Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Qaq3JrXIiG+qn1LMpZzLFnSfajcpvQkxuKQlnTP89Z8=
Subject key identifier:   EA:36:3B:1C:C0:5F:D7:29:69:73:D2:0B:CE:67:0B:93:8F:8F:23:F2
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       5918A1E83E8BFB38EEF18A6698111CCCA8827E86
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:02:50 +0000
ROA not before:           Tue 31 May 2022 13:57:50 +0000
ROA not after:            Tue 30 May 2023 14:02:50 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:a1:e8:3e:8b:fb:38:ee:f1:8a:66:98:11:1c:cc:a8:82:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 13:57:50 2022 GMT
            Not After : May 30 14:02:50 2023 GMT
        Subject: CN=EA363B1CC05FD7296973D20BCE670B938F8F23F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:45:a2:6a:ae:07:d0:a8:cc:59:6d:25:7d:
                    c9:49:45:e4:a6:dd:90:8b:a9:8f:de:1b:93:6f:20:
                    79:1d:73:17:fd:a5:20:c1:33:f9:0c:8a:16:ce:60:
                    24:7b:ed:fc:4f:e2:33:d2:b4:bc:66:95:dd:e4:7d:
                    66:88:62:a7:9e:b1:cf:3d:3a:75:81:ca:37:3d:00:
                    0b:e6:cf:b1:59:5e:54:aa:c0:c3:ef:35:8f:ed:07:
                    1a:47:24:ee:3e:65:28:4e:57:31:c1:d4:31:4e:8a:
                    f6:47:40:79:27:af:0e:14:c0:53:5a:d9:1f:a5:31:
                    57:58:ac:14:f6:e3:26:69:63:eb:3c:57:37:8d:29:
                    5e:a4:70:77:a0:8b:61:3d:a4:ff:91:cf:82:1c:b8:
                    3e:16:5a:8d:f3:09:e5:5a:91:6c:a5:02:cc:a7:e6:
                    15:ac:91:40:85:90:74:12:c3:7c:40:17:62:de:c1:
                    69:5a:3f:fa:df:95:c4:b1:b2:5c:99:49:fb:24:06:
                    6f:b0:4f:af:2c:59:41:b6:d2:47:df:3c:30:6b:5a:
                    98:75:f7:d5:70:07:8b:b8:be:d2:44:4f:33:15:3e:
                    40:36:86:6c:6b:56:17:87:f8:fa:1d:80:bf:89:43:
                    ad:3c:c7:61:3c:0d:28:3c:30:b5:e4:8c:ee:78:83:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:36:3B:1C:C0:5F:D7:29:69:73:D2:0B:CE:67:0B:93:8F:8F:23:F2
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:c1:f8:bb:1c:08:68:28:2d:b2:50:74:6e:d1:0e:e1:8d:
         0e:a7:c9:4d:5d:1e:ed:2a:91:10:ac:ee:c7:ae:74:36:c3:95:
         16:56:76:c1:46:b3:53:44:8f:7d:9e:f4:8f:6f:a2:ef:94:7a:
         c0:5f:1e:12:eb:9e:ce:51:c7:00:4a:e6:aa:12:86:9f:d2:6a:
         9a:da:5a:75:ff:30:f9:86:94:b7:0c:fc:e1:d9:4a:7c:3a:ef:
         d1:24:3a:55:20:40:40:88:64:f3:a6:14:65:78:17:b0:e8:84:
         f8:c1:22:2b:89:76:97:b3:03:9b:3a:d7:c4:79:51:ef:d5:6a:
         22:6a:ae:af:28:29:cf:aa:93:b8:4e:f1:83:9e:10:3d:16:73:
         a9:b5:43:39:c4:07:13:48:e9:69:e8:7c:25:e9:40:e2:f5:53:
         40:6c:b1:cf:36:9a:83:fe:43:45:fa:ad:ad:b1:5a:73:74:9b:
         be:89:3c:08:d9:ff:57:87:87:92:a2:fb:2a:79:33:fc:b2:21:
         88:29:72:7b:28:ba:5e:4e:39:76:a5:30:f7:a3:a0:b9:0e:b9:
         c7:d7:68:37:00:20:f0:ae:09:8d:b8:09:b6:8b:b7:78:df:b1:
         f5:dd:c6:f6:28:9c:41:fd:ce:91:2b:c5:97:60:3f:46:63:bb:
         bc:05:97:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----