Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          3kcAK+6G8jUI70SVEzfMFqD2ulcUaEym4f1zaeolVM8=
Subject key identifier:   AD:DE:E5:92:EA:24:78:A2:73:0A:93:4E:06:01:BC:DA:5E:15:90:FF
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       77933661C522B5CD514774A76F39147B0E8CB8E3
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:23:48 +0000
ROA not before:           Tue 14 Feb 2023 14:18:48 +0000
ROA not after:            Tue 13 Feb 2024 14:23:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:93:36:61:c5:22:b5:cd:51:47:74:a7:6f:39:14:7b:0e:8c:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:18:48 2023 GMT
            Not After : Feb 13 14:23:48 2024 GMT
        Subject: CN=ADDEE592EA2478A2730A934E0601BCDA5E1590FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:72:e7:58:64:88:d6:f9:b3:fd:bb:b7:17:
                    bb:94:18:e3:f5:75:ad:e8:ae:fe:da:9e:62:69:e0:
                    b8:37:9c:5b:a3:09:d1:ac:db:01:b1:cc:6f:26:44:
                    6a:53:ac:9d:0a:16:8d:02:01:6d:f6:c9:e9:78:18:
                    fd:7c:24:fc:80:41:94:f5:22:64:c0:8f:92:be:58:
                    a4:29:f4:1c:63:47:ab:2f:04:3f:ce:d9:98:83:df:
                    f9:78:89:38:98:31:00:9a:07:27:b6:e0:e3:75:d1:
                    28:29:49:31:49:c0:a1:96:2d:1c:0c:77:ce:4d:b2:
                    f5:85:5a:4e:b5:7a:b7:94:23:0f:7b:54:68:68:5b:
                    43:87:a2:8c:63:9a:83:85:1a:ba:68:a1:6a:6b:9c:
                    08:4c:6b:23:0f:fd:10:01:78:ac:a2:fb:ad:20:d0:
                    c3:ee:da:31:ef:6f:8f:2b:dd:2d:e0:00:27:d9:9d:
                    23:fb:b1:f8:ea:a9:4e:ef:f1:88:70:b5:f1:4a:64:
                    32:b2:0e:79:5b:f5:94:37:92:43:7f:0d:73:49:17:
                    c1:48:46:0f:7d:d7:7d:07:7a:42:ff:c1:7d:9c:45:
                    ff:16:a9:61:a4:51:6c:5e:ab:6d:c2:38:80:24:10:
                    78:ab:65:ed:d9:b2:3c:83:2f:df:3b:1e:3a:8c:7e:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DE:E5:92:EA:24:78:A2:73:0A:93:4E:06:01:BC:DA:5E:15:90:FF
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:da:fb:84:2f:eb:99:55:2e:a4:bd:a1:d3:f3:95:1c:f7:
         bd:9e:e0:72:61:09:b6:41:97:23:7d:f7:11:23:f2:77:2b:55:
         44:55:97:d6:98:e4:93:95:37:37:92:35:e7:96:35:b9:bb:b7:
         1f:f3:bc:e4:a4:82:1f:4d:82:51:6f:12:56:62:36:e3:80:d6:
         ee:38:c9:1f:58:84:36:6c:2e:35:ea:1d:8d:32:fb:4c:b5:56:
         64:7d:a2:67:28:5c:d1:57:d9:f1:03:7c:0b:9a:4f:8c:84:b6:
         fb:99:3c:f6:9f:25:ba:59:f3:17:dc:e4:97:ae:0b:e0:0e:f9:
         d3:e4:56:f2:cc:36:5d:32:f4:ce:57:a1:6e:16:9b:65:7c:84:
         c4:93:5b:c3:0e:3f:c5:03:93:2b:53:04:ad:6f:b6:13:ff:e7:
         64:e6:d2:ad:6b:3a:c4:70:b3:32:1b:5f:49:96:f5:10:fd:7f:
         4d:b8:d6:3a:f8:d8:e4:91:e0:10:21:da:00:fa:e5:ef:08:65:
         c1:82:2b:64:1b:b1:a1:5b:9a:9e:29:f7:6e:ea:07:dc:ae:29:
         7d:47:3e:60:bc:85:d0:9e:2c:13:1a:07:16:e8:43:13:f6:8e:
         4c:19:89:a6:37:ab:49:5f:f0:93:9c:78:01:0e:07:54:11:16:
         68:08:39:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----