Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Ha0YnTl57DuEr4/MF4tTPJXkgY6//r2wz0gFoMSFq1Q=
Subject key identifier:   FF:6F:9B:25:79:DB:4A:19:85:E3:62:3B:04:97:34:D8:D3:F2:26:CE
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       6645DF65E2BFA9CF252E508F03542C2EE134A9C4
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:23:59 +0000
ROA not before:           Tue 14 Feb 2023 14:18:59 +0000
ROA not after:            Tue 13 Feb 2024 14:23:59 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:df:65:e2:bf:a9:cf:25:2e:50:8f:03:54:2c:2e:e1:34:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:18:59 2023 GMT
            Not After : Feb 13 14:23:59 2024 GMT
        Subject: CN=FF6F9B2579DB4A1985E3623B049734D8D3F226CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:57:a9:0b:76:50:70:8c:4b:aa:bb:e6:c3:
                    a8:3e:4b:59:82:7d:14:c7:5a:c5:fc:6d:ac:be:99:
                    55:f8:f1:64:ad:5b:d1:8d:df:07:7c:3e:ee:49:2a:
                    67:2a:fa:cc:cc:ac:84:ce:76:e5:3c:16:32:ec:5e:
                    4f:7e:33:c3:3a:4c:c6:c1:f6:94:2e:96:9e:4b:25:
                    5e:c8:e7:e8:cb:90:d5:63:1f:5a:18:7c:c2:78:38:
                    25:77:b0:cb:93:3f:6a:b8:d2:20:ba:0e:36:4e:74:
                    e7:8e:e9:75:b2:64:bc:7a:4f:2b:0e:d6:5e:98:db:
                    98:7c:d5:cb:95:be:0b:26:d9:2e:0f:ba:c3:e8:30:
                    be:6c:46:de:e6:b5:5c:cf:c6:45:96:69:24:75:8f:
                    aa:c7:49:3f:ca:12:f6:2b:1a:09:90:8b:e0:6a:91:
                    2b:ca:fa:c3:ee:22:00:14:7b:e6:1f:fc:f7:6a:17:
                    12:af:e9:90:9e:98:b6:5b:73:7a:58:da:1a:5a:88:
                    6e:b0:fe:34:74:dc:51:bf:28:fa:b3:6a:c0:fa:bc:
                    3e:72:db:ce:a9:7a:5b:35:3c:2d:4b:3a:79:c0:9a:
                    97:6e:4c:fa:6a:2b:57:dd:2f:34:99:91:ea:c9:19:
                    5b:31:5d:c7:9d:7c:04:8b:a4:92:5e:d0:10:87:4c:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:9B:25:79:DB:4A:19:85:E3:62:3B:04:97:34:D8:D3:F2:26:CE
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:66:aa:ed:f5:9d:17:3b:32:af:d0:bc:b9:94:e2:44:0d:30:
         e2:cc:d2:47:ec:38:9d:75:f0:36:bf:63:af:0d:3b:26:ae:53:
         be:ae:67:61:0c:ec:0b:f9:b7:ec:07:b0:ab:f5:f6:c4:dd:c4:
         54:7d:cb:d3:ba:b1:78:c2:b7:a1:85:74:8e:fc:63:8e:6e:70:
         6f:02:24:8c:e9:30:1d:50:88:1e:03:41:13:cb:81:91:69:a3:
         3b:07:82:e0:87:06:79:ee:03:e2:3b:8e:36:80:d1:5b:9c:87:
         63:29:27:c3:18:3e:4a:30:41:d0:df:50:78:08:4d:54:23:9b:
         ec:3d:62:86:1c:cb:19:94:e6:dd:4f:84:0d:d2:95:19:11:05:
         50:9c:b9:25:c7:68:93:64:99:c3:20:ec:a3:fc:22:e9:eb:9f:
         ed:22:71:77:71:9b:59:bf:25:de:9d:69:79:31:e0:70:19:ab:
         19:a3:03:10:77:8a:54:29:bc:23:8b:c7:40:f8:33:08:3c:40:
         5b:f8:24:27:e5:46:7c:0e:a3:e8:50:02:ba:97:d1:7f:06:ab:
         38:e0:3f:18:c1:0e:96:0f:43:c2:3a:c7:5e:0e:87:b7:82:f0:
         4c:7a:2c:50:87:a8:49:84:64:f5:16:18:22:77:b0:e6:fe:a0:
         1f:77:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----