Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          /bLNnWbmCZwWuIMIYTpB2QdBLUOATHlisjKw7tA2nFg=
Subject key identifier:   B9:2C:BB:C9:FC:E6:0A:89:2E:02:94:AF:83:D4:80:9A:C2:42:C6:9C
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       6EDCAECB4B71A8EF7B8340D65F9C443917FCB5C2
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:32:27 +0000
ROA not before:           Mon 05 Jun 2023 18:27:27 +0000
ROA not after:            Mon 03 Jun 2024 18:32:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dc:ae:cb:4b:71:a8:ef:7b:83:40:d6:5f:9c:44:39:17:fc:b5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:27:27 2023 GMT
            Not After : Jun  3 18:32:27 2024 GMT
        Subject: CN=B92CBBC9FCE60A892E0294AF83D4809AC242C69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:da:ae:3f:e7:bc:95:dd:4f:46:7d:36:bb:
                    6a:0a:4b:9b:32:cf:e7:5d:6b:11:af:4a:fb:43:5a:
                    57:1e:3c:0b:08:08:b7:24:60:83:60:36:4c:d6:fa:
                    50:09:6a:65:3e:1b:1d:80:c1:fb:8c:7f:cc:7a:e5:
                    e3:88:9c:17:c4:cf:f5:2b:53:c6:a7:bd:b8:4e:f0:
                    81:4f:39:c0:bc:9e:7a:c6:0a:28:63:15:21:d5:f0:
                    15:d1:ee:29:39:18:6c:75:00:89:ba:39:c9:eb:fb:
                    e9:89:fe:b2:ec:6e:a6:34:8d:8e:e1:d0:4a:f6:04:
                    0b:ca:78:6d:83:7e:75:6c:18:43:6d:cb:2d:88:3a:
                    8f:86:bf:81:72:14:66:2f:6b:15:dc:33:c6:93:07:
                    29:77:13:3b:22:38:61:50:53:cf:7f:18:b2:28:aa:
                    b1:9b:7c:a0:cd:91:28:7f:83:33:af:da:08:11:61:
                    34:50:97:55:c0:4c:f1:2c:35:23:17:36:8a:27:db:
                    82:02:e1:3e:7f:70:96:62:a9:76:6f:fc:0a:85:dd:
                    cb:9a:cc:e6:63:74:4b:da:81:3c:8e:f6:d3:67:d4:
                    56:f2:45:fb:78:75:1d:55:2f:cb:7e:2e:b3:9e:4c:
                    f5:cc:87:69:40:2c:d9:e2:a7:4b:03:a1:54:24:34:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:BB:C9:FC:E6:0A:89:2E:02:94:AF:83:D4:80:9A:C2:42:C6:9C
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:cf:ac:b7:70:ae:af:02:87:87:27:7a:e1:9c:95:fd:0b:
         64:6e:24:23:f1:46:c7:12:b7:2f:a2:1b:1a:9d:a7:30:da:44:
         63:08:16:21:7b:5a:05:43:4a:1a:b4:23:67:1f:c8:b0:3f:1a:
         62:6d:cd:4a:41:d3:ee:2f:a8:27:6b:c5:dc:72:75:7e:df:cb:
         52:ac:7e:34:d6:d6:ce:74:64:2d:25:4c:4d:fc:aa:5a:38:a4:
         24:d1:ae:d1:2c:9c:8c:d1:58:52:d7:fa:8c:3a:f8:5d:5a:c9:
         11:3a:b3:cc:15:1c:50:72:f3:28:93:7a:07:0f:b1:18:a3:f9:
         10:b5:c1:0b:6a:ec:d4:a0:a5:ba:3b:eb:e8:5f:e3:5d:07:84:
         7d:28:a4:4f:98:78:3e:e4:9c:df:a9:36:2e:3f:ca:9e:fd:85:
         ff:9f:3d:6f:16:64:b1:e6:35:fc:af:94:2b:49:72:3a:d3:66:
         ef:97:9b:42:a5:b4:67:e7:e5:71:60:7e:c6:e2:f8:9c:75:07:
         52:16:48:31:28:12:3f:6c:30:c8:be:cf:23:a4:a5:f5:73:26:
         51:b0:92:7c:71:1d:ca:a3:c4:42:bf:97:1f:ba:64:08:35:3f:
         c8:7e:c1:21:92:8d:2a:3d:ee:61:81:31:27:3e:96:aa:2f:b2:
         17:25:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----