Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          3BMobUfuLq2UrSL+zOdg6WjoLpirXtMPa/CLtETjBAk=
Subject key identifier:   97:4B:EB:DA:A5:45:3F:B6:FD:2B:EC:0B:25:40:0F:4C:2F:FD:F6:71
Certificate issuer:       /CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
Certificate serial:       3EA170BAC35106DEBD01AE89E259C839512A00DF
Authority key identifier: A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 02 Aug 2024 20:09:56 +0000
ROA not before:           Fri 02 Aug 2024 20:04:56 +0000
ROA not after:            Fri 01 Aug 2025 20:09:56 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a1:70:ba:c3:51:06:de:bd:01:ae:89:e2:59:c8:39:51:2a:00:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb
        Validity
            Not Before: Aug  2 20:04:56 2024 GMT
            Not After : Aug  1 20:09:56 2025 GMT
        Subject: CN=974BEBDAA5453FB6FD2BEC0B25400F4C2FFDF671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:2e:b8:d4:81:94:d5:48:4b:ac:eb:5b:21:
                    58:ba:e3:a7:e9:5a:79:f6:22:ba:13:fa:72:ed:a6:
                    13:19:97:0c:66:e5:34:50:d5:9a:1d:ad:6b:ba:e4:
                    7c:3a:e6:06:7d:d0:b2:6b:3b:89:cb:c2:57:c1:bc:
                    5c:23:47:99:81:9f:b9:02:65:4d:6b:79:41:5e:43:
                    4c:cb:f7:66:5f:3d:5d:35:2b:78:31:33:fa:74:ac:
                    77:04:e3:87:52:36:14:83:d5:54:d5:9b:14:30:94:
                    f5:93:7e:cb:0d:60:4b:1f:f8:ca:58:61:71:54:8d:
                    ac:36:2e:2c:96:74:af:45:d6:8a:1b:a5:dd:8b:55:
                    7d:33:b4:f5:b3:ba:32:b7:89:d7:04:32:8e:8a:7a:
                    45:b7:49:c3:13:84:c5:b2:b8:2f:b6:0e:07:7c:76:
                    13:e7:a9:13:8f:b1:9c:71:5d:7b:f7:07:d5:ba:f0:
                    2e:fe:79:59:8a:9b:fc:a1:1f:da:53:51:e6:51:d7:
                    74:13:58:87:c5:b8:ab:50:5e:aa:c8:3a:0f:3f:b6:
                    a4:4e:b5:fc:e4:0f:50:f0:e4:19:26:a3:e4:62:16:
                    66:5f:48:9e:e2:2a:1d:24:66:4e:cb:31:63:79:02:
                    96:3f:c0:de:18:06:eb:1b:c5:73:a5:28:ab:0e:f7:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:EB:DA:A5:45:3F:B6:FD:2B:EC:0B:25:40:0F:4C:2F:FD:F6:71
            X509v3 Authority Key Identifier:
                keyid:A5:C5:BF:3B:23:4B:F3:84:65:85:8A:ED:6E:38:91:0E:1C:0E:A7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/A5C5BF3B234BF38465858AED6E38910E1C0EA710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1308fb77-7403-4d2c-a5a3-8010643b4cc8/fcb20f5966348cf0c3d295280bbe5c26b4e7b6de27159141cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/2/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:44:c8:5c:ec:4f:96:ad:97:1c:94:20:0f:9a:3f:28:3f:
         5b:d5:98:c2:75:ad:8f:eb:0c:b3:28:c8:8a:8d:3d:3d:05:56:
         4c:3b:a5:74:9f:7b:ee:1d:0e:46:6b:28:25:90:2c:8d:37:e5:
         fc:f4:c6:cc:d6:e4:e0:c1:bd:1a:f2:9d:5b:89:2e:8f:ce:42:
         3b:28:b9:0c:65:6d:0e:e1:17:57:81:90:17:9d:a9:c3:f8:3d:
         1b:58:f7:1a:2d:a6:8c:03:35:88:bc:98:fd:f4:84:38:69:67:
         b7:07:a1:d5:9d:b1:9a:bf:97:33:ab:cc:ff:63:e1:ed:bd:84:
         c0:5e:c8:d0:9f:25:48:39:58:25:7c:ce:b1:fe:38:f6:68:50:
         f6:c4:a8:30:38:78:99:f7:74:91:02:4f:3d:28:ac:b0:f8:07:
         f3:5e:cf:98:6b:dd:35:b8:92:9a:1c:e3:43:49:51:b6:62:92:
         aa:5d:5f:36:92:d9:14:68:41:0e:31:5b:2b:3d:58:12:fe:09:
         1b:bf:3f:bb:46:0c:8e:20:ad:46:56:f9:4e:9d:ad:db:8a:b1:
         6f:ab:37:94:4a:1b:d6:21:77:13:c6:1f:98:61:08:d1:68:ee:
         72:1f:c0:5b:db:8f:e0:73:96:3c:13:a1:5a:c1:2b:fb:18:95:
         36:2d:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----