Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          OnDPJY5OYUnK7LjjlbGK47bQ+uSZwUfibmQ1R9441J0=
Subject key identifier:   50:46:DA:FC:5D:56:73:EA:2B:F1:A1:60:12:BE:F9:E9:39:69:07:3E
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       38411798517B395B00DAAF7C06C541327AE27372
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:41:17:98:51:7b:39:5b:00:da:af:7c:06:c5:41:32:7a:e2:73:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=5046DAFC5D5673EA2BF1A16012BEF9E93969073E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cf:3b:81:81:db:ee:fb:53:01:c5:66:cc:36:
                    92:f1:97:4a:5b:f8:f8:f4:e9:12:e0:8f:cb:6f:52:
                    03:56:89:f4:2c:17:23:7e:a5:4b:5a:7c:58:2a:6a:
                    65:3b:8a:95:17:3e:b0:61:81:51:69:12:ef:d5:39:
                    64:bb:6c:15:5e:fc:4c:1b:97:23:84:90:41:07:df:
                    a3:f4:4e:27:56:84:87:c8:93:f4:7f:a8:0f:69:45:
                    c8:b8:ef:68:4c:ee:08:cc:13:f9:66:ee:30:b1:b5:
                    f5:1b:3a:82:9c:1f:33:1b:24:dc:f6:2c:5a:35:a7:
                    02:64:35:9a:df:46:d8:9f:5a:e1:b1:ae:8d:a7:97:
                    69:b8:27:e6:63:0e:f7:c3:be:33:d3:32:1d:25:75:
                    87:86:21:86:c9:e9:39:03:27:29:2c:e2:9e:6a:3c:
                    2e:69:8f:86:c5:83:72:cc:eb:8f:48:53:23:37:d6:
                    66:e0:53:2b:bb:9b:3f:b1:06:b2:8a:d2:35:8a:8a:
                    ac:f4:6e:79:2d:8a:56:9f:0b:31:72:a4:be:f0:ed:
                    f0:0f:70:af:b3:0d:50:3b:60:76:05:c7:2e:b2:82:
                    da:a0:46:2b:50:80:ec:6a:96:51:42:95:ec:e7:22:
                    ea:a8:9f:7c:a9:0a:15:12:78:97:87:f7:f1:0d:2d:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:46:DA:FC:5D:56:73:EA:2B:F1:A1:60:12:BE:F9:E9:39:69:07:3E
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:7e:1c:da:50:5b:55:b2:9d:81:94:2c:97:09:5e:69:ff:
         89:e7:c6:8f:35:fd:b1:ee:76:bc:6d:5a:e0:a2:35:d9:35:e1:
         4e:b1:65:3a:43:6f:43:ca:1d:2b:8b:e3:cf:c8:b7:e6:0d:14:
         cc:d5:1b:bf:20:a2:66:91:97:29:46:fe:dd:46:68:0f:53:bd:
         78:e8:ef:9e:25:b0:d6:f7:da:54:e4:1c:c5:73:c8:6a:03:af:
         0f:49:d7:fc:7d:5c:b3:21:0b:da:3e:94:f3:6d:1d:7a:bd:20:
         2c:a7:eb:eb:32:3c:21:c5:cc:32:a5:a0:bf:1a:14:ad:11:ae:
         94:45:a2:4b:47:11:12:eb:dc:5f:c6:7f:d2:54:0e:13:89:cc:
         8c:21:27:27:c7:43:33:a2:45:0f:e2:ea:48:88:d8:98:33:e0:
         05:4f:5c:f5:f2:f9:f7:8f:ff:00:63:8d:2c:6b:ce:94:5a:49:
         c4:35:a5:13:cc:04:bb:80:29:b9:26:6a:7d:85:6d:e5:4c:d2:
         a4:57:78:09:45:1e:08:b6:d9:88:38:2c:17:db:cd:d8:63:bf:
         e5:b2:c6:33:3a:de:a8:67:9c:89:91:b0:f9:0d:83:ab:14:66:
         f5:cb:ee:61:40:78:c8:e3:6c:c3:ad:9e:7d:46:99:bf:62:af:
         f2:8b:13:2d
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUOEEXmFF7OVsA2q98BsVBMnric3IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjM0OGNmMGMzZDI5NTI4MGJiZTVjMjZi
NGU3YjZkZTI3MTU5MTQxY2IwHhcNMjQwODAyMjAwNDU3WhcNMjUwODAxMjAwOTU3
WjAzMTEwLwYDVQQDEyg1MDQ2REFGQzVENTY3M0VBMkJGMUExNjAxMkJFRjlFOTM5
NjkwNzNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c87gYHb7vtT
AcVmzDaS8ZdKW/j49OkS4I/Lb1IDVon0LBcjfqVLWnxYKmplO4qVFz6wYYFRaRLv
1Tlku2wVXvxMG5cjhJBBB9+j9E4nVoSHyJP0f6gPaUXIuO9oTO4IzBP5Zu4wsbX1
GzqCnB8zGyTc9ixaNacCZDWa30bYn1rhsa6Np5dpuCfmYw73w74z0zIdJXWHhiGG
yek5AycpLOKeajwuaY+GxYNyzOuPSFMjN9Zm4FMru5s/sQayitI1ioqs9G55LYpW
nwsxcqS+8O3wD3Cvsw1QO2B2BccusoLaoEYrUIDsapZRQpXs5yLqqJ98qQoVEniX
h/fxDS3vTQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFFBG2vxdVnPqK/GhYBK++ek5
aQc+MB8GA1UdIwQYMBaAFKXFvzsjS/OEZYWK7W44kQ4cDqcQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTBjNjQ3YWMwMTkxMTRiM2JhZDc1NmYxLzIv
QTVDNUJGM0IyMzRCRjM4NDY1ODU4QUVENkUzODkxMEUxQzBFQTcxMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzEzMDhmYjc3LTc0MDMtNGQyYy1hNWEzLTgwMTA2NDNiNGNjOC9mY2Iy
MGY1OTY2MzQ4Y2YwYzNkMjk1MjgwYmJlNWMyNmI0ZTdiNmRlMjcxNTkxNDFjYi5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkwYzY0N2FjMDE5MTE0
YjNiYWQ3NTZmMS8yLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzczMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwcAMA0G
CSqGSIb3DQEBCwUAA4IBAQB1p34c2lBbVbKdgZQslwleaf+J58aPNf2x7na8bVrg
ojXZNeFOsWU6Q29Dyh0ri+PPyLfmDRTM1Ru/IKJmkZcpRv7dRmgPU7146O+eJbDW
99pU5BzFc8hqA68PSdf8fVyzIQvaPpTzbR16vSAsp+vrMjwhxcwypaC/GhStEa6U
RaJLRxES69xfxn/SVA4TicyMIScnx0MzokUP4upIiNiYM+AFT1z18vn3j/8AY40s
a86UWknENaUTzAS7gCm5Jmp9hW3lTNKkV3gJRR4IttmIOCwX283YY7/lssYzOt6o
Z5yJkbD5DYOrFGb1y+5hQHjI42zDrZ59Rpm/Yq/yixMt
-----END CERTIFICATE-----