Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          TRLJ5J2gPI8vDAhucTIzH7KC7EiV5Uqm45/zqSf81S0=
Subject key identifier:   80:8C:43:33:EE:60:1D:B1:2A:B4:BA:AA:58:51:3E:27:B1:E7:86:90
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       79E204B757220249D8125A009F74A69D27231988
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:56 +0000
ROA not before:           Fri 02 Aug 2024 20:04:56 +0000
ROA not after:            Fri 01 Aug 2025 20:09:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:04:b7:57:22:02:49:d8:12:5a:00:9f:74:a6:9d:27:23:19:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:56 2024 GMT
            Not After : Aug  1 20:09:56 2025 GMT
        Subject: CN=808C4333EE601DB12AB4BAAA58513E27B1E78690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:7e:65:27:56:1d:07:dc:63:de:2d:9d:8e:
                    d6:fa:66:05:3b:ca:35:84:3d:ad:8a:7d:ae:1d:77:
                    b5:5f:a4:58:a3:0f:e6:7a:32:d2:27:c7:fd:ea:a1:
                    dd:14:ba:25:90:32:04:51:6e:c9:50:63:b2:86:64:
                    e0:83:5e:cb:b2:6f:47:61:fd:be:f4:79:da:50:37:
                    d2:b1:0a:b3:16:af:8a:00:99:71:23:57:9c:17:8e:
                    ed:76:80:fd:99:3d:de:b2:26:dc:2a:a2:5a:3a:62:
                    26:1e:7c:d4:ca:c5:cb:5a:83:3b:56:c8:2c:2a:9e:
                    bd:96:f0:43:58:0f:34:46:e7:1d:be:85:de:26:4a:
                    01:0c:10:91:48:34:c0:44:3e:48:e6:bd:cf:f0:77:
                    cf:1d:6f:a5:92:c9:5d:f8:7d:a9:f8:d7:b8:a7:54:
                    f8:56:8b:a2:89:d5:3f:0e:94:74:05:70:85:42:24:
                    f3:53:21:c5:a6:be:8b:08:27:83:b5:15:cc:22:1f:
                    7d:bf:8a:ec:17:22:18:3b:84:36:86:32:f7:64:12:
                    c6:fd:2d:6e:9b:e6:71:03:fb:d2:21:e1:05:b3:b6:
                    88:65:19:f2:3c:41:34:36:12:fb:46:5f:9c:57:f8:
                    ce:09:7d:77:20:17:41:32:15:fc:e5:9c:c4:7b:45:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:43:33:EE:60:1D:B1:2A:B4:BA:AA:58:51:3E:27:B1:E7:86:90
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:e1:d2:85:64:13:c0:e4:1c:dc:76:00:d5:3c:43:f8:19:2e:
         35:3a:c5:95:ba:6a:67:bb:fc:32:3b:26:42:20:6f:87:cf:d8:
         1d:1c:ce:9c:a5:82:01:9b:c5:c0:a2:fc:d4:48:01:b7:30:7b:
         24:3d:1c:d1:f3:4f:12:d3:e1:52:ce:a8:7a:42:34:43:87:51:
         08:90:57:2e:fb:74:c9:ae:2f:70:8d:b0:1a:d2:f6:33:b6:30:
         d8:38:aa:e5:eb:5b:92:76:7b:f8:82:d5:4c:55:3a:9f:b6:6f:
         c8:64:4c:7d:bc:b8:e8:3a:3b:51:33:2c:3f:55:a8:b0:bf:5a:
         7e:fd:39:70:4b:87:5a:e5:f7:c3:90:e9:39:f4:e1:5a:09:49:
         6e:7c:68:24:d0:dd:ee:e8:76:99:13:15:59:55:08:c6:be:61:
         0e:0b:5b:04:b9:ba:a7:92:e0:b1:2f:5c:9e:c2:cd:29:36:92:
         78:70:d4:32:be:b0:83:c5:ce:60:0e:38:ce:6e:30:5b:76:bc:
         17:36:97:64:db:f9:bc:b0:84:9d:12:50:8d:5c:ce:31:49:01:
         fc:fb:de:35:bb:84:e8:5b:ef:1e:d1:77:b2:de:8b:74:ad:09:
         bc:99:5b:cd:12:94:04:d0:86:58:f4:05:df:9d:28:f3:f1:c1:
         26:4d:f5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----