Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          VLVlF/8rXKqmXODFcRD4izYgTCaOyX8f9BNjo/zA51s=
Subject key identifier:   E4:D3:7E:0E:D8:05:B3:5F:03:4A:34:2D:92:70:34:62:A6:22:51:C0
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       0717F0855C8334FBB1A962D0662808F887BBCC95
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:19 +0000
ROA not before:           Wed 21 Dec 2022 16:13:19 +0000
ROA not after:            Wed 20 Dec 2023 16:18:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:17:f0:85:5c:83:34:fb:b1:a9:62:d0:66:28:08:f8:87:bb:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:19 2022 GMT
            Not After : Dec 20 16:18:19 2023 GMT
        Subject: CN=E4D37E0ED805B35F034A342D92703462A62251C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:c7:fa:f6:af:ff:98:00:8c:e9:7a:fa:7a:
                    ae:ad:89:a7:0c:8d:65:b4:9b:1c:15:2b:66:51:2e:
                    87:43:9c:50:92:4d:f7:85:b0:7c:54:c4:85:4b:0e:
                    f7:34:f5:9c:e6:44:7d:2d:81:ce:0a:26:dc:cd:c4:
                    40:ce:36:4f:c7:b7:ff:bb:0c:d6:11:87:a6:cc:21:
                    6c:63:f1:fe:61:1f:8f:a1:21:7f:b1:33:38:60:59:
                    f0:c9:4a:44:61:2a:e0:c3:90:ea:19:d2:58:1f:91:
                    d2:e9:49:c7:a5:cc:b4:71:10:be:ac:29:47:60:df:
                    f9:bb:99:e5:00:e3:d6:52:1b:3e:a0:3b:1a:c2:da:
                    c2:a0:0d:ed:2a:eb:17:39:d5:87:23:d4:ea:c9:c3:
                    70:48:07:1b:e4:ef:63:a1:cb:5e:89:3a:28:1d:97:
                    53:9a:e4:ba:3a:f4:6a:6c:0c:26:7b:63:c9:23:e0:
                    cb:27:d5:d9:9f:68:35:ad:1c:ea:a0:8f:cf:0d:8f:
                    39:7f:d5:b9:e2:a8:62:f4:17:11:a6:c7:fd:85:86:
                    5d:e2:db:b7:aa:6b:ed:5a:44:26:96:5d:08:93:3b:
                    da:2f:3d:dc:3a:90:98:1f:4f:e7:96:26:a5:66:32:
                    c6:49:1b:cb:05:01:83:e1:82:75:72:bd:2a:a0:33:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:7E:0E:D8:05:B3:5F:03:4A:34:2D:92:70:34:62:A6:22:51:C0
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:12:1c:fc:c5:c8:f3:7f:38:28:75:1f:71:ec:12:40:e5:
         46:20:c5:9e:77:9f:e0:ee:59:00:4e:a0:83:27:55:e0:e5:1b:
         ba:af:42:21:3c:ac:df:a3:5e:0f:de:e1:67:f2:1a:2c:0e:e2:
         5f:1c:c7:bd:2b:57:1f:ad:dc:90:36:0e:a4:2e:d9:46:60:43:
         93:61:9e:90:8b:16:fb:37:8d:3d:a5:7f:a5:1c:92:2b:b3:3f:
         57:79:19:e7:d4:bb:e4:11:ed:5b:92:df:82:c6:c2:30:3d:67:
         6e:c0:fe:c7:25:8e:3b:c5:e7:f8:57:04:44:96:38:12:03:7c:
         95:0e:9f:44:94:4c:d9:08:05:4c:24:61:a3:29:eb:18:fb:58:
         64:2a:37:72:3b:64:f2:2e:41:8a:9e:5a:90:3c:ba:03:3a:18:
         02:98:4e:f8:e6:64:a8:27:36:31:c5:b1:90:f0:fd:00:f6:03:
         1b:39:56:53:a8:46:06:fa:a4:e8:37:c3:5c:39:71:a1:31:62:
         b4:bf:92:4e:9f:95:bf:d1:f4:e3:4d:e6:aa:99:bd:3c:b2:c3:
         a0:88:b6:f2:5d:0e:49:5c:8a:53:c1:4e:0a:af:ef:c4:46:fa:
         2d:87:d2:fc:ed:60:44:e2:bb:84:76:5a:f7:02:93:af:45:9c:
         d7:0e:29:5f
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUBxfwhVyDNPuxqWLQZigI+Ie7zJUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjIxYTAzYmUxNDIzMTczZjRmMTg0NjQx
Mzg5ZDNhNWI1MThiZDg0ZDQwHhcNMjIxMjIxMTYxMzE5WhcNMjMxMjIwMTYxODE5
WjAzMTEwLwYDVQQDEyhFNEQzN0UwRUQ4MDVCMzVGMDM0QTM0MkQ5MjcwMzQ2MkE2
MjI1MUMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunjH+vav/5gA
jOl6+nqurYmnDI1ltJscFStmUS6HQ5xQkk33hbB8VMSFSw73NPWc5kR9LYHOCibc
zcRAzjZPx7f/uwzWEYemzCFsY/H+YR+PoSF/sTM4YFnwyUpEYSrgw5DqGdJYH5HS
6UnHpcy0cRC+rClHYN/5u5nlAOPWUhs+oDsawtrCoA3tKusXOdWHI9TqycNwSAcb
5O9jocteiTooHZdTmuS6OvRqbAwme2PJI+DLJ9XZn2g1rRzqoI/PDY85f9W54qhi
9BcRpsf9hYZd4tu3qmvtWkQmll0IkzvaLz3cOpCYH0/nlialZjLGSRvLBQGD4YJ1
cr0qoDPziQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFOTTfg7YBbNfA0o0LZJwNGKm
IlHAMB8GA1UdIwQYMBaAFDkls47tOZtWI8EkdAos6idfPfvhMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg1MGM4ZTJjODcxZGY5LzAv
MzkyNUIzOEVFRDM5OUI1NjIzQzEyNDc0MEEyQ0VBMjc1RjNERkJFMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzAxOTgxZTQwLThiM2ItNDJiMC04YTRhLThhMjQyODVlYjcwMi9mY2Iy
MGY1OTY2MjFhMDNiZTE0MjMxNzNmNGYxODQ2NDEzODlkM2E1YjUxOGJkODRkNC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NTBj
OGUyYzg3MWRmOS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzYzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwYAMA0G
CSqGSIb3DQEBCwUAA4IBAQB9jRIc/MXI8384KHUfcewSQOVGIMWed5/g7lkATqCD
J1Xg5Ru6r0IhPKzfo14P3uFn8hosDuJfHMe9K1cfrdyQNg6kLtlGYEOTYZ6Qixb7
N409pX+lHJIrsz9XeRnn1LvkEe1bkt+CxsIwPWduwP7HJY47xef4VwREljgSA3yV
Dp9ElEzZCAVMJGGjKesY+1hkKjdyO2TyLkGKnlqQPLoDOhgCmE745mSoJzYxxbGQ
8P0A9gMbOVZTqEYG+qToN8NcOXGhMWK0v5JOn5W/0fTjTeaqmb08ssOgiLbyXQ5J
XIpTwU4Kr+/ERvoth9L87WBE4ruEdlr3ApOvRZzXDilf
-----END CERTIFICATE-----