Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          5JKHNDG/Veqj64rZrNpGVcv2pe/M9TtaFT3D4KKZmws=
Subject key identifier:   8F:98:57:FB:FA:94:72:ED:73:23:5A:75:CA:8C:E3:01:6B:5B:6C:77
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       3809CCA734D0C57B8379BC7B1CBE78C6CA1E37E6
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:32 +0000
ROA not before:           Mon 05 Jun 2023 18:28:32 +0000
ROA not after:            Mon 03 Jun 2024 18:33:32 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:cc:a7:34:d0:c5:7b:83:79:bc:7b:1c:be:78:c6:ca:1e:37:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:32 2023 GMT
            Not After : Jun  3 18:33:32 2024 GMT
        Subject: CN=8F9857FBFA9472ED73235A75CA8CE3016B5B6C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:03:3a:30:6d:d2:c2:e3:0a:ba:b1:c6:0f:
                    dd:73:95:16:6d:2c:55:fa:1a:46:fa:1e:81:e8:fe:
                    41:a4:af:70:de:75:04:3b:dd:16:0c:e9:b4:82:2e:
                    a3:ee:32:46:e2:9f:55:6b:c9:6e:b8:e7:83:e3:0f:
                    5d:48:0e:47:5f:a9:47:9d:35:81:41:d0:14:95:a1:
                    b8:f5:89:ab:ce:52:b0:06:23:09:c3:3f:fc:aa:10:
                    dc:76:84:00:86:8e:0c:72:63:83:bd:df:e2:26:f8:
                    a2:b3:d5:7f:df:87:fd:aa:41:f0:fa:bd:a7:ab:a4:
                    42:3a:cc:e6:24:ad:66:ad:a4:f8:78:2a:e6:72:c5:
                    fb:a6:84:cb:7e:c2:e0:b5:31:b0:05:54:41:6c:3c:
                    4d:5e:a2:6d:2f:cb:65:5c:bc:f0:fd:18:c4:19:f5:
                    bc:7f:ee:93:bc:2c:c6:f3:52:66:14:0d:0a:6f:fc:
                    57:08:56:07:9d:24:bd:65:07:c4:47:67:2a:ce:7e:
                    f7:55:8e:23:bb:00:94:75:ad:34:6c:5e:39:06:f5:
                    56:04:a8:c4:74:07:34:9c:46:0c:a9:d4:b2:87:78:
                    61:0f:ba:04:81:39:6c:f3:99:dd:c6:1c:9e:1d:cd:
                    3a:53:a4:14:7b:61:8b:f7:f8:b1:a5:92:1e:4e:6f:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:57:FB:FA:94:72:ED:73:23:5A:75:CA:8C:E3:01:6B:5B:6C:77
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3830303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:b1:c7:35:45:49:e5:4a:ae:45:9c:04:e9:cd:59:ee:eb:bc:
         e5:05:cf:80:fe:89:35:b3:7d:18:bc:b3:11:c4:7d:d0:5e:ff:
         49:05:e5:22:3f:ac:4e:8d:97:97:5c:e3:00:46:96:5c:7e:3e:
         23:43:6a:91:0c:89:8d:3b:cd:9d:3e:d9:6a:07:16:d6:25:19:
         37:ab:bc:fc:df:02:7b:3a:1f:1b:05:dd:04:de:83:68:a6:29:
         b8:46:4d:42:02:4d:97:39:d0:6d:4d:a2:a6:1b:f6:aa:2d:66:
         f0:58:5f:fe:ba:27:26:96:98:62:dd:c7:22:81:20:b9:1b:5a:
         37:09:81:c1:c8:70:52:3b:7a:e3:0e:d2:83:af:3c:9a:a8:62:
         3c:71:8f:b8:79:c3:66:77:b6:bd:96:1a:8f:cd:3e:cc:40:01:
         c0:19:ac:8f:49:6a:a9:3f:83:51:ec:61:b6:3d:3d:4b:36:62:
         31:e4:fa:96:ff:ab:a7:63:73:1d:37:38:de:e6:e0:6b:29:7b:
         ef:dc:ee:9e:cf:51:7f:da:f3:d0:2a:e0:e4:3a:18:57:00:03:
         52:1b:76:10:47:9c:5d:9f:64:2f:bc:b2:53:51:73:ff:4c:fa:
         59:3f:16:4f:78:8c:3e:8b:67:32:8e:f8:cc:32:83:d4:d8:6e:
         1b:23:70:c7
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOAnMpzTQxXuDebx7HL54xsoeN+YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjI1NzAzMjhlZWNhODgwZGJmYjIxMDMy
YjMzNzAwOWI5NmEyMWFlZGEwHhcNMjMwNjA1MTgyODMyWhcNMjQwNjAzMTgzMzMy
WjAzMTEwLwYDVQQDEyg4Rjk4NTdGQkZBOTQ3MkVENzMyMzVBNzVDQThDRTMwMTZC
NUI2Qzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpcDOjBt0sLj
Crqxxg/dc5UWbSxV+hpG+h6B6P5BpK9w3nUEO90WDOm0gi6j7jJG4p9Va8luuOeD
4w9dSA5HX6lHnTWBQdAUlaG49YmrzlKwBiMJwz/8qhDcdoQAho4McmODvd/iJvii
s9V/34f9qkHw+r2nq6RCOszmJK1mraT4eCrmcsX7poTLfsLgtTGwBVRBbDxNXqJt
L8tlXLzw/RjEGfW8f+6TvCzG81JmFA0Kb/xXCFYHnSS9ZQfER2cqzn73VY4juwCU
da00bF45BvVWBKjEdAc0nEYMqdSyh3hhD7oEgTls85ndxhyeHc06U6QUe2GL9/ix
pZIeTm+U8wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFI+YV/v6lHLtcyNadcqM4wFr
W2x3MB8GA1UdIwQYMBaAFGctZHmVwD2+e0ynxNdI2hNPB3AmMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg1NDMzYWMwMTg4OGNjYjdlMTUzMTI2LzAv
NjcyRDY0Nzk5NUMwM0RCRTdCNENBN0M0RDc0OERBMTM0RjA3NzAyNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2Y2ExODZmLTdmOWItNDdhOS1iNjIxLTNkNTgzZWU4NDk4Yy9mY2Iy
MGY1OTY2MjU3MDMyOGVlY2E4ODBkYmZiMjEwMzJiMzM3MDA5Yjk2YTIxYWVkYS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4NTQzM2FjMDE4ODhj
Y2I3ZTE1MzEyNi8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzgzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwgAMA0G
CSqGSIb3DQEBCwUAA4IBAQDPscc1RUnlSq5FnATpzVnu67zlBc+A/ok1s30YvLMR
xH3QXv9JBeUiP6xOjZeXXOMARpZcfj4jQ2qRDImNO82dPtlqBxbWJRk3q7z83wJ7
Oh8bBd0E3oNopim4Rk1CAk2XOdBtTaKmG/aqLWbwWF/+uicmlphi3ccigSC5G1o3
CYHByHBSO3rjDtKDrzyaqGI8cY+4ecNmd7a9lhqPzT7MQAHAGayPSWqpP4NR7GG2
PT1LNmIx5PqW/6unY3MdNzje5uBrKXvv3O6ez1F/2vPQKuDkOhhXAANSG3YQR5xd
n2QvvLJTUXP/TPpZPxZPeIw+i2cyjvjMMoPU2G4bI3DH
-----END CERTIFICATE-----