Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          NAO2ezRfNEoCYg1psdIjrB2q9Z2yOzcpbbU5ZmCssgQ=
Subject key identifier:   32:58:5F:36:C0:0F:72:07:23:51:14:D0:44:BF:82:E6:1A:E4:F2:6F
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       09B7966268B62EEBFC35EF81185CB8E527E4C3A7
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:37:57 +0000
ROA not before:           Tue 31 May 2022 14:32:57 +0000
ROA not after:            Tue 30 May 2023 14:37:57 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b7:96:62:68:b6:2e:eb:fc:35:ef:81:18:5c:b8:e5:27:e4:c3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:32:57 2022 GMT
            Not After : May 30 14:37:57 2023 GMT
        Subject: CN=32585F36C00F7207235114D044BF82E61AE4F26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:e4:a3:7b:22:71:79:0a:ea:df:f6:a6:00:
                    34:bd:cd:5f:88:53:7e:b9:e1:19:bd:ec:b5:fd:50:
                    d6:5f:ad:67:ce:d7:fe:09:e7:3d:6f:79:7b:50:97:
                    b8:ba:71:46:86:3b:88:54:51:e5:76:bb:da:fc:2b:
                    e8:1b:89:8e:c7:34:bd:26:ce:b3:0a:9b:63:b5:86:
                    1c:f4:3c:c9:27:c7:65:33:f9:d3:68:fd:a8:a1:f4:
                    7a:0c:67:f7:45:fc:01:11:26:27:6b:46:a1:bb:0d:
                    ab:1e:1d:25:ac:9e:39:a0:34:62:97:98:09:36:65:
                    49:82:fe:7a:ef:e7:fe:d7:3f:08:6f:9c:7b:fe:84:
                    6c:c1:cd:fe:fb:40:a0:d9:55:25:52:8e:e9:de:3e:
                    6c:a8:10:4f:66:52:68:3e:eb:f9:8c:22:e7:24:eb:
                    5b:e3:75:b5:07:fb:a9:54:ce:a2:4e:e1:52:3b:94:
                    70:51:39:e7:48:7b:65:4b:06:6b:4a:00:ef:11:86:
                    81:35:eb:7a:30:0b:a2:24:ba:78:82:69:bf:bf:9e:
                    ea:b0:09:87:95:52:d6:e7:50:b2:86:78:40:7e:62:
                    f0:ca:27:16:90:4b:d5:e3:54:13:10:34:89:9e:15:
                    dc:8b:23:b6:33:0c:48:b2:a2:23:1c:d1:ce:b2:07:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:58:5F:36:C0:0F:72:07:23:51:14:D0:44:BF:82:E6:1A:E4:F2:6F
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:6e:c5:32:b1:a9:f5:33:0d:4a:73:50:85:8e:b8:53:a5:
         60:6b:f9:56:4e:af:2d:fe:9a:2e:97:87:ad:7e:9b:cb:4a:f6:
         1a:73:3c:d2:3c:0e:e5:38:59:f7:1b:58:fd:dc:98:b6:df:63:
         d4:0c:5c:f6:80:48:58:90:b1:a3:d7:22:01:3d:b8:0c:fd:6d:
         8c:6d:8a:a1:bb:0f:84:d5:df:6d:e0:b5:7e:cc:42:68:63:20:
         79:ea:36:03:28:72:12:25:30:49:dc:b0:74:99:86:b3:0d:8a:
         4c:5a:c3:95:ec:c1:de:b4:3d:4f:91:c6:fc:b6:5b:73:2a:47:
         50:ef:39:76:a5:9c:79:ea:98:8d:d0:15:4c:d7:72:70:bc:de:
         2c:e8:c8:7c:d9:56:74:10:a1:cd:00:9d:3e:9d:29:ed:53:6d:
         8f:29:b7:fe:a7:b8:44:7b:76:c1:ca:a1:fe:dc:fb:2b:20:9f:
         a5:2d:7b:07:d9:69:5e:5b:a0:c0:43:34:02:cd:e3:35:68:fd:
         0d:fb:2f:e4:44:e7:1b:78:d3:39:37:19:37:db:43:15:7b:86:
         2c:09:d6:ca:e4:08:32:b8:27:28:89:f1:3e:3e:38:d3:e1:0e:
         ea:0a:85:8b:28:9d:49:1d:c0:37:b7:f0:da:52:b3:d7:1a:1b:
         19:15:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----