Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Z5IqjyXScJwYHpC44mT4Q+4cGSzvlFaG3XAynYuuhUM=
Subject key identifier:   A4:22:48:56:8E:73:6C:62:EC:FE:27:58:A3:21:45:DA:BE:7B:7C:86
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       399A9626C0E74DCFF495DE04125320AF7FDD6B21
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:57 +0000
ROA not before:           Fri 02 Aug 2024 20:04:57 +0000
ROA not after:            Fri 01 Aug 2025 20:09:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9a:96:26:c0:e7:4d:cf:f4:95:de:04:12:53:20:af:7f:dd:6b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:57 2024 GMT
            Not After : Aug  1 20:09:57 2025 GMT
        Subject: CN=A42248568E736C62ECFE2758A32145DABE7B7C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:13:f0:ab:d1:ff:9a:e5:30:c5:c1:f9:d8:
                    7d:2f:13:03:6e:e2:19:63:78:6d:c7:db:14:e8:3d:
                    82:14:8f:26:8e:45:86:ad:9d:79:6b:c3:a5:00:63:
                    68:86:ae:a9:d9:8f:43:5f:2a:df:0d:9e:9b:12:f4:
                    65:d8:49:83:09:e5:ad:a6:3a:28:ef:0a:b2:e3:2e:
                    53:bf:24:2c:65:02:00:91:3e:22:35:ac:ad:96:84:
                    ce:dd:e7:33:92:6c:aa:5e:66:ec:29:74:31:67:48:
                    4c:5c:21:a9:06:b6:a1:20:26:f2:f9:ae:76:69:b8:
                    e7:ce:8c:eb:47:2a:3c:04:b8:27:28:e4:f2:37:22:
                    d2:cd:fa:53:a7:0e:88:f2:6f:4f:d1:f2:96:4a:17:
                    b2:f4:77:63:62:35:d6:46:03:4d:6e:86:7d:4b:fb:
                    d5:53:2b:f2:d7:b2:bc:4b:ea:07:77:95:95:d5:02:
                    6f:4c:56:7a:42:de:9d:d8:ab:64:4b:af:ae:3f:cb:
                    3e:d1:4a:04:31:8a:1c:24:c3:83:65:d3:43:4e:bb:
                    c4:24:8d:ca:69:80:bb:10:d1:7e:16:6b:a7:2f:3c:
                    02:14:aa:5e:21:ec:55:94:88:78:6a:8c:34:a2:ea:
                    76:6f:03:a5:e0:26:46:3d:7c:a7:55:16:63:95:81:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:48:56:8E:73:6C:62:EC:FE:27:58:A3:21:45:DA:BE:7B:7C:86
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:9e:ff:0c:f4:03:74:0c:c7:bc:02:62:c6:35:dc:00:e9:
         91:07:e2:1c:15:c3:33:b5:25:d6:0f:d3:04:61:05:ca:94:02:
         60:4a:50:a4:5a:28:44:10:82:cf:f7:7b:3c:94:c6:4d:15:4b:
         bc:8e:5a:24:1d:d3:cb:29:f1:da:1f:63:4e:e1:4e:1d:f7:9c:
         71:e7:1b:e9:6b:d7:1a:e8:08:d0:40:98:4c:cd:02:1d:d4:86:
         81:88:44:91:33:8f:ac:24:9c:d3:aa:67:c9:5d:cf:e8:96:ae:
         3e:47:18:0f:f0:e7:5b:62:48:86:06:38:e5:d3:28:4b:79:d9:
         fd:c4:6c:61:ba:ba:09:bf:9b:25:21:26:ef:5d:40:35:7d:7e:
         8c:57:c3:af:bb:5e:24:40:1a:df:29:c2:33:04:25:05:28:4c:
         84:94:16:fa:80:a7:39:92:34:af:39:e7:bc:ac:ea:bc:d5:81:
         e9:d3:7f:07:22:cd:5a:f8:f7:fe:02:e6:a1:fe:c1:a2:d1:31:
         b7:fa:df:39:96:5d:8a:68:7c:14:62:1b:89:0f:db:7c:a8:20:
         53:b3:fd:d7:12:0a:9a:fd:fc:8c:13:f2:0b:73:2e:30:f4:c9:
         8e:6b:c9:3c:34:72:2e:04:bb:d7:8c:c0:45:8f:5a:27:90:7a:
         af:22:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----