Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Im1o4PuMk9BQd842XvVa+hOnqAknIYJUqSZRlX/nH+s=
Subject key identifier:   EB:0A:BA:67:07:5A:D6:4E:30:8C:C5:50:E9:A8:54:A5:CD:B4:E9:0D
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       3498DA7FE15BA3B3154CE1DD95D993F58D4B3594
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:51 +0000
ROA not before:           Wed 21 Dec 2022 16:13:51 +0000
ROA not after:            Wed 20 Dec 2023 16:18:51 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:98:da:7f:e1:5b:a3:b3:15:4c:e1:dd:95:d9:93:f5:8d:4b:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:51 2022 GMT
            Not After : Dec 20 16:18:51 2023 GMT
        Subject: CN=EB0ABA67075AD64E308CC550E9A854A5CDB4E90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:c6:c3:f8:ae:16:62:96:5d:3b:d9:0f:b1:
                    ed:55:6e:a7:78:10:ba:50:c8:2f:0e:5e:44:04:cd:
                    bb:94:a9:cb:96:28:5c:15:59:d6:3d:12:40:48:6d:
                    d2:f6:bf:25:e1:be:dd:a3:41:d3:4a:23:15:ac:96:
                    99:17:07:33:28:08:5e:98:94:2b:2e:7c:62:db:64:
                    b2:e9:d3:ae:48:08:e3:51:8c:5e:1f:76:b9:c2:74:
                    5f:e0:71:01:b1:f3:55:3c:cf:5d:f3:1f:95:74:f5:
                    39:1b:c3:f2:08:6e:97:79:00:ec:17:42:7c:53:89:
                    3e:fe:ba:cc:12:a5:46:75:cf:70:95:9a:a0:c2:d9:
                    0f:76:5c:fa:5e:b5:a0:9e:b5:42:7d:19:87:69:04:
                    c9:27:f5:20:7e:47:5c:a8:f0:70:dd:ae:ee:15:b5:
                    e2:9b:66:c5:4e:1d:69:56:7c:18:39:45:9a:aa:bb:
                    54:00:dc:7a:ab:69:8b:f6:15:8e:92:df:c9:98:b9:
                    e1:76:a3:fc:68:21:76:8c:b9:14:54:d4:32:09:66:
                    79:76:56:e7:9b:58:87:ba:2e:47:82:81:5d:0f:86:
                    63:30:3b:e3:98:a9:61:33:1b:e9:62:a9:b0:2a:54:
                    13:78:f8:63:c0:cc:df:75:53:a0:cc:4f:32:9b:12:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:BA:67:07:5A:D6:4E:30:8C:C5:50:E9:A8:54:A5:CD:B4:E9:0D
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:bc:07:fb:ad:6e:a7:ad:4d:0d:ad:5f:e9:cc:60:86:06:
         33:74:94:83:a2:08:b6:94:99:1b:da:04:78:e1:67:35:0c:5e:
         fe:f5:41:0c:f0:aa:e9:2e:e7:1f:92:d3:57:ba:a7:c1:67:34:
         8b:71:7b:03:b3:8e:42:15:77:9a:c5:c4:f0:62:91:d3:09:9d:
         b3:27:13:63:fe:f3:c4:cd:9c:63:25:06:4f:bc:e0:d2:9f:a2:
         66:aa:01:30:df:a8:6f:a9:7e:c5:a1:8f:0f:1e:df:f0:52:b2:
         ac:54:e5:04:96:1b:63:5b:5a:ba:7c:19:9e:64:b6:b4:6c:28:
         a6:34:f5:c5:b7:31:42:e9:7f:6c:70:6b:e9:29:d6:fc:3c:a1:
         6c:d4:a3:22:d5:c0:d8:72:8e:87:2b:98:76:6d:ee:3d:52:1b:
         3a:f5:0d:bd:6a:74:fe:4c:41:98:48:8b:83:3f:09:4a:8e:48:
         c4:23:dc:3c:66:80:7d:35:05:0f:18:e7:11:d8:9d:2b:ef:29:
         76:54:b4:d9:ab:20:80:43:bb:ab:ed:a9:7e:b2:89:bb:73:8c:
         e5:98:4a:ec:e1:69:6e:5d:90:e3:a5:ad:69:49:ee:af:5d:7a:
         67:34:0c:af:07:6a:1f:6b:28:87:6c:4c:55:eb:cf:55:7e:e7:
         04:ff:4b:59
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNJjaf+Fbo7MVTOHdldmT9Y1LNZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjIxYTAzYmUxNDIzMTczZjRmMTg0NjQx
Mzg5ZDNhNWI1MThiZDg0ZDQwHhcNMjIxMjIxMTYxMzUxWhcNMjMxMjIwMTYxODUx
WjAzMTEwLwYDVQQDEyhFQjBBQkE2NzA3NUFENjRFMzA4Q0M1NTBFOUE4NTRBNUNE
QjRFOTBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7Gw/iuFmKW
XTvZD7HtVW6neBC6UMgvDl5EBM27lKnLlihcFVnWPRJASG3S9r8l4b7do0HTSiMV
rJaZFwczKAhemJQrLnxi22Sy6dOuSAjjUYxeH3a5wnRf4HEBsfNVPM9d8x+VdPU5
G8PyCG6XeQDsF0J8U4k+/rrMEqVGdc9wlZqgwtkPdlz6XrWgnrVCfRmHaQTJJ/Ug
fkdcqPBw3a7uFbXim2bFTh1pVnwYOUWaqrtUANx6q2mL9hWOkt/JmLnhdqP8aCF2
jLkUVNQyCWZ5dlbnm1iHui5HgoFdD4ZjMDvjmKlhMxvpYqmwKlQTePhjwMzfdVOg
zE8ymxJqOQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFOsKumcHWtZOMIzFUOmoVKXN
tOkNMB8GA1UdIwQYMBaAFDkls47tOZtWI8EkdAos6idfPfvhMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg1MGM4ZTJjODcxZGY5LzAv
MzkyNUIzOEVFRDM5OUI1NjIzQzEyNDc0MEEyQ0VBMjc1RjNERkJFMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzAxOTgxZTQwLThiM2ItNDJiMC04YTRhLThhMjQyODVlYjcwMi9mY2Iy
MGY1OTY2MjFhMDNiZTE0MjMxNzNmNGYxODQ2NDEzODlkM2E1YjUxOGJkODRkNC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NTBj
OGUyYzg3MWRmOS8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhNjIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwsAMA0G
CSqGSIb3DQEBCwUAA4IBAQAxfLwH+61up61NDa1f6cxghgYzdJSDogi2lJkb2gR4
4Wc1DF7+9UEM8KrpLucfktNXuqfBZzSLcXsDs45CFXeaxcTwYpHTCZ2zJxNj/vPE
zZxjJQZPvODSn6JmqgEw36hvqX7FoY8PHt/wUrKsVOUElhtjW1q6fBmeZLa0bCim
NPXFtzFC6X9scGvpKdb8PKFs1KMi1cDYco6HK5h2be49Uhs69Q29anT+TEGYSIuD
PwlKjkjEI9w8ZoB9NQUPGOcR2J0r7yl2VLTZqyCAQ7ur7al+som7c4zlmErs4Wlu
XZDjpa1pSe6vXXpnNAyvB2ofayiHbExV689VfucE/0tZ
-----END CERTIFICATE-----