Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          cgOmwLp14P5YOXyAvL25jEe+af3u5+mGYmPQYVkWrdM=
Subject key identifier:   E7:4F:E8:9A:09:14:EC:DD:62:10:A4:C5:67:40:5C:CF:10:B1:D2:DC
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       6679C7CD0B8EAFB711ACF0BFC583B06B8405E31A
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:54:48 +0000
ROA not before:           Tue 31 May 2022 14:49:48 +0000
ROA not after:            Tue 30 May 2023 14:54:48 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:c7:cd:0b:8e:af:b7:11:ac:f0:bf:c5:83:b0:6b:84:05:e3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:49:48 2022 GMT
            Not After : May 30 14:54:48 2023 GMT
        Subject: CN=E74FE89A0914ECDD6210A4C567405CCF10B1D2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:62:6d:74:a1:d5:87:6b:2a:84:5a:f5:ea:
                    71:5b:df:13:60:83:20:2b:68:24:83:03:a4:71:dc:
                    98:61:e7:4b:cb:4b:99:b6:6c:e1:03:9c:65:5f:84:
                    37:96:d2:c1:b8:ad:f1:53:3e:63:3f:e4:77:65:07:
                    fc:41:9b:02:8c:29:94:23:7b:14:2e:4d:88:ce:14:
                    c8:93:ce:d8:8b:76:a8:6a:f8:5d:42:21:30:b1:55:
                    43:9e:92:64:20:84:9b:05:84:8d:c3:b5:85:32:be:
                    84:e9:ae:f6:c3:cc:03:b4:66:ce:ac:1c:8f:31:a9:
                    f9:6f:00:39:0c:d4:5b:9c:72:88:3b:2a:5b:21:b2:
                    58:6f:04:5d:5b:e9:6c:9c:0b:89:b3:f1:da:0c:cf:
                    30:ab:f0:e7:5e:f3:a6:a1:93:a9:25:67:2b:7d:6a:
                    c5:16:76:be:39:8e:01:4b:be:3e:72:ae:a0:1e:a5:
                    82:9c:cd:12:d7:d0:30:bb:ac:25:cc:69:c3:81:cc:
                    9c:a2:b2:9e:65:da:d4:5c:cc:d3:02:c6:6b:a0:87:
                    0b:bd:7c:16:8d:9f:53:64:58:e7:22:50:76:fd:50:
                    a8:83:9a:97:14:a0:9f:e2:49:14:9f:fe:40:ca:56:
                    ff:ee:ae:e1:9f:c8:f8:0c:f6:72:df:51:ae:93:40:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:E8:9A:09:14:EC:DD:62:10:A4:C5:67:40:5C:CF:10:B1:D2:DC
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3730303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:dd:06:e9:80:b3:3b:cb:8f:05:9b:24:ac:b9:ed:76:36:41:
         66:19:46:dc:7f:d9:33:21:23:f5:27:91:87:8d:40:cd:db:3a:
         e4:d3:64:a8:b1:7a:54:80:0c:c0:a5:05:2b:b2:db:89:8c:84:
         53:63:79:a0:e0:06:03:cd:cd:dd:9d:63:a0:aa:f4:47:64:11:
         cf:ac:2b:b2:17:3a:11:65:13:ea:f1:ad:1f:3d:21:0a:ff:6a:
         9c:57:93:4d:10:5f:7f:e8:b5:67:45:35:68:c6:52:2c:ca:a7:
         8b:de:05:e5:d1:d4:e0:15:e6:7e:19:75:56:fd:a0:1f:bf:6d:
         df:f1:a2:9d:04:08:cd:86:ea:60:5b:fc:9c:9e:50:4d:09:c3:
         96:c4:91:9e:b9:d7:a1:23:08:8f:01:8b:f7:0b:5a:80:ee:9a:
         68:21:ba:d4:5b:8c:15:ce:de:23:68:5f:e8:15:de:5b:a9:28:
         c0:96:6a:80:fb:9e:00:5b:90:79:63:0e:af:47:8d:73:78:08:
         88:f0:a8:1d:f1:ba:c0:07:a8:e7:c2:4e:28:1e:bb:97:9a:2d:
         d2:d9:7f:3a:e0:da:99:d7:0e:96:e5:29:80:ac:2f:09:ba:57:
         a5:21:15:3d:24:37:5e:16:52:b1:d8:0b:ca:f6:ae:6d:9d:2d:
         30:ee:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----