Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          sMZwmwZdRezDSn+64H+k7dX+kftQt+zwGlpwQUPSh8o=
Subject key identifier:   C6:DF:A1:C3:3C:84:D1:A9:A2:AB:B7:FB:8E:F1:E3:67:FD:1B:EA:7E
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       532D7E00155EE2CCBE043196E7B16899B40377C9
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:54:21 +0000
ROA not before:           Tue 31 May 2022 14:49:21 +0000
ROA not after:            Tue 30 May 2023 14:54:21 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:7e:00:15:5e:e2:cc:be:04:31:96:e7:b1:68:99:b4:03:77:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:49:21 2022 GMT
            Not After : May 30 14:54:21 2023 GMT
        Subject: CN=C6DFA1C33C84D1A9A2ABB7FB8EF1E367FD1BEA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:f7:f1:25:97:fa:32:31:5e:2b:f6:d6:1b:
                    d2:79:96:37:a7:f7:98:b6:71:ee:52:c9:b2:b0:e2:
                    cb:05:41:87:dd:79:c9:be:7b:60:0f:41:f0:be:c6:
                    2e:84:0c:51:4a:c9:41:7d:6a:51:15:5a:8f:6a:bf:
                    da:cf:c8:c0:cf:9b:7f:08:80:96:92:35:d6:11:b5:
                    27:42:c7:66:b8:0c:e4:09:4d:8c:59:39:18:d7:f7:
                    44:cb:fd:5b:1b:0f:c6:35:c7:1d:ae:ef:3e:9e:66:
                    3d:9e:16:88:64:49:7f:99:5d:70:39:75:74:a3:dc:
                    19:cd:d1:87:37:c2:ca:ba:b5:15:bd:0f:ff:1d:97:
                    e9:3c:6e:fb:33:72:72:91:c2:ab:56:45:08:0e:3a:
                    33:4a:e6:86:5b:30:f9:05:21:12:dc:21:94:1e:ca:
                    62:73:8c:78:f2:27:26:ec:e4:4b:a8:5e:1f:a2:02:
                    6f:d2:b4:c9:a1:a2:92:41:25:1c:37:15:0d:51:a2:
                    28:5b:bd:a1:1b:0c:64:27:b7:43:1c:71:11:32:04:
                    83:f9:6e:2f:26:1d:33:d3:c1:25:3d:0f:90:46:5f:
                    f2:0f:d9:4f:06:7d:f9:e7:8c:51:32:d8:d8:f5:58:
                    41:93:89:3b:e6:c8:0b:72:6f:ca:b6:e2:30:04:1b:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:A1:C3:3C:84:D1:A9:A2:AB:B7:FB:8E:F1:E3:67:FD:1B:EA:7E
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ef:01:a6:66:fc:fa:c3:78:d3:f6:80:6c:c0:af:c1:d4:4e:
         9c:90:11:26:5e:61:83:25:fe:55:33:3a:07:08:05:05:48:4b:
         75:0e:7d:e9:a5:3f:13:c1:b6:9d:d4:b9:25:72:26:fc:ce:d8:
         5c:14:c9:b2:1d:28:79:10:cb:a0:1c:59:9a:11:a1:e7:82:53:
         8f:d8:c7:ad:83:33:0e:e8:ea:e2:1a:97:49:2e:fc:40:31:e5:
         ff:d8:ad:4a:c0:1d:eb:cb:30:3f:ba:99:21:b1:d7:90:d7:b0:
         c2:ac:41:fb:cc:1c:49:7b:42:fa:0e:d1:ab:a9:89:23:bf:37:
         50:79:e3:12:4b:92:e9:50:12:2b:94:72:86:0e:51:22:f4:3e:
         a4:fe:23:dd:20:23:bf:08:f0:60:81:72:4d:0e:39:03:75:cb:
         20:52:aa:b0:91:df:9b:bd:ed:9d:1b:f9:e6:a1:6d:21:e1:b0:
         91:e2:df:5f:70:95:2e:93:44:fb:ab:4f:3c:7e:2e:88:46:bb:
         32:e5:8d:ef:5f:cc:2b:6f:8a:be:42:d8:eb:a9:f0:48:6f:2f:
         e5:71:9a:7d:53:5e:75:c3:da:54:7b:5b:c5:83:09:01:22:63:
         dd:7a:7c:d8:1b:31:64:f9:5f:94:ef:2b:b6:5c:a4:25:d9:83:
         25:b6:0a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----