45:49:8b:19:87:be:04:28:d9:63:3a:46:
         54:9f:dc:46:08:c8:1d:a5:22:3d:c2:c2:58:be:d4:cc:2c:23:
         7e:4e:37:59:20:07:9d:84:bc:93:8d:a5:c2:9f:3e:97:10:ae:
         d1:92:1c:78:40:d6:5d:ec:45:f4:d6:31:07:88:8e:62:d8:0b:
         32:40:19:f0:7f:a2:25:b0:e8:93:4a:c4:45:3d:61:45:07:5e:
         f9:44:7b:5b:41:77:2e:b8:ae:3a:b6:4e:11:ed:8c:69:30:4f:
         75:6b:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----