Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          kvGA/JQeEgp4Sv2S4FJckJ2yrsqvPnq5rs5weW3s448=
Subject key identifier:   B7:86:10:05:88:39:05:E4:CF:A4:B6:08:35:18:E9:90:77:D1:13:25
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       546B00BE4BAB7D0231B7AAD59C78F64A0C50E8E1
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:13 +0000
ROA not before:           Wed 11 May 2022 17:37:13 +0000
ROA not after:            Wed 10 May 2023 17:42:13 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6b:00:be:4b:ab:7d:02:31:b7:aa:d5:9c:78:f6:4a:0c:50:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:13 2022 GMT
            Not After : May 10 17:42:13 2023 GMT
        Subject: CN=B7861005883905E4CFA4B6083518E99077D11325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:72:69:35:9c:d9:f8:43:15:c4:bb:32:81:
                    df:b7:c9:b4:19:d0:e7:b8:38:11:4a:f4:e9:ed:25:
                    6f:d0:27:08:31:d3:46:52:91:37:78:d3:b1:13:13:
                    27:97:ee:8b:e8:9e:8c:57:ec:7a:b2:4e:ce:10:02:
                    6c:d6:52:63:2a:89:0a:30:71:af:cc:37:03:a7:c9:
                    2f:cf:1d:bc:d0:8a:03:dc:13:25:4d:79:6d:b8:28:
                    70:44:c7:4a:e6:e0:5f:8d:03:27:e8:41:20:c6:d4:
                    23:c5:af:17:9e:bb:4c:b3:bd:2d:a3:e1:44:b1:a3:
                    09:7a:74:bc:7a:de:b3:bc:74:85:75:d7:f8:2f:c3:
                    da:10:27:8c:a2:e0:53:3e:1f:54:0c:64:f0:cd:8f:
                    0f:77:52:aa:f0:d2:13:36:ea:f0:7e:38:f6:1d:c5:
                    3b:59:33:c1:21:0a:9f:f0:8e:77:67:3d:20:64:6c:
                    10:f0:58:23:10:6d:47:0b:54:df:fc:54:f5:2e:e5:
                    2d:86:6a:fc:90:01:94:57:b2:75:3d:b1:2f:5b:29:
                    35:7d:cf:fe:4e:41:61:c4:dc:b7:eb:0e:3e:58:49:
                    bb:7f:10:74:5b:eb:35:21:8b:43:39:e3:32:3e:c4:
                    18:b0:cb:dd:8c:1b:95:d6:19:72:66:1a:18:a2:16:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:10:05:88:39:05:E4:CF:A4:B6:08:35:18:E9:90:77:D1:13:25
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:2c:ff:1b:73:ef:43:d8:36:c3:25:fd:aa:1b:11:d9:d7:
         95:7c:3d:11:ef:11:ce:91:74:0c:16:f7:0a:12:be:3a:5b:20:
         0b:be:9b:43:6b:0c:35:24:01:3a:63:a5:a2:3e:56:d5:16:bd:
         7b:8d:b0:9c:64:00:5e:0a:66:ae:17:b7:83:8a:e1:de:c0:a6:
         00:f0:91:c0:ff:70:4d:2b:34:2a:ac:7c:69:5e:6a:92:f2:e0:
         6d:cf:34:5e:86:c8:b1:cd:ce:e9:ae:23:ea:53:88:e1:e9:d3:
         ef:eb:11:8f:a0:2b:0c:d2:b8:5b:f2:95:e7:75:00:ab:97:3f:
         d4:a2:e0:4d:19:0a:be:57:c5:02:d8:74:f5:de:35:99:9d:8c:
         e8:f2:72:3f:c5:12:54:dc:5a:69:80:1a:c1:22:ad:ef:ad:d3:
         52:e7:2a:c3:68:ec:a2:76:d3:84:6c:b4:5c:f6:9a:37:79:c7:
         c1:e4:4b:15:91:e6:a8:ad:e9:6a:25:44:a6:74:b4:f2:ea:b7:
         7a:c8:1b:35:dd:d6:77:59:81:13:20:2d:7d:80:fd:09:de:69:
         a9:bf:e4:7b:9b:fe:5a:ea:f9:f1:d3:52:81:59:e3:6c:db:e4:
         69:a4:62:be:53:bd:4e:60:b1:68:24:77:5a:3b:63:14:61:23:
         a8:db:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----