Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Ij/BAm+7niDXQOABUbTNoKRDCbryd+XDpX7YdJx8BQw=
Subject key identifier:   E1:61:51:F0:16:2C:C1:DA:FF:F2:24:9C:4D:44:30:CD:B8:71:9F:F4
Certificate issuer:       /CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
Certificate serial:       66842EDF9F714000D6569E3A0FB8F8141918B297
Authority key identifier: 39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 11 May 2022 17:42:09 +0000
ROA not before:           Wed 11 May 2022 17:37:09 +0000
ROA not after:            Wed 10 May 2023 17:42:09 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:2e:df:9f:71:40:00:d6:56:9e:3a:0f:b8:f8:14:19:18:b2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804
        Validity
            Not Before: May 11 17:37:09 2022 GMT
            Not After : May 10 17:42:09 2023 GMT
        Subject: CN=E16151F0162CC1DAFFF2249C4D4430CDB8719FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:7f:b2:2d:e1:58:57:f7:a2:c5:26:67:ab:
                    72:c2:2f:10:07:d1:cf:b8:f1:d1:31:54:0b:55:8f:
                    b6:e7:74:dd:29:3b:4a:84:5e:53:22:77:54:79:30:
                    e3:ae:39:5f:2e:71:d4:44:fa:9a:bd:b6:c9:23:d2:
                    c0:f2:00:92:d0:74:ac:42:16:9c:9a:a2:0f:24:a5:
                    58:a9:e7:16:df:49:fa:8e:d1:d5:0e:42:33:55:10:
                    96:7c:56:2d:0b:ab:06:0c:f1:21:76:ae:4f:3c:e4:
                    33:88:1e:19:67:aa:ec:de:e8:45:47:84:2a:50:53:
                    f7:37:ca:02:4f:df:c3:44:cb:f8:89:de:64:fb:9d:
                    6c:e7:c2:e8:98:d8:9b:75:5b:ee:5f:a1:01:6c:8f:
                    fd:1e:0b:fb:c6:be:b2:e7:33:21:41:49:df:38:e0:
                    9c:cc:6c:67:b2:c8:83:44:63:cb:6f:2f:6f:69:02:
                    81:80:33:65:77:37:c9:b4:cf:78:c4:76:49:07:0a:
                    f7:a8:6a:2f:33:c6:67:8a:b2:22:3e:b1:79:6d:a1:
                    a1:98:5b:c6:2a:72:42:9c:7a:ac:9b:17:be:49:01:
                    42:e2:e2:80:86:26:15:98:40:43:f8:b5:97:76:a2:
                    2f:6a:64:da:12:2d:4b:3f:b6:25:68:21:9d:08:b9:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:51:F0:16:2C:C1:DA:FF:F2:24:9C:4D:44:30:CD:B8:71:9F:F4
            X509v3 Authority Key Identifier:
                keyid:39:AC:FD:48:FA:51:B9:07:60:45:09:2B:F3:31:2C:B1:39:0B:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/39ACFD48FA51B9076045092BF3312CB1390B2C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/006b2aa0-bd78-43b4-97c1-db4bd1761d65/fcb20f59662b8eaf9f0b21b5f8903390e7ba8caba9a8162804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180af673cfc0157/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:a0:c1:1b:a3:e7:58:80:ac:97:e2:f7:4b:1f:30:b7:ef:ed:
         f3:ba:d9:f3:dc:41:0b:54:12:92:04:c3:91:20:ae:51:95:02:
         29:3e:ae:5a:00:b3:74:c7:0a:cf:d0:8c:ff:93:c0:45:ef:d9:
         e2:03:6f:34:8c:c8:09:58:3f:db:84:bf:87:ea:6e:d3:18:9e:
         d4:8a:b4:7d:52:5b:5a:c4:75:72:c9:c2:68:97:0f:b8:fc:69:
         45:e8:03:47:8b:85:a9:c8:37:ab:c0:3e:d5:f9:6c:33:0c:23:
         d0:9d:52:c0:8a:5b:05:10:79:2c:fe:49:23:34:b7:1c:68:a6:
         0d:59:81:19:a1:05:ea:b6:ea:18:7a:28:60:13:46:46:0c:80:
         cc:df:fa:96:56:78:e9:3b:24:83:2c:62:9f:1d:ce:1d:c8:e6:
         13:6e:57:44:e6:30:1e:6d:25:91:34:5c:1d:73:6b:fd:fc:71:
         8e:fb:9c:45:73:01:e8:ab:08:7a:ad:f4:4b:3e:3c:6b:7e:09:
         c9:87:07:f8:0d:53:3f:e4:73:0b:c6:33:14:97:e1:ec:47:4e:
         9f:16:3b:17:2d:d8:c4:39:00:bb:d7:a0:e6:15:ec:7e:12:2a:
         d0:1f:15:f1:2a:3d:93:97:fd:2a:f5:63:75:09:c0:e6:12:40:
         e0:80:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----