Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          e1ZwF+4AgnvXnPKt9hLSTJAmDngyI42S8DQQkMB1Y2A=
Subject key identifier:   44:A8:90:30:48:87:E9:35:EB:38:72:DD:35:7E:CF:30:38:B3:ED:C7
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       12C09C26B5EFBEFAABBDA1EA56DE67903114D4B9
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:20 +0000
ROA not before:           Wed 11 May 2022 17:37:20 +0000
ROA not after:            Wed 10 May 2023 17:42:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c0:9c:26:b5:ef:be:fa:ab:bd:a1:ea:56:de:67:90:31:14:d4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:20 2022 GMT
            Not After : May 10 17:42:20 2023 GMT
        Subject: CN=44A890304887E935EB3872DD357ECF3038B3EDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:d3:9c:97:81:06:1a:e4:6d:08:a7:55:0b:
                    da:d2:38:4a:d0:35:a2:43:f7:af:12:ea:77:11:e2:
                    d2:70:88:06:b9:90:27:6e:ec:69:90:98:b7:28:aa:
                    ad:84:4c:bc:fc:1c:f7:c4:cc:55:05:e5:74:de:c5:
                    bb:cb:3f:97:a9:2b:a5:8e:a4:06:d8:50:ca:0e:59:
                    c3:54:de:e2:53:92:21:23:a5:a6:cc:45:70:b5:a0:
                    dd:da:ad:e7:d0:fb:20:a4:8a:56:14:c2:3b:9b:45:
                    c5:e1:d1:f3:0e:bd:60:e3:d3:f7:39:05:b9:04:61:
                    63:5f:fe:e0:4f:0d:d5:2e:e4:96:86:3f:c4:46:20:
                    df:52:85:a1:1c:1e:17:d1:bf:03:d0:4f:9f:1e:79:
                    13:9b:c1:d9:e8:85:54:1f:54:3c:49:75:16:a5:df:
                    2e:44:09:d3:63:ec:64:88:e7:3f:73:52:1e:3d:8f:
                    f0:17:18:c7:87:3d:be:c1:4d:44:d6:b3:72:32:47:
                    de:f5:6d:62:1b:8c:e6:cd:dc:31:cc:6f:07:97:6b:
                    43:4a:b3:66:12:46:0c:ad:5e:82:c1:06:f0:c2:a1:
                    87:e0:32:7d:9f:33:ca:cb:f1:e6:72:8e:55:d6:a8:
                    53:40:02:1f:23:8f:4e:bd:dc:e6:19:fe:ec:a1:cc:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A8:90:30:48:87:E9:35:EB:38:72:DD:35:7E:CF:30:38:B3:ED:C7
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         dc:98:55:bb:25:86:76:6f:87:7d:ba:ee:85:80:b8:28:5f:9e:
         07:8d:4d:40:a9:d9:4c:f0:e1:ce:e6:45:09:92:5b:46:b0:77:
         0a:88:ab:e7:b8:70:91:c2:a4:b1:aa:5e:65:d2:bd:82:2d:7f:
         78:52:19:43:d9:7b:e3:24:6d:5c:43:52:f9:38:2d:3e:9e:4c:
         ba:9b:7f:c2:8d:01:f2:18:60:bf:8e:27:21:07:1e:9c:d2:fa:
         e2:12:71:31:37:5b:05:5c:95:12:d2:db:a1:04:0a:c7:7c:c9:
         9e:0d:3b:fc:9b:63:f7:67:63:ea:eb:8a:7d:9c:91:90:63:dc:
         a1:16:59:1a:cf:09:f7:11:35:01:11:52:ea:2c:13:4c:73:4f:
         20:0f:b8:6e:ac:18:a6:b1:e9:60:52:8c:30:30:a7:58:38:e4:
         f7:f0:5b:34:f3:c9:dc:69:79:6a:e5:20:2f:6b:c8:f7:44:2a:
         92:6d:b2:22:90:59:44:d8:ce:3e:57:9d:83:6e:54:1c:bc:4c:
         da:2d:13:38:02:ff:09:85:5b:03:49:c0:56:1f:0a:82:2c:d3:
         db:65:cf:12:ed:80:f1:40:96:9d:ae:5b:14:f8:74:76:8b:85:
         3d:b8:f0:9a:b7:1c:57:28:cc:f7:fd:e3:7c:00:70:6a:25:3b:
         17:40:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----