Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          sJPgtEASpitOJM8wZwjXvD4H1dKkRqwUf3w+sanqIG8=
Subject key identifier:   47:F2:5C:D7:D1:F6:A5:9D:1A:BA:AF:53:70:12:D7:A3:B1:B5:FA:E6
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       5D4587E88F1291DCA89DCC3E965DE989486AE22F
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:28 +0000
ROA not before:           Mon 05 Jun 2023 18:28:28 +0000
ROA not after:            Mon 03 Jun 2024 18:33:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:87:e8:8f:12:91:dc:a8:9d:cc:3e:96:5d:e9:89:48:6a:e2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:28 2023 GMT
            Not After : Jun  3 18:33:28 2024 GMT
        Subject: CN=47F25CD7D1F6A59D1ABAAF537012D7A3B1B5FAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:f6:bb:54:62:92:38:55:72:a7:1f:d5:e0:
                    98:ba:1c:be:38:17:7d:85:01:8e:35:5c:71:73:2d:
                    16:6c:fe:1b:35:c7:52:e6:e6:98:e2:c9:32:42:83:
                    98:26:40:02:92:9a:57:04:a2:57:27:ca:53:10:6d:
                    5a:75:c2:05:b1:75:89:50:4b:42:f2:1f:e2:61:7b:
                    3c:2b:96:25:42:d8:f0:fa:92:92:41:3d:a6:a6:0c:
                    71:10:d8:7e:f8:66:44:e3:8f:fe:36:73:91:1a:70:
                    57:06:4b:f1:76:d8:f7:ab:c1:e4:d8:11:e4:55:4d:
                    25:a4:18:25:95:f9:56:ab:09:b0:ba:56:f3:40:9d:
                    f8:4d:77:50:fd:77:59:76:78:18:a0:cb:73:07:88:
                    60:cd:52:4a:09:2e:cf:ac:46:29:ac:64:29:24:dd:
                    49:48:0e:0c:7d:64:db:71:52:f1:56:ea:ab:57:aa:
                    bf:87:86:32:7e:40:b1:95:98:62:7c:7b:88:35:90:
                    6f:94:c5:ea:ab:93:8e:38:b9:9b:b6:fa:29:93:51:
                    28:f5:d3:89:84:8d:8b:21:9f:29:40:d0:ce:6d:e4:
                    63:e0:6a:e2:a1:1e:39:73:66:3c:ce:2a:30:70:74:
                    d1:0f:8c:4a:a7:94:61:5e:14:97:a7:77:e5:26:e3:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F2:5C:D7:D1:F6:A5:9D:1A:BA:AF:53:70:12:D7:A3:B1:B5:FA:E6
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:2b:8e:4d:da:a8:43:29:6b:61:40:75:e5:c7:8c:b1:62:
         64:ea:55:5f:44:dd:ac:43:9e:90:f9:e4:d9:b1:11:9f:d4:46:
         1c:dd:b5:ce:65:5a:8c:18:f0:8f:28:54:ab:3b:a2:c2:99:21:
         11:58:7f:d0:2d:23:9c:af:a2:37:68:68:25:9a:ca:da:8b:59:
         fb:a6:cf:bf:68:50:18:e6:45:a0:f6:14:d0:fb:4b:1e:f4:09:
         e5:0d:b9:5e:58:a9:a4:47:c4:5a:9d:ee:db:95:ac:57:60:8d:
         24:c1:dc:07:07:b4:98:c3:cd:01:44:4e:01:47:56:fc:3b:8f:
         a8:3f:69:46:e2:ce:4b:d9:5f:a3:ed:ea:42:b9:e6:96:cf:00:
         82:b2:42:e5:bd:7b:0d:4b:6d:02:8d:87:fe:aa:d5:5f:2c:bd:
         cf:63:fd:cf:ce:3c:bf:f9:19:2a:d5:1b:a3:44:8f:b6:3b:70:
         08:6f:d3:1e:b0:d0:04:a4:79:1c:2a:2f:ea:fb:eb:38:3a:4e:
         07:cd:ac:50:bb:13:e3:10:df:4f:1f:17:07:db:9c:dd:14:d4:
         4b:8f:e1:26:6e:97:69:86:f5:96:d2:b1:0b:9c:aa:2b:9c:42:
         33:1d:ae:71:02:6e:df:1d:9e:71:96:b4:4a:5b:5e:3b:5e:97:
         39:01:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----