Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          ep8g/CnOjIlmBDId5awvFrJ1YIljt4N4OmNqJn0f3to=
Subject key identifier:   6E:9F:8F:DB:2E:D5:21:43:D3:C7:70:3A:6A:2B:17:4C:E1:4D:F7:F2
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       229F99499B9FC149969163242AA251B231135DA5
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:58 +0000
ROA not before:           Fri 02 Aug 2024 20:04:58 +0000
ROA not after:            Fri 01 Aug 2025 20:09:58 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9f:99:49:9b:9f:c1:49:96:91:63:24:2a:a2:51:b2:31:13:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:58 2024 GMT
            Not After : Aug  1 20:09:58 2025 GMT
        Subject: CN=6E9F8FDB2ED52143D3C7703A6A2B174CE14DF7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:bd:0d:fb:4f:56:52:2d:3d:77:0c:80:8e:
                    97:7e:97:0b:b9:f0:0b:3f:70:36:92:c4:00:c3:38:
                    71:f7:ff:99:37:df:17:c8:34:fa:7b:4d:aa:3a:fc:
                    8e:fd:b1:44:b7:b9:b9:48:8d:a8:68:fa:0b:f5:71:
                    d2:31:1b:0b:ac:60:7f:5d:1c:f2:70:66:6b:1c:39:
                    e0:b2:41:98:2d:d7:bd:7e:93:74:79:3f:52:11:5d:
                    54:a2:06:33:9b:28:6a:68:7c:19:c7:0d:e8:63:97:
                    ac:95:de:19:bf:6e:f6:ae:33:7e:92:15:2e:2c:23:
                    e8:68:2b:10:18:b4:51:81:2f:08:31:87:34:fd:fd:
                    c8:bb:88:11:60:50:4e:27:a8:43:fe:cd:09:75:92:
                    3b:58:65:d7:9c:25:6c:e0:30:e1:35:ce:8f:0e:40:
                    d9:d1:fc:10:47:e5:75:55:80:88:73:e7:68:ce:49:
                    78:cc:da:e2:c0:1f:81:5a:fc:67:79:d4:15:0d:81:
                    2d:d4:39:c3:89:cb:54:78:73:32:d0:6a:75:19:63:
                    6a:91:b8:d4:01:4e:ea:e4:4a:a8:4b:68:7d:43:15:
                    5d:c1:d8:7b:7f:7a:79:16:3a:27:0c:61:85:4a:0c:
                    4a:7b:93:1a:23:d3:7d:14:5f:06:e4:a9:3d:36:a7:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:8F:DB:2E:D5:21:43:D3:C7:70:3A:6A:2B:17:4C:E1:4D:F7:F2
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:87:4f:41:55:3b:0c:e1:5c:37:a1:d3:c2:1d:b0:46:2d:
         ff:98:1d:78:f6:1e:b0:c2:3c:c8:e8:b8:c7:ae:44:73:8a:ba:
         47:0f:42:c0:b8:9e:5f:35:95:a4:3d:a6:90:6f:7d:68:5e:42:
         02:fe:10:94:dc:6a:a3:52:eb:ea:0f:88:42:7f:b1:68:21:2d:
         0f:74:bd:fa:56:36:e2:a9:bb:bb:39:b5:9a:55:41:6b:ec:20:
         c5:4a:05:e5:e3:ac:22:db:77:02:2d:a0:b3:6e:a0:21:26:2e:
         59:78:1c:76:ce:79:d9:8a:a4:96:8b:32:da:37:c3:05:89:aa:
         76:d2:45:2f:65:d2:3b:bc:95:92:ef:77:34:8f:1f:45:f0:85:
         88:97:62:4d:98:fa:08:e7:c4:c5:76:f7:69:01:2d:74:ec:fe:
         d2:20:3a:11:6a:96:51:38:b6:c7:c5:15:f1:12:b8:f1:0e:47:
         51:84:fb:9f:18:ce:1d:32:04:7d:86:2e:a0:08:a8:e0:59:8f:
         ec:36:79:8e:3d:65:2d:e5:c8:c8:f1:0d:a6:31:c8:9f:d8:15:
         74:b7:2b:a4:3f:b0:3c:7f:59:94:40:d8:d7:e2:a1:54:22:a0:
         26:6d:8d:71:90:7d:25:96:1d:c6:fa:d7:26:b6:f9:06:a9:d7:
         3e:81:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----