Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Qq+EJXD4zkhGbxzD7kEhIrYBToC048iRSkNJYHdzr/8=
Subject key identifier:   23:AC:4A:6E:3E:6B:28:87:1F:0C:B1:24:7B:1F:F4:5D:78:CF:E9:7C
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       10110817A0A6CD52BCCB6D75FAE3B52643FB2641
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:17 +0000
ROA not before:           Wed 11 May 2022 17:37:17 +0000
ROA not after:            Wed 10 May 2023 17:42:17 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:11:08:17:a0:a6:cd:52:bc:cb:6d:75:fa:e3:b5:26:43:fb:26:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:17 2022 GMT
            Not After : May 10 17:42:17 2023 GMT
        Subject: CN=23AC4A6E3E6B28871F0CB1247B1FF45D78CFE97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:bb:0e:e4:97:48:98:aa:32:06:4a:92:2e:
                    0b:57:15:87:5b:cb:98:2a:5d:b6:67:92:a6:2c:ea:
                    e3:3b:8e:76:f5:8d:f7:ab:c0:9c:e3:30:c9:aa:47:
                    8d:a9:ec:03:25:1f:b0:a1:7c:9c:cc:70:69:f6:5e:
                    9d:20:cb:c7:47:b5:0d:89:25:09:7a:7a:cc:52:34:
                    e6:b7:d6:11:d9:55:50:48:b1:ac:70:1e:67:d4:67:
                    64:2d:16:e4:e2:32:ed:85:e2:84:0a:0d:d8:6b:37:
                    db:f7:7b:ce:78:d3:4f:45:a7:f8:0b:04:dd:e1:ab:
                    ce:27:ee:dc:d8:5b:a2:44:b4:54:5f:7e:fe:02:7b:
                    18:4e:c9:c5:ff:f5:fc:53:ca:83:7b:bd:b3:01:54:
                    4d:13:c8:7d:c1:b6:f9:87:d9:5f:bd:0b:9b:d5:a8:
                    77:ef:79:4a:0d:ee:ce:12:af:72:cb:eb:12:cf:5b:
                    e6:a0:36:d8:9d:2f:6b:71:b0:9b:9e:da:ec:2d:a0:
                    83:36:ac:8a:e9:7c:62:93:ee:54:52:79:32:a1:28:
                    67:0c:e8:b4:0d:ce:8d:07:0b:be:76:f3:01:51:6f:
                    24:62:62:fd:e5:4b:ac:b1:fb:70:29:76:c4:43:9c:
                    af:a3:11:d3:9a:71:c9:a2:aa:f0:99:df:7c:17:89:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:4A:6E:3E:6B:28:87:1F:0C:B1:24:7B:1F:F4:5D:78:CF:E9:7C
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:96:d5:23:8d:2a:20:f2:f3:d1:12:d9:b6:2a:2e:af:c0:05:
         dc:69:d2:73:48:89:3f:63:c5:99:a6:49:3a:fd:d9:d8:41:4c:
         e9:82:4b:65:86:95:c6:8c:9b:ac:2c:c3:f0:a3:4a:d9:b9:ba:
         f8:61:83:0e:df:3a:c2:d0:6c:4c:51:e0:b5:79:b6:bf:55:7b:
         4c:7b:21:7a:b8:91:52:4b:2b:64:a9:f7:95:c3:49:a0:d9:4c:
         2b:b7:5a:5d:48:f8:fc:21:80:2b:a9:c5:00:84:29:3a:36:44:
         b1:e7:10:87:28:e8:7b:67:ae:dc:88:d1:68:3f:ad:05:6d:22:
         3c:2c:37:41:bf:d5:8e:16:de:3c:48:74:24:b3:ca:4c:d0:33:
         bc:7a:8f:b4:27:87:34:48:55:e2:ba:f1:ab:d2:cd:ca:ba:64:
         71:5a:6e:86:c7:2a:20:dc:3a:16:9e:04:fe:91:0c:de:e9:ee:
         03:24:ae:33:21:a5:aa:ba:c3:25:0b:68:bd:8a:e7:c0:00:be:
         c7:75:ac:fa:68:82:f9:6a:e2:8a:dd:30:79:c6:d4:0e:c2:5a:
         d1:33:38:8b:60:d3:fa:ba:ee:51:33:96:0a:fb:12:1b:bd:79:
         d7:fe:90:74:ed:c7:9c:77:2d:23:ad:e0:c6:a4:4a:84:ca:d3:
         3e:9d:a6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----