Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          lV7p5O1L8nsdqmHNfw+YpEFPyR/3u0k59wkuVspFo/o=
Subject key identifier:   D4:AD:85:18:67:CA:BF:A6:C7:3E:00:5B:CE:3B:D1:CA:E0:9A:22:D9
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       649393A279C8D9744244C1743771FC08B152DF4E
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:44 +0000
ROA not before:           Mon 05 Jun 2023 18:28:44 +0000
ROA not after:            Mon 03 Jun 2024 18:33:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:93:93:a2:79:c8:d9:74:42:44:c1:74:37:71:fc:08:b1:52:df:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:44 2023 GMT
            Not After : Jun  3 18:33:44 2024 GMT
        Subject: CN=D4AD851867CABFA6C73E005BCE3BD1CAE09A22D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:bb:e0:4b:bb:3f:5b:4c:45:94:e7:2e:d2:
                    bf:7f:9a:02:87:4c:98:aa:63:f1:14:ac:2d:bd:04:
                    87:4a:95:29:da:74:96:34:91:40:3d:38:92:af:ee:
                    2d:e4:79:ce:01:ac:bc:0f:1a:d2:77:e5:4b:cb:41:
                    56:c1:4c:22:aa:d5:b1:f4:ad:f4:aa:f5:3f:c8:71:
                    17:f9:98:d5:3a:11:b6:69:46:62:a4:5f:cb:ca:31:
                    90:29:dd:4b:49:6f:3a:7d:eb:41:26:f3:83:89:69:
                    0f:ea:45:94:56:79:7e:6c:e2:df:3e:af:75:65:d2:
                    7a:49:7f:d1:a0:e0:37:72:e8:6e:30:c1:a7:5e:24:
                    8e:26:f4:b1:66:e9:65:6d:e0:e6:64:0c:b2:89:26:
                    85:6a:5e:bf:b1:a4:94:00:7e:c8:85:09:48:74:84:
                    d9:9b:88:93:ca:f7:f4:eb:4e:1c:2b:9e:d2:33:a9:
                    22:bc:b0:a4:9a:0e:46:f4:1a:9f:6a:b6:ca:9b:a0:
                    dc:b5:12:ae:4c:25:6b:41:e4:83:05:0b:df:19:e7:
                    1d:07:c6:72:e3:32:50:d7:68:eb:d5:bb:e8:8c:e6:
                    1a:69:05:6b:4f:15:8f:b8:60:e8:a2:f4:fa:5e:a5:
                    4d:6d:56:61:92:86:60:53:7c:1a:ea:ac:51:95:d7:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AD:85:18:67:CA:BF:A6:C7:3E:00:5B:CE:3B:D1:CA:E0:9A:22:D9
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:26:5e:bf:97:9f:39:1a:6e:63:fd:e5:a9:e0:68:f5:bb:52:
         2d:bc:e8:4a:41:db:35:59:d7:af:94:5a:00:cd:ec:92:ad:da:
         72:0c:e6:38:5b:be:44:4f:9c:07:2f:18:55:ef:99:38:47:9d:
         3d:6f:6a:68:cf:0c:ba:4e:91:5b:e2:9e:1d:bb:30:d0:fc:7d:
         1a:f0:8c:f7:fe:01:bf:5f:09:92:78:a5:e7:b9:c0:9f:e4:26:
         11:14:a8:52:df:58:62:d1:ea:c2:87:02:ea:97:78:1f:a1:bb:
         dc:af:3d:22:8f:f1:90:07:e3:de:93:af:4c:f1:61:24:e0:fd:
         e5:ad:e2:a6:aa:76:b1:b1:5c:1b:09:cd:54:35:ca:8b:e4:a4:
         67:ae:5e:f6:f2:c4:6c:38:28:98:dc:04:c9:e7:32:e9:b9:03:
         77:68:8e:0a:5a:5b:e0:0f:ca:a7:7a:21:30:ac:2b:e5:e4:f7:
         cf:f5:ab:d7:ae:69:a2:88:42:91:5d:95:e5:bd:8a:d6:38:b9:
         2b:5f:1d:89:15:c4:a3:c2:0c:2a:7f:13:c6:a4:2c:48:dc:f4:
         2f:19:56:1a:62:fd:f4:5a:7a:c0:77:7a:4b:98:d8:a9:81:71:
         3a:8e:28:56:ba:fc:f4:24:47:64:9c:b5:4b:8b:35:23:9e:1e:
         84:d3:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----