Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          kQqST+Ob+T814S1EQ+n4Qie0bX6CthDH387q6iQhkuU=
Subject key identifier:   08:4D:C2:3B:4C:C1:E3:ED:61:60:36:E1:5F:32:9B:3A:BA:6D:3D:76
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       2E74428934D3139F8FD39F6EE58B1257C408FDAB
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:18:55 +0000
ROA not before:           Wed 21 Dec 2022 16:13:55 +0000
ROA not after:            Wed 20 Dec 2023 16:18:55 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:74:42:89:34:d3:13:9f:8f:d3:9f:6e:e5:8b:12:57:c4:08:fd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:13:55 2022 GMT
            Not After : Dec 20 16:18:55 2023 GMT
        Subject: CN=084DC23B4CC1E3ED616036E15F329B3ABA6D3D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:73:b4:a6:33:d9:8c:1e:85:85:66:33:54:
                    c1:34:fc:84:ec:2f:61:ac:0d:59:d9:7d:29:c2:5f:
                    0c:3a:de:84:7f:8c:03:a7:69:0e:27:02:94:1e:cb:
                    b7:f3:c5:8e:d0:3e:6c:7b:fb:a8:b5:44:95:9e:37:
                    bb:e9:a8:eb:dd:96:3f:6c:0a:0e:30:f1:33:cb:a6:
                    a5:a4:fd:28:08:80:fd:31:4a:72:f6:ae:0e:34:10:
                    df:90:32:8c:62:32:c4:67:be:c5:d9:8d:42:e9:11:
                    e2:42:7d:d1:d8:cb:90:51:b4:3d:5e:2a:b6:bf:d6:
                    4d:d8:23:a3:07:74:20:6f:42:64:3d:48:72:f2:1e:
                    87:53:09:91:e8:90:6b:4e:a9:ab:34:e7:71:d5:4a:
                    d4:7f:a8:10:8e:86:e2:a5:1b:5d:c4:0d:22:f7:91:
                    ea:eb:89:1c:a2:74:7d:49:52:62:25:a6:b2:71:79:
                    0d:7a:b4:d4:c8:0a:75:b5:98:4f:5b:82:de:4a:70:
                    67:d4:dc:ef:59:d0:11:bc:ea:5c:ff:ac:bf:16:18:
                    7a:45:d8:fd:f6:2b:f1:a4:8c:6a:0d:3d:97:79:d1:
                    41:04:3c:f1:1c:cb:93:3a:46:f3:39:06:ad:74:46:
                    77:2a:14:22:e3:5d:ae:78:7d:3b:24:ca:92:c0:6a:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4D:C2:3B:4C:C1:E3:ED:61:60:36:E1:5F:32:9B:3A:BA:6D:3D:76
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:c2:4a:96:14:ff:4c:8e:fc:b5:ce:0f:fd:f1:2e:90:5a:
         63:b0:3f:51:86:98:9a:db:f0:fe:cd:2c:9d:3f:21:47:5e:cc:
         6e:90:c2:bb:c7:fc:8a:97:91:6b:3a:96:f8:59:a6:f2:cb:e3:
         86:1d:a9:65:64:50:2e:e9:76:ab:c8:e9:46:b2:83:83:a5:a8:
         25:80:40:e4:67:a8:64:9c:06:58:05:79:d3:63:d2:9e:08:89:
         9e:05:33:47:bb:00:62:8f:97:66:2a:5c:aa:5a:cf:17:1c:6e:
         da:11:5e:eb:ce:90:1d:57:7b:32:99:35:d4:63:cd:58:cb:6f:
         1e:8e:43:da:43:fb:88:aa:85:87:28:20:a5:09:6b:16:4f:d0:
         86:58:65:ab:c9:15:f2:de:d1:1b:a6:f7:83:7a:ad:cf:f7:2c:
         a4:1f:94:d0:5a:87:79:e3:d7:3f:c6:c9:62:d0:8e:bd:82:c4:
         ed:3a:6c:86:b8:aa:4c:ef:b7:8d:72:5d:8f:bb:36:0a:b6:bd:
         57:29:d2:5e:e1:d0:a4:66:97:70:5e:61:33:63:3b:a7:ac:0b:
         a5:c1:28:04:8b:e7:d6:76:2c:b1:d6:74:8a:e4:eb:2a:54:d7:
         31:f1:63:2e:d6:64:43:59:eb:ca:ee:45:4f:67:d7:dd:09:91:
         b5:7c:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----