Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          GZmhj97OjAP5kGYaa6ybxqGNSbnU2JIJaHzIMA8ahXY=
Subject key identifier:   29:51:68:2D:88:DF:05:B3:93:7B:B9:30:60:51:DD:23:FC:F9:07:76
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       782F8CD22BBC2E1FEE0FEB197EC91339125C3E8E
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:8c:d2:2b:bc:2e:1f:ee:0f:eb:19:7e:c9:13:39:12:5c:3e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=2951682D88DF05B3937BB9306051DD23FCF90776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:03:d9:ec:b3:22:1e:ab:24:81:f3:4c:96:
                    c1:dc:20:4d:e9:85:36:86:07:49:8c:77:49:f2:52:
                    e8:c5:3b:27:e5:21:3e:2e:ca:3d:a5:0f:00:f5:5f:
                    eb:0f:a5:6d:c9:8d:ed:16:c6:f1:3c:a7:49:fb:6e:
                    ec:5a:f9:30:82:fe:81:c6:2c:d8:59:f3:71:cb:b9:
                    ec:70:39:b6:14:0c:f3:be:d5:66:cb:08:6e:eb:ce:
                    2f:25:ce:14:f5:38:34:27:22:ef:48:ad:c7:df:ee:
                    40:5f:1c:0a:d0:fb:9e:27:c0:55:c9:62:7c:af:d3:
                    e8:63:fe:2f:60:85:37:58:72:08:19:33:a4:2d:8c:
                    d5:42:bb:f8:80:a7:0e:b0:bc:0c:4d:7c:49:67:97:
                    e4:22:2d:09:d8:83:5e:08:b6:eb:39:50:61:22:a9:
                    ef:e3:33:17:b6:fc:4b:58:dd:8a:ed:fe:a7:c6:82:
                    92:5f:8e:2a:10:3e:23:7a:32:53:f1:22:7f:45:8b:
                    46:1f:33:d9:9b:d7:5e:07:89:d6:79:ad:7f:61:52:
                    56:24:31:0b:67:b0:48:cd:c7:b7:6f:41:47:8e:c8:
                    cb:dd:f1:d3:ed:ec:a8:d9:53:64:eb:e6:00:b0:64:
                    6c:fb:a7:e7:8c:54:e0:3d:b4:d9:72:6a:39:5b:97:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:51:68:2D:88:DF:05:B3:93:7B:B9:30:60:51:DD:23:FC:F9:07:76
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:49:8a:58:29:e5:bb:34:33:8f:24:d2:68:12:68:2f:1a:90:
         b8:df:21:bd:98:32:fd:15:c8:f8:a5:23:2e:ee:19:e3:1e:aa:
         35:88:99:df:54:74:d3:fb:c8:6a:dc:fd:d7:34:83:ef:31:a7:
         7c:ad:4d:3f:c9:82:33:de:d5:f9:fe:c0:73:2c:42:41:75:26:
         d3:04:29:34:4f:ea:a2:fd:ee:9f:d2:ac:19:0b:e8:c4:d9:e5:
         82:66:cd:63:48:f1:d7:77:51:68:87:40:6c:76:14:55:ad:8d:
         65:a4:63:44:e3:67:9f:ab:8d:0a:86:73:1b:fe:3c:23:21:64:
         34:d6:69:8a:be:e7:50:90:d6:bb:9d:fe:1f:c1:94:1a:d5:70:
         7b:1b:0c:75:5f:70:ae:b1:bd:7a:14:24:0c:97:6b:b1:80:e4:
         39:d2:11:65:b3:87:29:93:52:bb:68:4a:be:d3:08:33:5b:d0:
         ea:29:45:91:35:1c:65:ae:b5:22:bf:6e:a0:51:37:58:15:32:
         c5:b0:bb:6f:fd:90:9b:a8:b6:1c:94:35:3c:97:8a:76:4a:75:
         8d:28:68:3b:b4:4b:c2:aa:0c:a9:7a:20:d7:02:ec:8d:e9:3b:
         36:b6:7d:d7:14:c0:bc:38:ff:13:fd:68:2b:3b:e4:54:a9:84:
         5a:74:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----