Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          l6rQMxH6VhUAse/lTnIGiKOuqTWUJXGt/dDoyFefzYc=
Subject key identifier:   DB:DE:3D:45:88:E6:A8:98:BA:F4:B3:4E:B4:0F:9A:55:19:A3:CD:DD
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       35C0DA6DC4567673374D79E0EB0D9E4FEC4281A3
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:19:14 +0000
ROA not before:           Wed 21 Dec 2022 16:14:14 +0000
ROA not after:            Wed 20 Dec 2023 16:19:14 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c0:da:6d:c4:56:76:73:37:4d:79:e0:eb:0d:9e:4f:ec:42:81:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:14:14 2022 GMT
            Not After : Dec 20 16:19:14 2023 GMT
        Subject: CN=DBDE3D4588E6A898BAF4B34EB40F9A5519A3CDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:1d:bd:9f:8c:61:2f:f4:fa:3f:cf:f1:58:
                    3a:87:8c:2e:9b:f2:84:4b:e3:8c:18:83:30:30:f8:
                    33:50:15:bf:b9:05:22:e7:48:b4:1c:98:51:d1:c9:
                    56:77:5a:29:eb:17:15:bd:2f:a2:66:05:fa:16:a7:
                    69:52:87:4a:14:af:e8:b5:78:53:db:aa:24:35:6e:
                    c9:93:75:a5:d8:96:88:2e:47:3e:fa:48:02:b5:85:
                    b6:70:d4:e8:52:06:21:6a:33:01:a1:f1:8a:8f:d9:
                    74:b5:6b:0a:d0:a5:c5:29:2e:8c:f2:8e:e6:6e:2f:
                    67:20:20:2a:ff:df:05:cc:2b:72:93:f6:c8:cc:d4:
                    f0:51:f5:db:c5:d2:75:f6:19:53:1b:31:64:b6:19:
                    d2:f9:99:2f:af:87:26:aa:d1:61:de:a5:ff:b5:56:
                    8c:80:b5:cf:10:1d:ac:6b:15:cb:b0:35:1a:67:6f:
                    48:c2:e8:17:a4:67:04:d1:1f:dd:d6:81:28:c9:98:
                    8f:62:69:84:72:13:7d:f8:7b:b0:7b:b4:24:a1:de:
                    08:97:bc:51:47:8c:8d:3c:98:2f:e3:3d:c6:14:87:
                    9e:d1:23:c4:81:b0:ec:99:89:45:5b:61:2c:2a:95:
                    06:42:2c:d8:ab:3e:66:f4:d2:39:9c:5d:b3:ac:99:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DE:3D:45:88:E6:A8:98:BA:F4:B3:4E:B4:0F:9A:55:19:A3:CD:DD
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:81:9d:c6:38:a0:9d:2e:e2:78:3f:cd:97:ad:46:a3:95:
         37:77:0e:aa:0e:7e:f2:7c:f5:11:65:5d:98:12:b9:b3:e3:31:
         a2:75:1d:95:0b:84:b3:62:4c:fe:b4:cd:a4:9a:64:8b:df:19:
         3f:5c:77:f2:0b:2f:7b:55:29:8a:00:eb:bf:b8:18:ba:52:38:
         2c:a9:a8:25:29:25:08:e3:6d:cb:71:06:4f:2f:7c:19:a5:02:
         f8:30:3d:a7:78:ec:d0:38:c6:3d:df:ee:c8:72:05:ee:09:33:
         15:3b:91:7c:0f:7d:82:cc:e1:95:3f:dd:3a:36:c6:a9:29:09:
         b3:cb:0a:43:b4:5e:26:59:33:22:53:fb:fd:75:a5:3c:b1:a0:
         fb:e1:71:b1:73:d5:80:f5:d7:07:96:5c:53:8d:dc:74:0c:73:
         1a:31:f9:db:7c:28:65:b0:40:67:24:59:fe:15:2f:e6:5d:71:
         92:df:d5:29:32:b6:92:ca:93:cb:eb:ea:80:cf:b7:65:3e:4a:
         02:af:63:0f:d7:ee:1a:94:1f:98:66:51:c7:61:85:5f:cd:58:
         ab:69:20:80:dd:a6:b2:be:0e:74:7f:fc:cd:18:02:84:3b:7f:
         6a:90:2b:14:fb:bc:fc:a9:7c:62:04:0a:db:e5:98:1f:a8:e8:
         d8:fa:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----