Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          FBZHxMqsb+CIZHlvMvDo28ApGf+EL7I+voeoelPHiQ4=
Subject key identifier:   97:A7:29:B5:65:B2:18:B1:58:7E:33:B5:E0:71:73:1D:3E:60:CC:C0
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       267E6DC8B9047E8899460E82A0181A8327FF6566
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:17:49 +0000
ROA not before:           Wed 21 Dec 2022 16:12:49 +0000
ROA not after:            Wed 20 Dec 2023 16:17:49 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7e:6d:c8:b9:04:7e:88:99:46:0e:82:a0:18:1a:83:27:ff:65:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:12:49 2022 GMT
            Not After : Dec 20 16:17:49 2023 GMT
        Subject: CN=97A729B565B218B1587E33B5E071731D3E60CCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:88:9a:b3:52:ce:cc:63:49:ae:7c:b6:db:
                    22:7c:38:77:69:37:e5:54:19:24:d6:7c:07:40:4b:
                    b9:e1:30:5d:92:2c:a3:99:85:68:bf:f6:1c:4c:76:
                    32:3f:fe:66:ae:5f:62:58:d4:97:28:86:4a:c6:9f:
                    94:df:20:23:a0:23:db:d5:b4:54:2c:53:29:a3:42:
                    4b:19:6f:0f:13:30:46:64:65:04:e7:37:e9:72:b1:
                    05:cf:98:45:44:de:84:03:41:a2:3f:8a:d0:44:27:
                    9c:0e:e5:4b:4a:a6:bf:7d:d1:fe:72:f1:db:43:a2:
                    e5:41:46:55:9e:80:bc:5b:bc:30:a4:4f:ae:dc:cf:
                    98:b9:b2:ec:e6:40:29:00:a3:b2:3e:33:00:42:9d:
                    b8:34:d9:d4:9f:dc:16:08:b4:79:3d:d4:d5:8e:05:
                    45:26:9e:47:aa:58:ba:60:3b:7f:a2:f7:70:45:b8:
                    b3:8d:c1:e5:8c:cb:55:fc:28:d4:98:55:47:e1:e8:
                    a1:b5:30:01:9b:a5:2f:d6:79:5c:9e:ae:49:3f:e4:
                    23:02:7e:91:53:dc:a8:7a:bb:e3:51:9f:13:f0:9f:
                    7a:97:fc:b9:d5:0d:76:56:51:a3:a8:c2:1e:04:15:
                    64:73:bf:8f:08:68:f9:d9:06:b7:93:b7:41:64:8d:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:29:B5:65:B2:18:B1:58:7E:33:B5:E0:71:73:1D:3E:60:CC:C0
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:a2:95:fa:5d:56:75:99:73:6d:b1:ca:c3:6d:d7:87:c0:
         44:0c:e2:8f:17:2a:c7:f2:e1:c6:89:35:df:a1:6d:c6:92:21:
         6d:a4:bb:60:1f:63:d1:98:96:03:ac:ea:b8:cd:c2:56:d4:69:
         39:78:2a:b8:1f:29:6c:13:04:41:10:b1:e0:62:dd:0d:2c:3f:
         25:17:7e:8c:61:f0:70:87:7f:c0:7f:a5:28:7a:13:5c:20:38:
         28:02:90:d8:4b:bf:97:08:cf:5e:83:a9:09:5c:9b:7e:09:21:
         07:ee:f9:33:6b:5c:01:2c:f3:32:0f:36:45:ea:f7:14:31:48:
         fd:31:55:45:10:c8:9c:58:eb:c7:31:76:47:25:84:49:2b:aa:
         83:28:11:31:af:12:d8:c2:f5:56:e0:0d:9d:a2:b2:cf:69:5a:
         0e:65:a8:50:fb:c0:ab:f4:5e:f0:44:f2:cb:e6:0d:f5:e2:2d:
         b0:1d:38:a5:e1:28:68:c8:f1:12:02:7e:ae:ce:ad:1c:50:f4:
         ec:19:66:19:81:29:83:02:ea:21:7b:f7:4a:6b:38:40:09:0d:
         7a:25:6b:59:c6:da:e1:c4:8a:f2:c9:4f:ec:67:c0:4b:36:f8:
         38:7e:92:98:b7:19:57:a8:fd:3b:55:25:43:4b:62:3c:8c:ef:
         f3:05:7b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----