Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          b1+SUR5zPrE+jTNr5cDiVGAvRogqAdRbebug7cOHJh4=
Subject key identifier:   11:45:B8:F2:83:CE:DA:99:4C:0E:F2:A1:48:71:D6:8E:34:5E:59:79
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       542DD22DBB3878D85468097E8CDAF2FDBFA99ED3
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:53 +0000
ROA not before:           Mon 05 Jun 2023 18:28:53 +0000
ROA not after:            Mon 03 Jun 2024 18:33:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2d:d2:2d:bb:38:78:d8:54:68:09:7e:8c:da:f2:fd:bf:a9:9e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:53 2023 GMT
            Not After : Jun  3 18:33:53 2024 GMT
        Subject: CN=1145B8F283CEDA994C0EF2A14871D68E345E5979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:d0:7d:b8:13:af:76:80:a4:77:e6:cc:ce:
                    10:95:63:fd:07:9b:19:09:0d:31:31:2f:02:a0:3c:
                    78:e2:bf:f0:ef:eb:ea:22:a6:11:92:09:e0:e7:01:
                    29:e7:b4:c7:0a:7f:29:e0:ca:eb:a0:35:8e:31:ae:
                    57:43:ca:cc:93:3f:00:e7:3a:8c:91:12:db:f1:88:
                    d8:98:14:fa:3c:99:a4:e5:e7:6b:96:d1:ff:69:a6:
                    87:7d:e8:0a:af:d3:27:47:82:73:1d:9e:fa:d4:1a:
                    e9:24:f9:f5:cf:28:9c:b3:7f:bc:fe:85:7d:02:df:
                    00:81:8a:18:3b:02:a0:24:5e:3f:fd:12:70:6a:f6:
                    68:0b:d8:42:8f:9b:fb:b2:1d:51:5b:00:f6:c8:94:
                    b0:42:a2:c1:e2:70:80:9d:cc:af:00:ed:72:52:90:
                    4d:ea:4f:19:1f:59:9b:28:4b:86:7a:25:3a:cf:54:
                    e2:2f:b7:73:d4:b0:cd:2e:6f:ce:35:6c:69:0e:3d:
                    7b:3f:cf:b1:32:bc:68:be:5a:da:0f:3b:49:1b:23:
                    01:86:ec:8a:8c:c6:0a:66:e0:59:4e:bf:f1:c3:27:
                    22:61:b7:37:d5:38:1d:fc:21:ec:c7:8d:77:83:09:
                    3b:ef:14:0e:fc:fd:14:97:1f:27:83:f7:6f:f1:4d:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:B8:F2:83:CE:DA:99:4C:0E:F2:A1:48:71:D6:8E:34:5E:59:79
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:42:0a:44:6f:93:fb:3a:88:ad:21:84:94:07:5e:97:96:
         c7:7f:2e:ab:cd:69:99:fa:f6:ca:14:7c:a8:47:1b:4e:80:7d:
         23:37:cf:1c:ae:9e:a7:03:a1:90:5e:d5:fc:d2:07:7a:6a:65:
         55:50:ec:d3:f9:b1:aa:07:1b:b4:44:e6:cf:68:96:86:45:d2:
         6a:7e:55:1f:34:e6:a3:d2:17:e1:5c:f4:00:ce:fe:df:ed:99:
         bc:9f:f9:a1:41:c5:28:f0:72:23:a3:ea:f3:d9:ce:c6:ce:70:
         c2:83:fa:36:f0:0c:d0:20:98:55:d5:57:46:f3:20:ca:7c:48:
         d3:aa:46:4e:2f:8a:45:04:3b:37:70:6e:b5:de:a8:65:44:a0:
         c1:dd:ff:1e:76:43:25:68:36:20:15:2f:a7:83:60:60:8c:e5:
         50:f0:69:24:a2:32:60:43:6b:96:9d:e1:5e:da:0e:6f:b9:9e:
         ab:25:72:c8:45:0e:3b:89:b7:78:7a:78:85:c3:45:d9:77:e5:
         3c:b1:49:37:52:b7:28:71:4f:64:67:fd:14:a3:97:9a:84:0e:
         1a:79:5c:2a:5f:7b:b8:32:93:9e:48:08:ff:f5:45:05:ea:90:
         de:2a:d5:7c:93:fb:ad:71:88:ef:00:44:3c:56:49:55:43:5d:
         58:6d:24:4d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUVC3SLbs4eNhUaAl+jNry/b+pntMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjI1NzAzMjhlZWNhODgwZGJmYjIxMDMy
YjMzNzAwOWI5NmEyMWFlZGEwHhcNMjMwNjA1MTgyODUzWhcNMjQwNjAzMTgzMzUz
WjAzMTEwLwYDVQQDEygxMTQ1QjhGMjgzQ0VEQTk5NEMwRUYyQTE0ODcxRDY4RTM0
NUU1OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA023QfbgTr3aA
pHfmzM4QlWP9B5sZCQ0xMS8CoDx44r/w7+vqIqYRkgng5wEp57THCn8p4MrroDWO
Ma5XQ8rMkz8A5zqMkRLb8YjYmBT6PJmk5edrltH/aaaHfegKr9MnR4JzHZ761Brp
JPn1zyics3+8/oV9At8AgYoYOwKgJF4//RJwavZoC9hCj5v7sh1RWwD2yJSwQqLB
4nCAncyvAO1yUpBN6k8ZH1mbKEuGeiU6z1TiL7dz1LDNLm/ONWxpDj17P8+xMrxo
vlraDztJGyMBhuyKjMYKZuBZTr/xwyciYbc31Tgd/CHsx413gwk77xQO/P0Ulx8n
g/dv8U0aSwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFBFFuPKDztqZTA7yoUhx1o40
Xll5MB8GA1UdIwQYMBaAFGctZHmVwD2+e0ynxNdI2hNPB3AmMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg1NDMzYWMwMTg4OGNjYjdlMTUzMTI2LzAv
NjcyRDY0Nzk5NUMwM0RCRTdCNENBN0M0RDc0OERBMTM0RjA3NzAyNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2Y2ExODZmLTdmOWItNDdhOS1iNjIxLTNkNTgzZWU4NDk4Yy9mY2Iy
MGY1OTY2MjU3MDMyOGVlY2E4ODBkYmZiMjEwMzJiMzM3MDA5Yjk2YTIxYWVkYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4NTQzM2FjMDE4ODhj
Y2I3ZTE1MzEyNi8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzMzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwMAMA0G
CSqGSIb3DQEBCwUAA4IBAQBCyEIKRG+T+zqIrSGElAdel5bHfy6rzWmZ+vbKFHyo
RxtOgH0jN88crp6nA6GQXtX80gd6amVVUOzT+bGqBxu0RObPaJaGRdJqflUfNOaj
0hfhXPQAzv7f7Zm8n/mhQcUo8HIjo+rz2c7GznDCg/o28AzQIJhV1VdG8yDKfEjT
qkZOL4pFBDs3cG613qhlRKDB3f8edkMlaDYgFS+ng2BgjOVQ8GkkojJgQ2uWneFe
2g5vuZ6rJXLIRQ47ibd4eniFw0XZd+U8sUk3UrcocU9kZ/0Uo5eahA4aeVwqX3u4
MpOeSAj/9UUF6pDeKtV8k/utcYjvAEQ8VklVQ11YbSRN
-----END CERTIFICATE-----