Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          bqk9lj6CYh7DnvcXu07HaBwFE+34i0j+meWX3ikFRT4=
Subject key identifier:   FA:B1:38:82:A4:12:B5:64:0B:DB:84:39:0C:4A:53:9E:25:8D:70:03
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       3A7652F7C34D53D22F16EF5876B4D8EAAE5101B4
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:56 +0000
ROA not before:           Fri 02 Aug 2024 20:04:56 +0000
ROA not after:            Fri 01 Aug 2025 20:09:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:76:52:f7:c3:4d:53:d2:2f:16:ef:58:76:b4:d8:ea:ae:51:01:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:56 2024 GMT
            Not After : Aug  1 20:09:56 2025 GMT
        Subject: CN=FAB13882A412B5640BDB84390C4A539E258D7003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:f4:bf:d7:5a:e5:a5:de:88:2d:ed:32:a9:
                    22:e8:27:83:bc:de:07:ad:bf:48:a3:1b:a5:9f:98:
                    b7:ad:c7:06:19:3e:e0:21:e5:1e:69:43:fb:58:85:
                    99:97:35:ee:a8:b9:ca:a4:6b:3e:00:2c:2e:e9:93:
                    e7:83:e5:7b:91:ce:e0:01:98:5b:36:61:a7:46:0e:
                    63:e0:06:29:f1:31:74:6e:39:44:0d:e7:a4:19:b1:
                    89:e2:ad:7f:88:f1:03:96:73:d4:4a:d5:59:5b:24:
                    ea:01:0e:db:eb:b5:90:f4:8f:54:99:3e:1f:96:32:
                    4e:15:6e:f9:3b:57:1c:25:54:9f:fe:bb:49:8d:0a:
                    60:87:9b:92:ea:9c:37:fe:e4:41:b3:ce:e5:46:5a:
                    15:c2:a7:f3:b3:01:8a:41:4d:31:0f:62:00:97:a2:
                    dc:69:14:21:aa:af:fd:71:0d:af:ee:06:47:c1:fa:
                    55:07:c1:25:1b:e1:ae:e8:39:9f:a9:07:72:ab:c7:
                    6a:d6:2a:8f:cc:76:57:a3:ce:57:9d:1d:3c:b7:48:
                    0a:50:aa:e1:f2:00:3a:45:53:89:88:6f:86:e7:96:
                    ee:ee:55:c3:5b:eb:3c:53:56:31:ed:5c:bb:59:bd:
                    f8:e5:28:69:e9:73:6d:ad:73:92:3a:61:09:23:f0:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:38:82:A4:12:B5:64:0B:DB:84:39:0C:4A:53:9E:25:8D:70:03
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:f7:36:56:fb:a8:9b:5b:bd:b0:07:7c:2b:f7:55:92:93:
         f9:fe:e5:c5:53:f0:1b:54:a4:f8:f0:4e:0f:bb:26:53:ae:9c:
         bb:e0:d0:79:bf:80:a3:c6:79:9e:27:52:e5:81:bc:1f:07:63:
         97:f2:8d:8c:ac:10:24:a8:68:80:14:88:c1:53:bc:af:b9:26:
         5a:53:a9:a6:a6:15:a8:2b:13:4f:2d:e7:6a:ec:bc:e7:c1:61:
         90:4e:2e:85:bb:99:74:4f:21:be:1c:a4:43:1a:7a:45:d8:03:
         95:3b:fd:92:bc:f4:39:ec:21:aa:7e:f0:09:00:5b:a8:dd:a5:
         ff:c6:58:67:0d:93:00:94:0e:6c:3d:c9:44:fe:b6:a4:b3:26:
         21:ee:b3:0e:71:66:f5:75:a2:10:c1:aa:76:c4:ad:24:e2:71:
         95:a0:c7:25:bb:d8:26:42:bf:bc:46:40:e9:7f:4b:cd:ff:1a:
         79:b7:87:04:8e:36:34:78:8f:0a:55:bd:a4:ea:5c:ab:9b:49:
         db:02:f2:93:f8:0d:27:df:1c:e2:60:a9:c7:e5:1a:fb:91:7d:
         58:6a:88:78:08:56:b1:e6:f2:de:22:33:1d:4b:99:2e:5b:76:
         a4:12:e4:32:23:e5:04:cc:85:bb:31:1e:7a:3a:11:da:70:af:
         a5:36:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----