Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          PsFF1qYzJ8tFCfMbqmPY+PqUFnBtApVm4Fw8p5Dgmk8=
Subject key identifier:   1B:B9:36:E9:C1:EE:39:AC:5E:DE:C8:60:BB:E8:CE:EF:1F:2E:B2:44
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       1E55232970200E41C9C5B0FA0FE725E234B66A04
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:38:37 +0000
ROA not before:           Tue 31 May 2022 14:33:37 +0000
ROA not after:            Tue 30 May 2023 14:38:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:55:23:29:70:20:0e:41:c9:c5:b0:fa:0f:e7:25:e2:34:b6:6a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:33:37 2022 GMT
            Not After : May 30 14:38:37 2023 GMT
        Subject: CN=1BB936E9C1EE39AC5EDEC860BBE8CEEF1F2EB244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:cf:05:ea:65:7f:f0:e2:f7:7d:fb:76:fb:
                    ee:b7:44:f8:28:a6:88:27:13:3b:0f:f2:78:d1:7a:
                    7e:b5:32:87:47:b8:af:a2:c3:56:a2:b9:c8:6a:a9:
                    2a:4b:f4:75:60:91:30:23:67:7b:62:85:81:2d:fa:
                    52:5a:61:af:99:34:c7:07:e7:9c:2e:28:aa:4b:86:
                    af:c1:94:8a:85:5c:6a:28:2c:f5:5f:e8:24:59:00:
                    41:d5:82:3c:94:b2:ed:11:e3:68:c7:01:c1:c1:94:
                    3d:43:55:4d:a6:84:a6:ae:ef:44:99:9a:5b:00:0c:
                    f2:8f:53:d6:06:b9:a7:4d:39:66:5e:b9:81:b7:fa:
                    5e:3a:67:bd:5f:5d:c7:c3:16:2f:47:4b:20:85:09:
                    28:d2:25:19:2a:d2:9c:2a:79:1a:b6:07:44:6a:ea:
                    f7:77:5d:58:5c:c9:28:b6:a8:7e:54:a8:8b:41:b6:
                    65:5a:22:ad:e8:72:5b:a2:67:57:ce:73:f6:c4:d7:
                    ca:1d:d2:ee:51:50:aa:0b:5a:21:c7:cc:ea:00:5a:
                    35:90:15:30:22:88:a6:83:e9:08:35:e9:96:d7:c5:
                    0d:07:84:1c:72:b1:d7:84:fa:47:00:9f:61:df:36:
                    7e:3b:96:65:2f:b3:81:f2:21:fc:45:15:fb:af:c2:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:36:E9:C1:EE:39:AC:5E:DE:C8:60:BB:E8:CE:EF:1F:2E:B2:44
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:20:ca:8b:77:58:5a:b9:cf:6d:e1:fd:03:44:20:03:fd:
         07:67:e6:1f:02:63:f3:c4:a4:31:1e:20:73:6c:ac:22:84:7f:
         8e:fc:92:7c:bc:76:c1:4a:2b:3b:01:e2:6b:d0:2f:4a:1f:06:
         62:c3:6a:6c:f0:2d:07:32:b8:5e:b3:1d:fc:05:dd:c6:83:a0:
         45:fb:f9:09:37:2d:48:2b:e0:a1:d4:9b:62:70:fa:da:d1:e2:
         16:38:07:7e:c8:c9:21:b1:76:2a:5f:45:d3:a2:71:2b:f7:fb:
         d0:2e:20:b2:28:33:c5:05:cc:46:9d:1d:25:f0:8d:13:26:6d:
         b8:58:6e:b4:23:d7:6f:03:65:1d:d7:e4:c1:77:76:a3:5a:46:
         fe:f3:a5:00:ef:2d:a2:df:33:44:b1:eb:f2:84:07:cc:25:3e:
         de:4e:0c:8f:1e:39:18:09:29:a3:ab:55:03:75:01:7c:7f:44:
         50:a8:55:d3:c8:b2:0b:48:9b:0b:68:25:bb:b5:a8:8b:15:55:
         0f:26:04:08:78:da:92:82:a5:1c:d6:a4:d0:ef:1f:97:cc:e6:
         2d:ff:3d:78:ce:2c:a6:f1:0b:b8:fe:97:04:17:0b:c3:55:f0:
         b7:8e:95:70:40:2b:b6:6d:1a:cf:cf:51:de:a5:4b:52:50:a6:
         43:69:57:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----