Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Y6YslTCkBWyPgdQN1R8J1cnryLdnVjXFdACEkf7tSVg=
Subject key identifier:   E6:C1:3D:67:75:E7:BE:B2:60:D6:96:AA:90:4F:6E:B1:B6:47:58:7C
Certificate issuer:       /CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
Certificate serial:       2F0C2B9AA178BF6391E2BC71A19CC6D975C73A78
Authority key identifier: CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 24 May 2022 21:14:19 +0000
ROA not before:           Tue 24 May 2022 21:09:19 +0000
ROA not after:            Tue 23 May 2023 21:14:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0c:2b:9a:a1:78:bf:63:91:e2:bc:71:a1:9c:c6:d9:75:c7:3a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Validity
            Not Before: May 24 21:09:19 2022 GMT
            Not After : May 23 21:14:19 2023 GMT
        Subject: CN=E6C13D6775E7BEB260D696AA904F6EB1B647587C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:d3:6f:13:56:df:0a:ac:27:92:f0:55:c4:
                    7c:3d:50:50:c2:8c:30:46:c1:c5:36:b3:40:a8:18:
                    99:e3:0f:0e:82:93:8c:d0:39:47:4d:88:14:7b:05:
                    20:e1:41:82:a8:b9:fd:cc:5f:92:2f:49:29:3f:76:
                    d2:5b:09:aa:f1:be:a7:19:2a:26:42:94:a2:1d:cc:
                    ed:fb:c3:0a:ea:6a:2b:9e:fb:86:b8:1f:7a:44:2a:
                    19:70:24:ed:7b:0c:41:f9:cc:63:75:df:94:82:f9:
                    4b:09:74:a6:6b:5a:0d:b4:e3:76:6e:89:8b:b3:71:
                    d4:6c:3f:a0:6f:8a:49:68:ab:6b:76:27:72:9f:10:
                    46:ee:ad:27:95:91:47:38:34:88:5b:08:5f:3c:66:
                    83:44:12:70:cf:c6:f3:c3:bc:6c:6e:92:c1:98:25:
                    7f:f2:e2:c7:21:94:b7:5b:d2:ff:16:be:44:c8:97:
                    81:0a:dc:de:cb:ac:8a:95:e1:9a:f9:2f:67:13:75:
                    14:fa:67:5c:03:6e:3f:2e:79:19:7e:11:62:97:28:
                    37:84:5b:8a:cd:39:32:10:80:22:8f:ba:0c:39:9a:
                    52:3f:47:04:da:9f:45:bc:95:8c:65:5f:c3:55:af:
                    cd:f3:00:2a:25:73:82:52:f7:7f:4f:90:b0:38:6a:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C1:3D:67:75:E7:BE:B2:60:D6:96:AA:90:4F:6E:B1:B6:47:58:7C
            X509v3 Authority Key Identifier:
                keyid:CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:96:89:ac:01:06:46:f1:9a:97:ac:0f:fa:6b:7d:74:c8:03:
         b3:b2:ae:4d:94:b4:6d:41:09:73:c4:10:91:9a:5a:5e:f6:d3:
         35:08:fe:71:08:73:ee:62:16:15:d1:0d:41:e8:a8:f2:87:96:
         59:bc:ae:bd:86:06:4f:f2:83:9d:f3:00:3f:a8:fd:ff:e3:ba:
         10:07:ae:c0:10:12:20:61:1f:8e:6f:72:b8:80:78:8c:bd:93:
         6d:e9:59:a3:18:12:3e:09:aa:6e:3b:f9:ee:91:0e:81:48:cd:
         db:e9:92:a1:c9:9b:d8:7f:31:c8:9f:f7:2f:66:d3:21:45:09:
         b3:9c:23:65:83:14:7a:74:b8:6b:a2:58:db:30:c8:9f:5f:a9:
         0a:bb:8f:7b:36:e8:01:75:e5:4a:ca:ad:19:29:cd:88:f7:db:
         0b:5a:00:13:f9:f7:20:f4:25:7e:85:93:c1:fa:25:cd:af:bb:
         9d:09:e5:64:92:0b:f1:24:f7:40:af:67:3c:cd:08:9b:e5:55:
         05:a6:7f:b0:d0:fc:85:af:c2:0e:a6:c9:fe:b1:e5:07:51:4c:
         e9:30:5b:fd:af:8a:40:e4:b4:ca:f6:27:cb:c2:64:a8:73:99:
         e1:3c:a4:32:4f:d8:38:e8:e0:e7:1d:02:05:a5:92:58:71:83:
         09:d0:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----