Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          YcGajMVkrYQtGj2cVvYxsycr9gvkFtPp9sHL/dNG96w=
Subject key identifier:   5D:56:51:FF:82:4E:BB:30:10:02:2D:3B:CE:A5:A6:85:D7:71:95:9C
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       73391412634CD1426FF97726E236B1DF2F152E92
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:14 +0000
ROA not before:           Mon 05 Jun 2023 18:28:14 +0000
ROA not after:            Mon 03 Jun 2024 18:33:14 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:39:14:12:63:4c:d1:42:6f:f9:77:26:e2:36:b1:df:2f:15:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:14 2023 GMT
            Not After : Jun  3 18:33:14 2024 GMT
        Subject: CN=5D5651FF824EBB3010022D3BCEA5A685D771959C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:21:07:de:9a:40:5d:e5:2c:b1:bd:9f:d5:
                    38:b8:2d:1e:bb:b8:bf:95:c0:a9:c1:b1:9a:b3:01:
                    4f:10:45:fb:bb:89:e6:de:ba:65:e0:0e:bf:75:44:
                    02:69:04:e8:58:b3:85:ea:93:3c:e6:67:b9:31:f6:
                    6d:21:20:87:54:1e:64:22:7f:59:f6:70:99:52:77:
                    33:82:31:71:b0:7a:dc:c6:44:3d:23:9d:10:14:86:
                    70:2a:58:eb:86:a2:c2:ed:0b:2f:0e:aa:25:a8:28:
                    5e:b5:f2:0f:19:76:75:9c:f8:c8:76:6d:a1:a7:2f:
                    52:22:e6:7a:9c:9d:8e:91:9b:5c:38:a8:67:ad:15:
                    2a:83:f8:42:c4:18:35:8e:8f:c2:21:7a:02:0e:9d:
                    19:5f:89:5a:a7:f0:6f:c7:30:b9:cc:45:fd:d3:a9:
                    25:49:60:c6:6c:ea:87:44:e5:58:cd:5a:9b:76:44:
                    3b:68:82:0b:16:26:f4:e0:aa:ca:dd:8b:d8:1f:83:
                    df:e2:0c:60:22:28:2f:db:d3:3b:ea:05:49:72:70:
                    cd:87:5b:0b:04:a7:95:55:ed:b5:66:bd:4e:b9:5f:
                    b9:2a:27:28:e4:57:19:7c:ce:0a:dd:c2:f0:13:7a:
                    9f:eb:b0:eb:8e:bd:3a:4b:11:d7:a3:7f:52:b8:b7:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:56:51:FF:82:4E:BB:30:10:02:2D:3B:CE:A5:A6:85:D7:71:95:9C
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:82:c7:4e:e2:1e:51:71:3c:45:b1:4d:53:93:79:ce:ee:
         d2:52:b6:9c:34:05:ca:f0:bf:78:29:59:a0:ac:30:d3:e8:95:
         08:8b:51:39:5d:9f:74:3e:20:e7:d1:17:cc:b0:2d:18:66:ce:
         b5:e9:9f:9c:a6:a2:19:d3:e3:f0:3b:ea:28:5f:5c:74:cd:ef:
         9f:cc:08:11:ef:6d:92:1d:b0:77:66:a4:d8:33:91:c4:1d:7b:
         6c:4e:c8:39:19:10:48:4d:52:b8:62:6f:9e:01:d9:cf:bd:74:
         06:bf:23:30:c9:aa:9e:eb:cf:af:b9:96:f3:0f:ad:5f:09:b8:
         a4:5e:d2:a7:a4:98:6d:8d:d5:29:0d:3a:75:34:e1:78:a1:94:
         29:59:47:20:dd:a8:93:47:6f:80:38:79:38:f0:a1:b0:31:b5:
         aa:32:6f:4f:a5:7e:4d:8e:92:70:5e:1c:a6:c1:69:d6:39:80:
         08:d7:da:87:7e:42:05:5a:df:7b:43:12:23:e2:ee:0c:8a:97:
         f4:52:60:ac:19:b4:3a:22:30:b3:d9:6f:c0:54:f3:c1:4e:3e:
         64:5b:21:5c:95:42:f2:e7:ac:2f:0d:bc:b7:cd:6b:45:b6:3a:
         9e:8d:46:c0:19:34:4e:96:b5:4b:8f:9d:21:15:0e:1d:87:9d:
         2c:6f:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----