Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          BvAJXBgOO2OOagaeYkicpfw1itLTLLeb0b/Y6Dl7MGc=
Subject key identifier:   E9:BF:D7:E5:C7:19:EC:10:B1:29:6D:EE:B0:E4:10:46:C3:4B:0B:69
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       1DA5C8F1B80A6010B345F54816D2AAF787D94D76
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:28 +0000
ROA not before:           Wed 21 Dec 2022 16:13:28 +0000
ROA not after:            Wed 20 Dec 2023 16:18:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a5:c8:f1:b8:0a:60:10:b3:45:f5:48:16:d2:aa:f7:87:d9:4d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:28 2022 GMT
            Not After : Dec 20 16:18:28 2023 GMT
        Subject: CN=E9BFD7E5C719EC10B1296DEEB0E41046C34B0B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e5:d6:55:87:14:f6:5f:b1:40:17:ad:a3:da:
                    41:47:27:e5:ee:bd:bd:34:7a:27:fc:65:99:47:07:
                    db:bd:65:f0:9e:32:c8:34:23:6f:2e:c8:7f:8c:49:
                    a7:20:4b:8d:b8:8d:b6:a2:1a:38:fb:0e:af:4e:18:
                    c2:ea:75:25:35:ef:77:00:05:52:ae:a3:6d:2f:2d:
                    17:31:c0:6c:3e:15:e5:bf:9f:2e:45:96:c7:7f:cf:
                    79:2c:fa:0e:9e:24:14:68:ee:67:4e:24:b8:52:15:
                    28:e6:47:c9:93:5c:e9:e4:f8:6a:da:d8:ce:4b:8c:
                    54:4c:3f:71:58:45:2b:7c:18:48:43:be:a7:cd:a6:
                    09:93:f9:65:e6:ed:3d:df:bc:a3:d4:10:b6:cf:80:
                    3a:fd:ef:81:f5:2e:2c:70:c2:73:15:a9:84:e4:14:
                    b8:41:46:22:0d:1b:a0:1f:e9:cf:d5:0a:17:aa:02:
                    aa:92:e1:0d:25:51:53:e6:97:cd:55:cf:62:31:63:
                    1c:b3:f4:a8:c7:af:a1:c6:63:a7:9e:de:95:55:15:
                    ed:c6:c7:b4:94:38:79:7c:aa:4c:bd:ce:4d:3d:a1:
                    70:d7:40:2c:b3:8e:8b:1f:f9:22:bd:a1:16:c9:22:
                    a5:57:d7:25:73:47:21:5f:2c:12:44:d4:d5:e4:5f:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BF:D7:E5:C7:19:EC:10:B1:29:6D:EE:B0:E4:10:46:C3:4B:0B:69
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:33:f1:79:c9:2d:e4:8e:21:cd:0e:50:5c:2d:ae:70:52:71:
         4c:f4:58:ec:e3:52:bb:07:91:6e:11:e0:81:96:31:4a:88:4e:
         b9:6e:b2:86:09:1c:7b:d9:78:67:97:dc:cb:24:32:b7:37:8b:
         8b:31:60:c1:f8:d4:cd:1c:c1:51:94:e9:d2:3a:b0:90:9f:1a:
         ee:41:de:65:a9:b4:91:4b:a3:86:b6:fe:a8:7f:e2:ed:50:4f:
         b5:3d:fe:b6:fd:46:fb:73:73:d7:8c:7e:99:03:4c:61:90:57:
         d8:3d:b3:c0:cb:9c:4f:b3:3a:93:c2:01:85:a3:eb:60:f8:dc:
         ec:cc:c5:4b:63:a1:65:a4:63:0d:e1:35:2a:2f:2c:97:f7:f3:
         9b:bc:fd:33:99:ad:29:8a:9a:bf:08:e6:84:f9:d1:78:80:82:
         8f:45:93:ab:07:56:ba:93:3c:33:9e:57:28:3f:60:e1:58:86:
         19:ea:8f:5a:c8:dc:bd:95:6f:72:cf:bd:98:5b:bb:9d:9b:71:
         28:18:db:d2:56:81:4b:f9:c7:e0:94:7a:fc:09:60:ea:6f:53:
         90:17:bd:bc:1d:1e:8a:f9:9e:de:96:40:b8:3b:c2:87:cb:cd:
         d0:71:f2:e7:26:9b:9b:39:7d:f3:ab:4a:dc:2a:a3:6c:fb:fb:
         23:23:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----