Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          xQpslJe/hmzNn9CF1lkmwtj/6Jyk8eJDRTGbEEABFK0=
Subject key identifier:   D3:D6:F5:6C:B1:2B:49:48:25:15:06:9A:41:02:0D:97:10:3D:E5:33
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       345D0D7DADD8B8AA74FFEC25CFD73347F79F3781
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:45 +0000
ROA not before:           Wed 21 Dec 2022 16:13:45 +0000
ROA not after:            Wed 20 Dec 2023 16:18:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5d:0d:7d:ad:d8:b8:aa:74:ff:ec:25:cf:d7:33:47:f7:9f:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:45 2022 GMT
            Not After : Dec 20 16:18:45 2023 GMT
        Subject: CN=D3D6F56CB12B49482515069A41020D97103DE533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:7d:80:d8:01:fc:fa:d9:a7:2f:4a:65:71:
                    6c:9b:c0:df:11:6a:d4:d6:ab:4b:11:57:3c:1d:a7:
                    5f:3d:8a:3a:55:13:be:68:d3:e7:69:e6:8c:86:ef:
                    91:ff:28:7c:bb:12:31:a8:53:89:74:87:16:48:91:
                    23:13:72:7b:8a:f4:d7:7e:57:6f:a7:36:ac:1b:19:
                    08:d2:51:30:b6:2f:25:90:22:9e:c8:1e:bb:ed:06:
                    43:7a:6b:5e:30:46:76:41:e8:fe:39:70:74:a4:5c:
                    c5:b2:68:f7:4e:ba:73:ef:b6:24:06:93:af:ab:1c:
                    f2:53:67:e1:c1:2e:0e:bc:fe:5a:50:d5:a7:94:7e:
                    99:ed:ae:6e:f5:2a:29:2a:72:54:28:65:50:e7:3c:
                    cd:84:d3:e0:85:df:b4:3c:3c:9e:43:19:ca:48:1a:
                    24:47:dd:72:69:33:87:22:9c:64:33:a7:1b:3f:cd:
                    84:0e:f8:b8:b7:79:f3:fc:96:f9:41:f0:2e:44:a8:
                    7f:57:84:d4:fa:88:58:c1:4f:a1:c0:78:29:9b:b3:
                    16:84:25:80:fd:a4:cc:a6:2c:20:75:e9:c6:8c:9f:
                    9a:01:9d:38:6b:de:b4:e6:95:47:bd:c3:d3:5f:54:
                    e5:aa:fc:7c:80:19:de:9b:9a:5f:8e:00:e8:fb:ef:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D6:F5:6C:B1:2B:49:48:25:15:06:9A:41:02:0D:97:10:3D:E5:33
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:db:eb:08:5d:bc:d6:38:91:b7:c6:94:66:74:88:10:7f:
         a1:99:9c:48:46:71:3d:38:40:c6:e3:01:65:5d:18:bb:cb:0c:
         fc:98:d0:50:da:86:c3:c1:18:58:8d:04:5d:19:c1:84:50:82:
         89:9e:65:97:51:bc:12:d8:53:b2:76:01:9f:1a:2d:03:fa:ca:
         58:c6:16:89:2e:27:29:5d:8a:d7:13:95:9d:2a:9a:a0:c6:43:
         64:9d:63:cb:8e:20:24:70:c8:64:78:55:f2:81:df:d8:ae:60:
         e1:29:b5:00:44:c8:14:fc:8d:48:b0:d0:87:8d:0a:2a:70:c5:
         3c:96:5f:5d:ed:74:3d:15:3e:20:08:c1:03:c5:26:25:cf:77:
         64:a6:b6:36:9e:0a:f3:95:54:e7:7b:b8:40:c9:e4:35:94:fd:
         51:e4:e2:2b:9d:ec:a2:35:6f:85:39:77:ae:51:df:f6:53:47:
         e2:26:80:4b:c2:1b:bb:6f:73:6f:e0:a4:54:51:86:87:09:d1:
         15:ab:09:89:4e:ec:14:4d:70:54:92:ae:da:5e:00:a6:e0:7a:
         11:bf:5d:95:58:e3:5c:6c:e3:19:1a:bb:df:c6:1b:93:02:e2:
         70:b3:e5:e4:45:c7:12:c7:1b:cf:87:b9:4a:8e:29:1f:2e:c8:
         60:fb:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----