Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          hqGfQqlC5PKD3EYa/L1dMR8oXYPjEP9Pxr5pUPvWhvg=
Subject key identifier:   D4:7A:5A:06:37:2A:16:D3:97:20:1F:14:40:A6:71:A0:AC:8F:E2:BD
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       05F46AD481251C6D79CAA8991E412B3A7A4E4902
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:13 +0000
ROA not before:           Wed 21 Dec 2022 16:13:13 +0000
ROA not after:            Wed 20 Dec 2023 16:18:13 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f4:6a:d4:81:25:1c:6d:79:ca:a8:99:1e:41:2b:3a:7a:4e:49:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:13 2022 GMT
            Not After : Dec 20 16:18:13 2023 GMT
        Subject: CN=D47A5A06372A16D397201F1440A671A0AC8FE2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:be:38:03:84:d6:3e:b8:8b:25:00:71:47:
                    89:5a:3e:42:78:a0:24:b5:57:29:7b:b6:4a:ab:4e:
                    7a:79:d7:71:e2:6c:85:05:11:1c:90:42:bd:a1:35:
                    b4:ac:5b:88:5e:26:16:98:7d:01:0a:4b:83:fe:32:
                    46:82:9d:7e:39:5d:13:e8:4b:af:11:2b:6d:53:5c:
                    32:93:06:08:46:f5:0e:97:70:8b:52:8a:64:76:d0:
                    9c:e1:51:c1:5f:82:41:a2:b7:90:81:03:f5:dc:fa:
                    7f:27:3b:76:e5:b1:ef:b6:7b:35:8c:ad:ae:6e:0e:
                    76:3f:a7:40:39:4b:12:a9:f8:00:5e:67:43:f5:22:
                    a5:39:48:7a:7e:bb:14:a0:fd:96:f6:ee:f3:76:b2:
                    23:48:d4:e0:ae:d7:1e:dc:12:cf:34:99:01:6a:99:
                    f2:ae:d0:17:3e:5c:91:3b:81:e7:6f:69:e2:c5:a1:
                    06:b7:17:17:45:30:70:ff:a8:12:60:6d:84:67:01:
                    9f:b6:6a:8c:44:d4:7e:35:5f:18:d2:69:ac:79:28:
                    bf:8f:a0:38:a6:83:e9:71:e9:14:8b:8a:32:95:11:
                    68:62:3b:9d:9b:f4:ac:58:25:39:97:7c:c6:1c:71:
                    82:5b:6e:33:c6:b4:84:31:c8:b5:10:7e:90:0c:c4:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7A:5A:06:37:2A:16:D3:97:20:1F:14:40:A6:71:A0:AC:8F:E2:BD
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:e7:60:9a:5c:47:94:b8:5a:c1:55:81:ff:4f:93:65:c8:
         43:05:f0:7e:cc:dc:72:c2:68:a8:8a:8d:c0:8a:75:54:5c:20:
         67:1b:2f:c4:87:c4:35:47:e0:a6:a2:c0:82:aa:0c:a0:69:cd:
         52:81:28:a6:c9:aa:88:e9:19:01:26:45:96:91:80:da:80:bc:
         b2:a3:b9:21:df:ea:e6:b3:59:b3:34:68:fd:0f:ec:a1:1b:59:
         53:2d:ce:69:15:49:a0:36:b3:a6:b4:94:fa:b9:03:9b:5b:26:
         39:fb:53:f5:eb:0a:a3:e3:e5:30:c8:13:69:30:eb:79:9a:0a:
         05:a6:1a:14:e4:1c:ab:cb:cd:b3:74:a5:f9:d1:3c:f6:60:3d:
         13:48:47:96:f6:06:37:7b:7b:37:e3:24:06:63:de:83:61:7a:
         b0:03:83:b9:df:6a:89:e0:be:4e:32:b5:46:01:3d:cb:48:a9:
         c0:46:4d:26:a8:e9:c8:2e:21:69:d6:a5:f2:10:e6:e3:e7:d1:
         c3:bf:9a:43:b2:e0:db:70:d3:43:a1:5f:89:42:12:56:02:5d:
         91:40:5c:87:a0:21:82:aa:b5:e7:a6:e3:be:f5:81:cd:be:e3:
         b0:84:dc:09:7a:be:8e:d4:0c:fa:ac:f5:19:ae:fd:b9:b6:4f:
         18:aa:07:a6
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUBfRq1IElHG15yqiZHkErOnpOSQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjIxYTAzYmUxNDIzMTczZjRmMTg0NjQx
Mzg5ZDNhNWI1MThiZDg0ZDQwHhcNMjIxMjIxMTYxMzEzWhcNMjMxMjIwMTYxODEz
WjAzMTEwLwYDVQQDEyhENDdBNUEwNjM3MkExNkQzOTcyMDFGMTQ0MEE2NzFBMEFD
OEZFMkJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2+OAOE1j64
iyUAcUeJWj5CeKAktVcpe7ZKq056eddx4myFBREckEK9oTW0rFuIXiYWmH0BCkuD
/jJGgp1+OV0T6EuvESttU1wykwYIRvUOl3CLUopkdtCc4VHBX4JBoreQgQP13Pp/
Jzt25bHvtns1jK2ubg52P6dAOUsSqfgAXmdD9SKlOUh6frsUoP2W9u7zdrIjSNTg
rtce3BLPNJkBapnyrtAXPlyRO4Hnb2nixaEGtxcXRTBw/6gSYG2EZwGftmqMRNR+
NV8Y0mmseSi/j6A4poPpcekUi4oylRFoYjudm/SsWCU5l3zGHHGCW24zxrSEMci1
EH6QDMTZdQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFNR6WgY3KhbTlyAfFECmcaCs
j+K9MB8GA1UdIwQYMBaAFDkls47tOZtWI8EkdAos6idfPfvhMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg1MGM4ZTJjODcxZGY5LzAv
MzkyNUIzOEVFRDM5OUI1NjIzQzEyNDc0MEEyQ0VBMjc1RjNERkJFMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzAxOTgxZTQwLThiM2ItNDJiMC04YTRhLThhMjQyODVlYjcwMi9mY2Iy
MGY1OTY2MjFhMDNiZTE0MjMxNzNmNGYxODQ2NDEzODlkM2E1YjUxOGJkODRkNC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NTBj
OGUyYzg3MWRmOS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzUzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAwKudgmlxHlLhawVWB/0+TZchDBfB+zNxywmioio3A
inVUXCBnGy/Eh8Q1R+CmosCCqgygac1SgSimyaqI6RkBJkWWkYDagLyyo7kh3+rm
s1mzNGj9D+yhG1lTLc5pFUmgNrOmtJT6uQObWyY5+1P16wqj4+UwyBNpMOt5mgoF
phoU5Byry82zdKX50Tz2YD0TSEeW9gY3e3s34yQGY96DYXqwA4O532qJ4L5OMrVG
AT3LSKnARk0mqOnILiFp1qXyEObj59HDv5pDsuDbcNNDoV+JQhJWAl2RQFyHoCGC
qrXnpuO+9YHNvuOwhNwJer6O1Az6rPUZrv25tk8Yqgem
-----END CERTIFICATE-----