Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          hZ+K5RADDB34HfYXPT25TSiFT6FcY+L526GMoK42biI=
Subject key identifier:   B6:08:AD:54:13:BD:EA:26:79:FC:86:A4:3F:E6:AF:74:27:9D:C0:2A
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       3FDE4AE9BC3CB0810C5136F5FD1455433A096D21
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:4a:e9:bc:3c:b0:81:0c:51:36:f5:fd:14:55:43:3a:09:6d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=B608AD5413BDEA2679FC86A43FE6AF74279DC02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:f6:ec:d5:49:72:7c:66:56:2c:a7:85:f4:
                    a6:c4:64:89:1b:89:df:09:6f:62:60:ed:4e:f8:3b:
                    29:2e:f6:c4:3e:22:84:cc:62:1a:e4:51:0e:0f:3a:
                    aa:e1:20:19:be:32:7d:5c:58:c3:ad:8b:f7:74:c5:
                    a2:d3:e1:71:ec:f8:2b:b3:4a:4b:4b:61:ec:f2:d7:
                    0e:55:68:16:9b:a2:89:38:64:67:2d:60:29:65:43:
                    0f:65:06:b5:4e:1c:51:66:ca:fb:43:09:84:88:8f:
                    4a:ad:50:6b:bb:5b:aa:e4:2a:d4:eb:6f:e5:03:14:
                    39:cd:5f:90:10:98:71:e3:48:01:6c:c1:86:01:68:
                    14:35:8b:26:79:c4:9a:aa:0e:45:86:94:51:63:b1:
                    ca:28:49:8e:df:f9:50:13:1d:e2:23:6d:6c:da:96:
                    a4:d8:22:e9:1e:93:26:f5:6c:a8:b9:d6:ee:0f:82:
                    e5:d5:04:9c:c7:38:0d:87:c3:35:46:fd:b6:80:fc:
                    03:38:94:07:d8:0a:30:53:6e:21:6c:68:87:68:e7:
                    f2:90:e2:d8:b4:92:e8:d7:e3:d4:fd:b4:ea:b5:a9:
                    da:95:a2:92:59:0b:23:ed:22:f6:88:cc:c1:85:27:
                    b7:41:7b:b1:9e:dc:ef:7c:ce:72:65:e0:6b:76:5c:
                    2a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:08:AD:54:13:BD:EA:26:79:FC:86:A4:3F:E6:AF:74:27:9D:C0:2A
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:90:e8:45:66:20:32:f7:da:9d:54:5c:d6:af:0f:6d:bf:f6:
         e1:d0:bb:51:a3:7c:59:d7:b0:2a:90:97:c9:4c:f7:3b:3d:fc:
         0e:17:60:78:35:e6:b7:78:08:72:05:61:e9:fe:f7:1f:a9:28:
         04:ed:3d:7b:11:65:4a:01:52:d7:0c:be:ee:7b:0a:37:aa:b8:
         4f:05:5c:f1:a8:a4:bc:6d:af:e3:bf:66:85:44:13:03:56:78:
         d8:a4:ee:31:77:b6:e6:52:61:46:11:b7:63:ce:d7:1e:2b:da:
         1b:60:51:5e:bc:95:86:dd:79:31:1a:95:52:7f:67:42:50:b9:
         e8:43:2b:f6:d0:20:ac:ef:47:95:ef:77:4f:ab:04:c5:07:4d:
         11:1a:fd:ca:63:06:73:6b:b3:50:c3:b0:77:f4:ec:4d:03:ff:
         36:1a:8f:a2:c7:28:80:07:f3:16:78:f5:87:b8:07:67:41:ac:
         2a:b9:f5:df:4c:9e:43:ea:c7:02:fe:f2:7e:f7:98:df:f9:e3:
         bd:c0:94:84:c5:a2:3a:0a:bc:be:c5:2b:bf:64:5c:97:02:ae:
         f9:9e:37:ee:12:7d:f3:9c:1c:5c:3f:2f:50:95:82:bc:55:55:
         d8:0f:a3:16:70:7c:c2:21:ee:84:10:9b:88:09:2e:d8:c0:fd:
         ae:0f:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----