Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          1cstvaTqgm+/0QfaiRW1efrgecTy2Q0XXjvgkgYysoU=
Subject key identifier:   54:91:CF:72:F7:9E:25:3D:59:63:A3:3F:EA:05:EB:17:3D:DB:23:A5
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       71642B9CC45ED47AAD8B3ADBC282DA88D093EEE8
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:08 +0000
ROA not before:           Wed 21 Dec 2022 16:13:08 +0000
ROA not after:            Wed 20 Dec 2023 16:18:08 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:64:2b:9c:c4:5e:d4:7a:ad:8b:3a:db:c2:82:da:88:d0:93:ee:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:08 2022 GMT
            Not After : Dec 20 16:18:08 2023 GMT
        Subject: CN=5491CF72F79E253D5963A33FEA05EB173DDB23A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:9d:ff:f0:6e:dc:60:a2:69:fa:e3:60:c4:
                    53:09:af:aa:2f:d9:21:38:3b:b4:a5:b3:22:b3:ae:
                    f1:fd:45:93:06:36:3e:19:78:fe:a2:85:b6:70:1f:
                    83:f5:00:af:5a:d3:10:c9:f6:5d:dc:09:26:6c:a1:
                    cc:87:6c:d5:69:cd:52:f9:86:7a:35:5c:df:d7:9a:
                    4b:49:45:f2:02:31:a8:2e:00:e8:fa:a5:b5:e1:66:
                    1b:31:67:04:e3:0f:33:b9:5b:00:57:c6:9b:45:37:
                    54:ae:f8:e1:a9:61:8b:d2:66:50:ce:7b:37:83:bf:
                    e3:0c:81:c9:c4:d4:e9:24:36:54:a2:8c:6c:08:2a:
                    8c:33:8b:78:38:ae:09:ca:6f:23:f8:ec:4d:45:f6:
                    c2:08:de:4e:40:7f:a5:90:f4:e1:e6:89:5c:32:b5:
                    46:f3:0d:a3:6d:96:90:19:f4:44:7b:13:b0:4a:19:
                    87:10:d5:2a:7d:2f:8f:8d:55:e3:7a:5c:e5:f1:47:
                    b2:7a:be:5f:a9:25:92:fb:94:4b:91:43:99:5e:3f:
                    bd:7f:70:ba:ba:5f:8a:79:0f:2e:ae:9b:f8:f6:ec:
                    f4:8c:c1:0d:5d:87:7e:ca:a2:47:1d:f8:2c:83:df:
                    ef:ea:00:29:c8:43:2c:13:03:dc:48:c1:75:6b:fa:
                    5c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:91:CF:72:F7:9E:25:3D:59:63:A3:3F:EA:05:EB:17:3D:DB:23:A5
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:fb:95:5a:f0:18:43:2b:e0:bc:c1:bf:81:f8:69:84:70:
         aa:a2:61:c4:06:98:2a:22:78:dc:58:a1:85:a0:d9:51:c8:91:
         57:40:9c:5a:af:9c:b1:c8:28:32:7b:17:c0:50:65:6f:5e:95:
         95:d3:f5:d4:f3:2a:e7:7c:5a:e0:37:23:0b:5e:34:15:fd:2a:
         49:fa:d7:c6:cc:09:a9:64:55:c2:9c:18:50:20:97:e9:7f:3d:
         e5:5e:29:50:a3:66:70:df:90:50:41:65:ed:88:9e:6c:53:c0:
         cc:30:04:6c:75:94:5b:c3:fe:74:fe:22:7f:08:48:da:5e:b6:
         9c:4a:99:b6:4e:02:07:d4:0c:77:3e:39:c8:3f:c7:43:6f:63:
         01:dd:c4:1c:93:68:7a:02:03:75:0f:b7:4d:e4:05:36:40:dd:
         de:70:aa:3d:8a:8f:e4:06:58:2c:7d:ed:22:09:31:27:77:99:
         f5:7f:5c:6e:98:56:c3:97:93:91:31:67:ae:e8:06:a5:72:b0:
         17:05:53:77:a6:e5:0c:0e:9a:3e:18:e8:84:a0:67:d7:07:75:
         82:24:93:ad:24:92:26:c1:58:20:50:7d:f6:d8:e9:b1:b8:b1:
         24:b4:fa:24:d7:4a:31:ff:32:00:43:95:e5:34:7b:12:ee:3a:
         80:11:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----