Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          n6Du7678stKDqBu6j+Eam3nRRY8Jm+h2Kbhy3Cpdtm8=
Subject key identifier:   A8:BD:F7:8A:39:EF:54:71:A2:DA:6B:ED:E6:9E:5F:51:B1:B7:03:B7
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       28F5807555ABB02082721382A11C9F42EFD12AF6
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:33:11 +0000
ROA not before:           Mon 05 Jun 2023 18:28:11 +0000
ROA not after:            Mon 03 Jun 2024 18:33:11 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:80:75:55:ab:b0:20:82:72:13:82:a1:1c:9f:42:ef:d1:2a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:28:11 2023 GMT
            Not After : Jun  3 18:33:11 2024 GMT
        Subject: CN=A8BDF78A39EF5471A2DA6BEDE69E5F51B1B703B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:04:42:d1:0d:35:66:68:41:29:c9:40:d1:
                    b0:2b:08:70:93:49:b5:81:e0:41:a6:8d:00:99:4a:
                    a1:fb:94:a6:a0:e0:58:2e:6b:5f:ed:34:5a:de:ce:
                    15:64:41:21:97:ea:01:f6:51:3c:dd:2d:aa:73:ad:
                    ba:9a:f9:83:8a:78:c5:5c:4a:9e:bb:61:0b:f5:c6:
                    88:3e:5d:70:4a:6c:3e:ad:df:58:dc:c3:c5:bf:2d:
                    dc:2e:67:3b:e0:b1:4d:a8:a2:3c:0d:07:01:67:28:
                    2a:b6:00:98:81:28:0e:65:a4:ba:d4:88:0b:64:a6:
                    cb:15:a8:ee:86:1d:7e:4f:15:4b:a7:35:f4:41:39:
                    ca:00:40:35:2d:1a:42:f1:5b:2e:ec:f5:4c:6d:08:
                    b9:5e:28:b8:00:db:17:9b:0f:e6:e3:26:00:6e:ac:
                    7e:5b:a0:01:6f:92:2f:fa:c4:21:a7:ba:0f:61:39:
                    2f:b1:ae:72:32:bd:b8:2c:e6:15:51:4c:d8:90:6b:
                    7e:6e:02:5f:21:76:c2:f5:06:29:6e:f5:ea:fc:b0:
                    03:c0:7f:bd:ea:91:c5:39:d3:b2:10:2f:52:f0:74:
                    04:7f:c7:09:81:6a:a7:07:b7:81:b3:b0:be:43:c4:
                    a7:77:4a:4b:8e:d9:5c:59:f8:db:bc:5e:6e:46:0f:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:F7:8A:39:EF:54:71:A2:DA:6B:ED:E6:9E:5F:51:B1:B7:03:B7
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:2e:f4:7a:d2:b8:b2:1d:33:cc:6e:15:a4:ca:19:09:45:
         1e:be:cb:33:46:60:61:f1:0c:b1:1e:0d:c6:dc:aa:49:4d:48:
         5c:36:47:1e:ed:ed:3e:94:b4:7f:d6:40:45:06:72:76:53:3d:
         7d:db:ff:2c:54:93:40:0d:bc:90:a4:40:c2:b3:d8:95:a9:a3:
         3e:93:1e:3f:0b:5c:11:be:d5:aa:b3:86:3d:2d:3b:8e:eb:4d:
         e7:7d:aa:43:d2:36:c4:ce:93:d5:a3:c9:e5:00:06:0a:94:e6:
         bc:ae:ee:a5:15:dc:c2:64:33:3c:ef:8c:a2:b8:0a:21:7c:38:
         71:69:20:fb:61:19:c4:c6:95:09:03:a9:97:a4:b6:9e:66:4d:
         c2:7d:f4:4d:8a:46:6a:ec:0c:83:1e:a8:7a:cf:7a:8c:b2:ec:
         bc:66:47:ee:db:23:44:95:c8:08:05:77:50:da:e6:55:e0:c4:
         2f:b8:ba:4c:01:28:df:a4:46:46:7f:7f:ba:32:df:3e:49:f0:
         23:df:75:c6:39:8d:a4:17:25:a2:24:2b:8b:ee:a8:f6:9d:08:
         10:0b:83:91:96:38:71:b2:67:40:22:e2:96:e6:ac:bc:c8:ff:
         c8:a8:82:3f:18:eb:b4:c3:b6:e8:c0:b2:23:16:e1:63:b6:77:
         4f:75:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----