Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          WaNcMCPOoZ8NOQ/15upBsHC+Sqg6hN9t+/Q1yDesVB0=
Subject key identifier:   E9:B5:1B:42:6B:BD:4F:E3:81:BB:A6:B7:88:A8:5A:B7:C2:D1:D9:E6
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       6D18DB3BC06879BB8065D34A00B7333CC88A7D36
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:17 +0000
ROA not before:           Mon 05 Jun 2023 18:28:17 +0000
ROA not after:            Mon 03 Jun 2024 18:33:17 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:18:db:3b:c0:68:79:bb:80:65:d3:4a:00:b7:33:3c:c8:8a:7d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:17 2023 GMT
            Not After : Jun  3 18:33:17 2024 GMT
        Subject: CN=E9B51B426BBD4FE381BBA6B788A85AB7C2D1D9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:32:f3:1e:c2:79:64:a6:f6:60:da:32:22:ec:
                    8b:bd:38:0e:91:95:4c:6f:a2:e2:00:fe:ef:17:1e:
                    17:97:02:0a:a3:af:ec:b4:26:86:73:2f:50:b3:55:
                    fc:3a:87:7d:a1:c8:81:7f:38:bb:4c:d3:d5:75:bf:
                    09:b1:4e:8b:9b:94:a4:64:70:89:56:42:e9:1a:b7:
                    90:bc:2c:10:1e:56:eb:75:c4:85:21:b9:d0:6c:fa:
                    39:81:fb:24:e1:07:0e:02:da:a0:1e:b4:6a:24:28:
                    63:7d:f7:83:08:9c:af:bf:c9:e4:21:22:26:46:85:
                    3d:c7:e6:9e:75:9b:ef:02:73:35:b2:0c:70:e4:5a:
                    72:fe:eb:6e:a5:65:11:99:1e:a6:44:f8:fa:c5:19:
                    5e:72:c2:72:c7:83:04:a6:67:bf:90:a6:5c:6d:db:
                    bd:b6:d3:cd:8f:85:e9:cd:01:a8:64:7f:9a:13:6d:
                    0d:a1:10:3c:2c:b3:73:47:7f:c0:12:6f:8b:28:7d:
                    52:0b:35:2b:c4:ae:32:b6:ad:a2:fb:65:9a:a5:07:
                    32:5b:bc:98:3e:f3:12:a1:cf:f0:d9:c2:79:43:03:
                    1f:5e:79:1a:36:0c:80:6b:d1:70:c9:f7:98:cd:e4:
                    02:7a:d5:64:7a:04:df:5b:b2:9d:f9:a9:f9:6e:54:
                    88:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B5:1B:42:6B:BD:4F:E3:81:BB:A6:B7:88:A8:5A:B7:C2:D1:D9:E6
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:c6:61:b8:63:a8:8e:ac:da:82:c4:e4:c6:3c:a4:48:55:
         f6:99:33:b7:c1:af:d6:6c:fd:8c:aa:0b:22:15:35:f4:af:b1:
         0c:72:3c:fa:90:5c:a6:e3:d9:b1:be:9f:68:af:4f:c7:d2:47:
         29:cf:13:cc:aa:56:9c:fa:c0:67:83:7a:b3:54:3d:6b:84:f7:
         b9:bb:58:60:3e:d6:30:74:86:b8:dc:ee:bd:18:9e:0e:50:12:
         94:3c:f5:1a:7c:a7:88:19:1f:fc:75:89:6e:f1:51:39:17:35:
         a5:d6:ac:ad:c1:d8:9d:6f:0c:7a:e5:7a:ef:c7:7d:44:60:0c:
         7a:01:b1:96:30:6c:7c:de:95:d1:50:14:7b:d3:b1:69:46:8a:
         55:61:85:f6:2a:14:00:5a:cb:73:f7:c2:14:9b:58:af:60:26:
         1a:97:31:86:54:b5:e5:cd:2b:20:82:2b:9d:19:e7:2c:66:12:
         32:bd:6b:6d:4b:9f:7a:ac:d6:e7:82:f2:1d:67:16:85:70:cd:
         e0:d3:fe:d8:f2:11:dc:31:73:33:cb:68:a8:f6:36:85:cf:8e:
         ad:6a:43:9b:87:74:34:2e:6c:5b:ec:68:50:85:b1:46:83:69:
         db:a4:9d:89:8d:c5:b9:6a:20:e2:42:0e:0d:0a:d0:8f:46:02:
         3c:81:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----