Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          rEkYu+Nf70JwAxs0ZFcDy7CJap0eAkWnWVF3vCMFMQQ=
Subject key identifier:   AC:E4:F5:79:22:22:3D:85:75:C7:D5:ED:02:F7:0D:56:67:D0:5E:BC
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       63975AD199D568A23B2594B2E7F2F687CE01EA75
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:17:53 +0000
ROA not before:           Wed 21 Dec 2022 16:12:53 +0000
ROA not after:            Wed 20 Dec 2023 16:17:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:97:5a:d1:99:d5:68:a2:3b:25:94:b2:e7:f2:f6:87:ce:01:ea:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:12:53 2022 GMT
            Not After : Dec 20 16:17:53 2023 GMT
        Subject: CN=ACE4F57922223D8575C7D5ED02F70D5667D05EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:a4:22:54:d1:e3:ca:ab:0c:c5:ea:95:c2:
                    97:55:8a:e0:6e:90:cc:d6:e4:40:17:f3:56:5d:46:
                    93:d3:b4:a0:e1:a8:60:c8:f1:0c:f9:8a:07:aa:19:
                    24:42:28:df:00:66:2a:f8:76:5b:cd:20:89:4f:08:
                    51:fd:d5:91:23:4a:76:b8:ac:ec:02:2c:09:56:25:
                    18:e3:c7:72:ff:1d:fc:a2:19:df:77:6f:a4:fd:13:
                    b9:af:78:6c:85:ff:01:f3:27:bb:0e:34:9f:22:53:
                    fa:71:14:05:95:61:69:d6:1e:68:55:a6:19:a0:47:
                    ed:59:11:aa:57:4e:a7:97:f9:7e:b6:e0:a5:9b:f6:
                    83:c7:87:24:18:49:d3:7b:e8:31:a2:7d:22:91:d4:
                    d7:c4:93:c4:ff:27:47:82:f1:d2:51:3a:18:0a:4c:
                    b0:71:81:19:24:8c:64:43:a9:bc:12:c9:ba:c7:2b:
                    92:2c:6e:09:39:b5:df:9b:9d:d0:14:38:43:99:6d:
                    02:7d:cd:de:8a:f3:c1:c4:d9:14:7b:f7:65:bf:76:
                    75:e2:0c:07:a8:18:ad:69:25:20:35:d8:e2:89:23:
                    dc:48:bd:87:e7:4a:06:da:9d:5a:09:60:ed:31:63:
                    7a:00:96:39:94:2c:99:ec:37:bc:b1:50:7d:17:f4:
                    97:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:F5:79:22:22:3D:85:75:C7:D5:ED:02:F7:0D:56:67:D0:5E:BC
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:17:6d:0e:36:b1:e0:64:7f:25:0a:7e:e6:04:b5:2b:cd:eb:
         ea:20:38:16:f9:37:8b:14:70:31:95:99:ed:f0:3f:b3:b4:46:
         2a:a3:66:da:50:d9:40:51:e1:8a:4a:af:59:36:c2:aa:87:5d:
         bf:34:c8:c8:7e:59:a3:56:20:5e:d9:1d:24:04:00:73:e1:1d:
         e6:82:dd:cb:11:cd:6e:cc:dc:c2:a1:92:2b:ba:b7:9d:19:4f:
         2d:7f:b3:9f:a1:d4:3d:69:e6:2f:4e:55:b0:6e:2e:15:bd:50:
         49:0c:17:e6:dc:31:c5:4a:59:18:71:c4:9b:92:1d:08:f5:b9:
         29:b3:9e:89:05:90:bf:a6:1b:7f:1a:56:bc:9b:77:ac:32:c3:
         4c:e6:db:67:56:79:17:df:2d:15:e6:7f:23:3c:b6:c2:38:b2:
         eb:55:4b:0b:5c:44:d0:94:36:d2:85:8e:37:08:0b:44:91:47:
         21:e2:b2:15:ad:87:45:b1:31:88:1b:d1:b2:a3:99:e9:94:25:
         b3:5f:96:ab:19:63:96:4d:b9:ea:23:49:75:94:03:f8:a1:97:
         3b:55:d3:b1:7d:b1:e6:3a:f2:c8:c9:6b:cf:74:f0:2e:2f:ad:
         22:15:5b:bb:95:9e:09:75:41:8f:2f:bc:f8:2b:35:82:6c:56:
         8d:61:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----