Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          qBWH4uv+UoBVboGN3v9eMG7VVAX7M/aGkxf71no1TtU=
Subject key identifier:   FC:E2:54:81:3A:C4:22:5F:9C:EB:A2:4A:5F:1F:02:16:14:F3:B0:C2
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       48354078B3BA038373F6C9AFE0B32A13C3346BCD
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:41:59 +0000
ROA not before:           Wed 11 May 2022 17:36:59 +0000
ROA not after:            Wed 10 May 2023 17:41:59 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:35:40:78:b3:ba:03:83:73:f6:c9:af:e0:b3:2a:13:c3:34:6b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:36:59 2022 GMT
            Not After : May 10 17:41:59 2023 GMT
        Subject: CN=FCE254813AC4225F9CEBA24A5F1F021614F3B0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:80:50:fb:4f:1e:18:c1:47:d4:a7:f1:ed:
                    d8:07:df:56:26:3b:22:88:e0:b2:92:aa:84:06:33:
                    bb:cb:e9:e6:ad:0b:7b:c2:06:65:1f:36:eb:8d:e5:
                    ee:dc:1b:87:96:e9:75:00:f8:b9:6e:f4:f6:79:8c:
                    8f:e3:a8:a0:bf:4d:73:f6:c2:02:e0:6c:f8:86:a8:
                    3b:0a:9f:f4:86:57:6d:7a:a5:a9:e8:74:42:0f:c5:
                    17:c8:0c:2d:6a:32:5b:3f:f8:1d:ca:49:88:f3:28:
                    a8:03:03:13:65:ff:d8:54:f2:a7:1a:61:0c:e9:bf:
                    c4:3b:cf:6f:a8:4d:ce:dd:0d:16:62:72:81:e7:70:
                    c8:b5:e5:93:cb:fb:d1:83:67:8e:a6:83:ed:d5:3a:
                    f7:30:36:b3:8f:eb:75:6a:51:95:6b:89:e5:62:36:
                    1b:b5:89:eb:4c:a1:f8:22:25:d2:1f:ce:aa:c1:8d:
                    20:48:52:52:67:59:c1:fe:4b:67:e7:1e:70:11:6a:
                    d2:1c:c9:76:3a:09:51:6b:fb:e4:c0:87:f7:49:95:
                    7e:b0:4f:a4:40:ec:75:d9:32:d8:a1:03:d7:03:02:
                    d5:02:03:e7:e6:a6:4b:b0:68:17:b2:3a:28:a5:07:
                    1b:b2:30:ee:ab:12:57:b7:20:05:7d:75:df:f6:4e:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E2:54:81:3A:C4:22:5F:9C:EB:A2:4A:5F:1F:02:16:14:F3:B0:C2
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:32:a0:8f:9f:ad:68:b6:85:b4:80:da:57:b0:c9:83:ad:bc:
         68:68:d4:d2:a7:6d:24:78:b4:0d:56:d0:ee:25:3b:6a:c6:d1:
         0a:33:5b:0a:93:33:c8:f9:6b:bf:0e:47:95:98:fb:42:78:d2:
         c4:90:26:56:16:ce:7e:dd:ce:8b:b0:40:57:83:83:d4:d5:a1:
         a8:15:72:4b:bd:4c:3c:85:dc:f5:50:b0:fd:c5:c0:9e:11:fe:
         bd:63:74:80:d6:88:ee:6b:2f:37:81:87:ca:ba:84:b0:35:20:
         a1:5d:0b:b6:86:f7:b3:9c:55:12:63:fc:02:64:d3:ef:a5:be:
         25:fa:6c:48:a8:99:42:b6:cb:de:7d:82:99:e1:1b:c2:e3:4a:
         4d:5a:f6:09:e1:52:b4:da:1b:58:5f:14:86:f3:8e:02:0d:32:
         06:f9:a7:c5:07:d9:5d:cb:7d:ef:ba:17:1a:0a:23:73:13:94:
         ad:54:33:24:56:05:14:bf:56:dd:a0:32:76:c7:10:df:22:60:
         8d:b9:71:6b:d5:b6:e2:7f:21:7b:a2:f2:a1:37:5d:03:55:98:
         a9:9b:b8:8a:03:d3:63:a6:43:df:52:ed:c3:c3:8d:5c:94:7c:
         8a:85:ad:89:c1:75:cf:9b:be:68:31:5d:ac:b5:52:cc:fe:c7:
         1b:a1:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----