Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          5UngOo4MJXiVSlXRKv3H0+D9902QXBcpmtxBVskNS2o=
Subject key identifier:   B5:92:F1:76:4B:0B:37:48:24:D8:4B:C5:FD:DF:61:54:5A:E9:15:F0
Certificate issuer:       /CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
Certificate serial:       17BD3D850136B3DAF84E0B58589DB98D0E2CE8F3
Authority key identifier: 39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 21 Dec 2022 16:19:00 +0000
ROA not before:           Wed 21 Dec 2022 16:14:00 +0000
ROA not after:            Wed 20 Dec 2023 16:19:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:3d:85:01:36:b3:da:f8:4e:0b:58:58:9d:b9:8d:0e:2c:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Validity
            Not Before: Dec 21 16:14:00 2022 GMT
            Not After : Dec 20 16:19:00 2023 GMT
        Subject: CN=B592F1764B0B374824D84BC5FDDF61545AE915F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:18:cb:3b:3a:18:a5:5e:ad:84:53:b0:77:
                    c8:88:f9:6b:7d:24:5d:ec:bd:28:18:68:b3:83:15:
                    81:1b:91:cd:7c:6b:1e:3f:d4:fd:dd:74:09:c2:92:
                    1e:66:68:2d:e8:15:41:32:47:fc:87:e6:eb:b9:78:
                    a7:91:77:1a:99:19:43:03:7e:86:80:51:c6:31:b5:
                    5e:74:fa:22:43:28:df:cc:3e:bc:5c:cc:cf:1c:dc:
                    78:61:27:58:a6:74:4a:48:16:86:a4:d9:8b:8e:18:
                    5d:ab:3c:8c:ba:b9:56:17:1d:c1:e9:f9:6e:00:06:
                    1f:25:d6:b2:fb:b2:03:4b:c7:07:02:b0:cc:ea:f7:
                    5d:ef:34:8a:35:25:a5:ca:29:54:d4:96:6c:7e:6c:
                    90:a3:d8:0e:05:2b:e5:26:04:37:de:26:77:fc:7d:
                    69:87:7a:e1:8f:37:22:a8:1f:aa:a8:c1:2b:49:ee:
                    c0:86:ab:fc:f3:9e:41:c3:a2:ee:3d:aa:bb:53:81:
                    12:5a:63:e5:7d:db:5e:e8:09:07:50:c5:3b:f8:e4:
                    37:f7:76:59:ca:1f:4b:39:d6:90:f1:2e:92:b7:da:
                    0d:27:0c:32:04:5b:a4:22:41:4a:4e:fe:24:46:fc:
                    fb:ea:a5:d6:24:1c:68:56:4f:6a:a7:2b:3e:a8:b7:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:92:F1:76:4B:0B:37:48:24:D8:4B:C5:FD:DF:61:54:5A:E9:15:F0
            X509v3 Authority Key Identifier:
                keyid:39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:62:39:e4:67:ee:32:e1:1e:2c:74:04:a0:8a:b7:05:18:
         55:45:79:fd:46:39:c2:5c:6e:25:17:cf:92:d8:84:07:2b:bf:
         49:4d:0e:d7:84:9e:fe:52:e2:e7:10:58:01:f3:ee:ae:58:04:
         3f:8a:2f:85:9b:87:91:c7:0c:ab:e0:f1:66:c9:8a:12:71:17:
         d4:bc:2a:19:fc:6a:0c:30:5f:fc:b8:61:ab:e5:fc:cd:76:97:
         97:45:76:a3:49:29:1c:1b:1e:4a:ce:0c:39:bf:d3:d0:a7:14:
         f3:1f:da:de:6f:00:f9:46:aa:9e:01:7e:66:e3:9e:1e:f5:d2:
         96:5f:78:3e:00:ce:f8:fb:4c:6b:71:9d:4d:71:1e:15:21:fb:
         12:a0:bd:52:78:33:6c:5d:97:d5:a9:7d:2e:c8:74:b9:ee:e9:
         ce:1d:05:0c:0c:9f:89:9c:d1:aa:de:5b:b1:18:4e:ed:4b:0c:
         5f:8e:d4:f4:c3:0d:fa:cd:be:65:c7:87:90:61:3a:8f:fa:9e:
         27:a0:3f:c7:c9:fa:03:f0:b7:d3:17:a5:2a:8b:6b:1c:43:d0:
         08:a1:56:59:07:3d:c8:ba:ae:f0:fe:34:22:1d:a3:c5:17:69:
         50:64:9c:1b:76:30:fc:a7:b0:de:62:8c:26:3d:dd:79:e5:c4:
         10:61:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----