Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          GfiQLUkma4A7mECt9ILvqf7wafFlJ5wxZhZBZJvWO3E=
Subject key identifier:   CF:FB:22:2A:BA:C0:D8:10:60:DD:37:A0:40:23:8A:70:DC:93:2C:B8
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       3320602E2DCFBDF411E98661A5D4F05AE24604D8
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:56 +0000
ROA not before:           Mon 05 Jun 2023 18:28:56 +0000
ROA not after:            Mon 03 Jun 2024 18:33:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:20:60:2e:2d:cf:bd:f4:11:e9:86:61:a5:d4:f0:5a:e2:46:04:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:56 2023 GMT
            Not After : Jun  3 18:33:56 2024 GMT
        Subject: CN=CFFB222ABAC0D81060DD37A040238A70DC932CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:bd:ae:77:7d:69:5e:b0:82:3a:85:ab:8f:
                    b2:34:7f:b1:f0:6b:78:d6:b8:f4:97:6c:c6:92:3e:
                    27:4e:bd:2a:01:6f:10:c5:54:3b:5c:2b:c8:22:8b:
                    ae:c4:76:ff:e7:5b:06:be:90:16:6e:a4:d8:4b:03:
                    79:3b:7e:67:aa:cf:77:28:a0:3a:96:6c:8a:b2:a8:
                    bd:e2:99:6e:7a:30:62:10:24:78:e5:82:90:93:c2:
                    ec:77:a4:33:76:7b:ae:02:7c:12:15:4c:bc:0f:f0:
                    97:e0:15:09:ab:89:28:1b:4c:61:a0:df:06:66:78:
                    cb:d9:40:ed:86:cd:82:99:47:29:b8:cb:06:b5:67:
                    01:27:cb:72:dd:d5:dc:e6:d4:80:8c:75:df:02:21:
                    1a:73:16:d4:ed:4f:b5:14:18:60:c0:df:67:c4:8e:
                    5f:98:4e:63:93:bf:a6:bd:13:b6:6b:6f:8f:60:ef:
                    b7:d6:85:1d:1a:9d:bb:f6:2d:65:cb:cf:c8:c2:74:
                    1c:fc:c5:0d:9d:63:2c:c7:98:2f:8b:df:d6:29:59:
                    0a:2c:32:8a:d5:42:1b:e0:51:54:c0:d7:23:c4:9a:
                    0d:fb:9a:0e:b9:8d:81:9d:01:ba:47:2a:0c:46:0d:
                    67:7e:2e:ce:28:2d:6c:2f:68:c3:98:35:44:2c:4e:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FB:22:2A:BA:C0:D8:10:60:DD:37:A0:40:23:8A:70:DC:93:2C:B8
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:10:58:81:f3:b7:de:71:78:b6:a1:2f:a6:16:e6:a0:09:7a:
         0f:a4:df:e9:2e:4f:57:7e:2c:91:35:b3:c8:ec:f0:4e:9f:4b:
         55:ca:79:a8:2a:aa:9e:a8:5b:67:0d:ef:f3:59:cb:f0:cb:06:
         1a:6f:fb:08:5a:7e:54:e8:46:cd:d6:0f:f4:6e:5d:a9:2a:62:
         36:05:0d:5e:72:ee:ee:c9:a3:29:da:ab:25:1a:3f:c7:4f:df:
         39:36:65:4d:5a:98:e8:82:a0:28:6d:0e:7a:13:9c:06:a1:3a:
         7a:f9:b3:b1:0e:27:e1:92:b4:d5:b6:ec:a2:77:46:1a:79:a3:
         0f:73:7c:a3:eb:a3:8a:d4:8b:48:eb:c0:dd:53:47:35:93:a9:
         6f:af:28:ad:b7:5b:7f:e6:09:28:8b:1c:c6:3c:ca:51:85:61:
         5e:4a:2c:4f:ff:35:f9:30:17:1f:c8:09:88:06:64:73:ee:74:
         56:fe:40:4c:43:1c:1a:85:46:ca:be:5e:23:3f:7c:ce:3e:1d:
         2b:92:9d:55:d4:60:f1:aa:a9:da:e6:e2:7a:fb:09:10:30:9c:
         bf:55:25:a4:d4:e3:59:2f:02:66:b4:31:97:d9:04:d7:aa:0a:
         53:c6:f9:e6:2d:12:ae:7f:26:bd:40:fb:46:c1:d6:16:7c:5e:
         98:60:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----