Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          0d1yQskSqcDgBEd8pSF+y8g3o+EZtrt85/mNryNTZuQ=
Subject key identifier:   A8:75:85:40:CD:25:53:4F:00:7E:EF:13:DB:3E:C1:26:95:74:A9:BA
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       0ABBED18AE7EEEC07F4B9F75699D4232A837CCA0
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:23 +0000
ROA not before:           Wed 11 May 2022 17:37:23 +0000
ROA not after:            Wed 10 May 2023 17:42:23 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bb:ed:18:ae:7e:ee:c0:7f:4b:9f:75:69:9d:42:32:a8:37:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:23 2022 GMT
            Not After : May 10 17:42:23 2023 GMT
        Subject: CN=A8758540CD25534F007EEF13DB3EC1269574A9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:85:d8:3a:88:95:48:bb:a9:62:00:12:d2:
                    e7:0b:05:4e:cc:fb:12:8a:53:7c:8d:0a:3f:d3:b3:
                    81:19:04:c9:5c:f3:5f:01:40:cc:29:8c:de:cf:a7:
                    47:ef:61:76:29:7f:64:6e:58:68:d2:ac:d3:f5:7b:
                    0e:f4:af:7c:d3:89:a7:75:00:0f:3e:c1:14:7f:cd:
                    24:5b:74:c9:48:02:fd:e2:3e:9d:98:be:03:eb:7a:
                    52:ed:f0:c9:6c:74:ef:d3:11:f5:7c:f7:45:dd:eb:
                    e5:9e:97:2d:40:c9:76:fa:4e:9a:e0:77:a5:32:ef:
                    96:23:dd:bb:bc:3a:38:56:a0:80:cc:9d:da:1e:2b:
                    9e:ef:66:11:5b:af:84:d7:01:c8:2f:b2:a9:5f:b9:
                    5e:c7:fa:9f:92:36:bb:c3:6a:3f:90:de:7c:0f:99:
                    27:4c:96:de:8b:d9:e8:dd:28:cb:c6:e9:7b:ad:2a:
                    a0:9d:1f:67:8e:ed:67:2c:89:c4:e3:28:0e:31:44:
                    0a:42:18:5c:73:ac:96:21:97:bc:39:95:37:1e:2f:
                    af:a6:c1:b5:15:d8:c1:e0:fc:36:16:d3:91:64:51:
                    34:b8:ff:80:a3:e2:60:90:57:14:60:98:05:7c:82:
                    aa:e2:29:cc:26:82:b7:cd:73:a4:cd:a9:da:1d:3e:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:75:85:40:CD:25:53:4F:00:7E:EF:13:DB:3E:C1:26:95:74:A9:BA
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:47:1e:2e:f1:a2:f3:7d:09:46:a3:f8:b4:8d:26:ff:57:ae:
         4a:9a:3f:4d:5a:2c:20:4d:04:d5:9d:45:62:21:3f:a1:80:95:
         ea:1e:0c:fd:17:bc:8a:4c:e0:51:d1:9e:80:7e:81:95:c7:19:
         3b:8c:92:09:4c:c1:d0:f2:4c:40:bb:5a:30:77:21:fc:59:46:
         c3:56:9d:a8:a2:8d:0c:39:38:42:50:30:c6:5f:ef:a7:7c:c0:
         16:50:13:a8:82:a5:c6:6f:14:52:dd:9d:90:b9:28:39:fd:c6:
         ef:46:01:b6:96:99:85:0e:ab:cf:fe:e9:6f:bf:97:45:32:48:
         a8:0a:70:9d:79:14:2e:ff:71:54:fb:2b:ce:3b:e7:ec:ae:40:
         15:aa:cf:da:43:38:aa:9b:86:87:2a:5c:4d:00:01:e1:49:df:
         0d:1e:f5:58:8d:70:68:68:83:c7:1b:84:36:a6:96:b7:b5:d1:
         10:f6:90:da:20:bb:47:7d:f6:16:a4:4c:16:34:47:87:05:5d:
         1b:d1:c4:cd:1b:98:d0:51:96:00:f8:e0:37:30:af:1c:72:71:
         24:2b:44:8f:c5:a7:0d:2c:89:01:f5:bc:19:c5:01:43:bc:8f:
         f4:26:88:b6:35:08:f0:7b:73:ce:b1:2c:5c:9d:52:76:45:16:
         78:e2:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----