Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          nOzEPyj/H+FTp0YIEzYLzH2FAhjzc6ehwQQyD+bk+OQ=
Subject key identifier:   FB:BB:7E:25:43:0D:5E:68:67:6C:F2:1A:24:D2:75:DE:27:CC:2D:9C
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       5129D2FB59105A0090EE88EF961639744607CBB7
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:17:57 +0000
ROA not before:           Wed 21 Dec 2022 16:12:57 +0000
ROA not after:            Wed 20 Dec 2023 16:17:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:29:d2:fb:59:10:5a:00:90:ee:88:ef:96:16:39:74:46:07:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:12:57 2022 GMT
            Not After : Dec 20 16:17:57 2023 GMT
        Subject: CN=FBBB7E25430D5E68676CF21A24D275DE27CC2D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:0a:fd:21:f8:0a:ee:c7:12:1a:d9:1b:4e:
                    3b:72:fb:77:fd:f9:dc:21:3a:bd:ae:29:03:24:5c:
                    fb:f8:93:93:bf:ee:57:f0:39:ca:6f:5c:f3:4a:a9:
                    a4:bb:8f:3d:5b:75:4b:0f:81:ee:f1:3b:ec:4a:93:
                    6e:48:e8:93:c6:79:82:1a:b2:6e:8d:31:2b:b7:cc:
                    ea:ae:2b:5a:50:58:e3:1c:41:0c:67:ef:f8:2f:ea:
                    d9:06:b6:7a:26:cb:f7:d7:6c:96:43:c0:27:f0:f1:
                    02:10:8c:40:65:46:c1:48:4f:bd:58:ab:83:3b:f8:
                    df:be:83:39:a9:36:1f:51:a3:a2:65:f6:8f:77:d7:
                    2b:df:26:fd:32:74:16:e9:fe:13:db:24:1f:24:ad:
                    9a:9b:39:13:7b:d0:9a:dc:e0:6d:a2:94:8e:11:fd:
                    55:5a:13:f8:3c:48:be:43:ef:c1:c2:e4:5b:6c:46:
                    3e:b9:12:f5:39:de:74:35:21:c1:f4:5e:0e:90:6d:
                    d6:71:ee:5f:73:3f:e9:89:93:df:c7:0c:0c:cb:2e:
                    a0:58:42:9e:71:81:34:8a:eb:bd:d0:5f:0b:bb:4d:
                    02:81:e6:ca:f2:a0:74:03:05:56:3c:37:23:f9:3b:
                    eb:0a:b7:e6:bc:d9:fc:24:e6:50:29:3f:fc:36:ba:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:7E:25:43:0D:5E:68:67:6C:F2:1A:24:D2:75:DE:27:CC:2D:9C
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:11:87:55:2e:a8:d5:bd:e3:b3:88:79:7b:e2:c8:ff:42:14:
         e9:c9:d2:d9:84:fc:ce:16:85:af:74:21:10:01:4c:18:51:2e:
         4e:f9:89:92:80:a9:b7:d9:29:7f:4b:1e:89:46:46:fa:79:a9:
         82:97:ee:ca:5b:3d:c6:25:b1:72:66:be:db:bc:01:81:56:e8:
         a8:99:91:dc:d1:d3:8b:41:8f:49:62:2e:c9:c6:83:62:d5:de:
         e0:27:98:61:d3:50:16:d9:94:79:60:b2:ec:7f:28:45:94:07:
         40:e8:70:43:4e:4b:dd:8c:c0:bd:84:04:04:3b:f8:d2:64:44:
         48:f4:76:23:fe:98:17:b7:65:3f:44:3a:61:6f:98:a3:40:06:
         72:8c:aa:b5:30:55:fe:9b:60:01:9d:02:d3:d3:3e:a1:95:d8:
         bf:a2:b0:8a:d8:72:43:1c:d0:38:60:83:32:38:40:ef:84:7f:
         0a:b7:d3:c1:c4:22:cb:fe:4f:f8:fc:60:b9:5f:f1:10:32:36:
         f0:8a:9d:59:07:b6:7f:c9:75:4c:af:9a:8a:d4:68:5c:9e:21:
         b7:bd:9d:52:a1:a0:6b:c3:b0:a7:ec:9f:3c:f5:1d:83:7c:a1:
         d2:82:dc:93:85:6d:e2:d7:ef:c1:0e:1c:bb:e4:73:ee:46:09:
         32:16:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----