Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          WexezuDIV3+xrFmmtVbIvC2YKYEOJ/YTR+wtWMy60Yg=
Subject key identifier:   E1:3B:C6:87:07:75:7B:32:77:ED:B1:60:61:6A:E8:13:F1:BE:3B:82
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       6D76558C1B5E58E3B432AA889D2848D17C901F54
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:36 +0000
ROA not before:           Wed 21 Dec 2022 16:13:36 +0000
ROA not after:            Wed 20 Dec 2023 16:18:36 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:76:55:8c:1b:5e:58:e3:b4:32:aa:88:9d:28:48:d1:7c:90:1f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:36 2022 GMT
            Not After : Dec 20 16:18:36 2023 GMT
        Subject: CN=E13BC68707757B3277EDB160616AE813F1BE3B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:70:78:67:f9:d3:7a:41:74:85:e6:15:91:
                    ae:3b:00:ee:c7:d4:99:9a:d2:af:cb:2b:10:cb:32:
                    24:75:4d:9f:d8:93:50:e8:cb:b0:56:b7:e3:04:b7:
                    2c:36:55:60:bd:2e:da:e7:c3:5d:c3:0a:42:2a:3f:
                    6a:6d:ae:ea:61:0b:3a:76:ec:9d:29:e9:5e:93:78:
                    87:01:8c:60:6e:2e:df:f2:c1:64:95:97:2d:c6:60:
                    7e:51:fb:73:a2:b2:e9:35:cb:c8:d7:6a:73:77:71:
                    c3:fe:f2:0c:6a:13:48:42:a7:f9:66:23:a5:14:70:
                    17:3a:f0:8f:b5:61:bb:ca:f2:26:c1:eb:e8:55:7b:
                    27:92:17:78:4b:6d:75:47:31:bc:ca:e8:48:b1:cf:
                    13:e5:e5:3e:84:c9:85:18:62:3e:c6:03:36:dc:3f:
                    5e:22:9e:d7:56:dc:72:6a:e3:8c:8f:ce:1b:ce:e5:
                    f8:0d:5a:55:25:1a:85:42:06:f2:df:24:c5:94:6a:
                    7d:1f:6a:a7:9a:67:55:b5:be:56:cf:7f:c3:a2:8c:
                    97:1d:b0:7d:ec:c3:ae:9d:7a:14:22:d9:f0:52:b0:
                    11:52:65:a8:d4:8e:76:a7:23:26:54:f2:fc:37:56:
                    a0:bc:b4:4c:2c:74:28:43:52:30:f3:45:78:5a:4b:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:C6:87:07:75:7B:32:77:ED:B1:60:61:6A:E8:13:F1:BE:3B:82
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:52:81:56:42:38:61:2c:f7:1a:6e:0c:4d:51:a0:c1:7f:cd:
         1d:17:81:d1:80:77:8a:a2:bd:c1:fd:08:41:72:26:bc:d0:c2:
         2f:a8:eb:30:48:fe:c0:3e:65:4e:fe:e2:2c:42:4c:bd:e9:c6:
         7d:4c:45:08:1e:e8:2f:d6:44:87:58:ad:f0:f5:94:d0:81:3c:
         06:b9:1a:12:b9:aa:21:03:fb:49:ad:2f:db:fb:2f:c9:9f:69:
         d0:17:f8:e3:c9:cd:25:cf:2c:70:9f:59:33:d7:2f:ab:61:25:
         9b:84:84:2e:54:54:a0:5e:96:30:2f:a9:6a:61:2d:16:d7:7f:
         24:51:e3:e0:0a:41:8b:35:fb:9e:ee:10:fc:7d:9b:5f:c5:22:
         8c:06:86:f0:9d:04:0c:fd:30:e6:d3:07:f1:5a:8a:42:47:a3:
         19:b4:ac:fe:b8:91:f8:0a:22:04:5d:0d:a0:11:49:8e:94:dd:
         bf:b1:27:db:3f:60:7b:14:a0:1b:f0:d1:01:b9:65:78:1d:42:
         f4:03:bd:50:51:2e:b4:e2:22:ae:21:3a:0c:d6:7f:dc:ff:b0:
         e2:ad:54:3c:83:0f:9c:a1:b2:1c:ef:61:61:01:35:c1:0c:66:
         e1:4d:8c:78:d0:ec:e3:a1:75:a6:93:8f:ab:9c:8b:3e:21:04:
         89:bd:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----