Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          Smbp844UM9hX8WSMlBXTnD3drQ8Pdz3OaxgADWxbXv0=
Subject key identifier:   F2:5A:07:D3:0F:A6:70:45:FA:BA:34:AA:D8:11:40:53:D1:91:6C:8A
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       02860FE5EF8196F96345D66A1EE0A0F2E175E0C6
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:38:45 +0000
ROA not before:           Tue 31 May 2022 14:33:45 +0000
ROA not after:            Tue 30 May 2023 14:38:45 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:86:0f:e5:ef:81:96:f9:63:45:d6:6a:1e:e0:a0:f2:e1:75:e0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:33:45 2022 GMT
            Not After : May 30 14:38:45 2023 GMT
        Subject: CN=F25A07D30FA67045FABA34AAD8114053D1916C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:51:fe:0b:c8:c6:0b:50:3f:dd:92:d0:47:
                    19:81:42:b6:99:c0:d2:ea:24:7a:d1:b5:f3:fc:17:
                    72:d7:3d:95:69:8f:de:0b:61:78:11:73:84:1c:06:
                    ca:29:ca:3c:31:87:17:7a:6e:36:51:8c:30:83:37:
                    da:16:80:8b:54:c2:5e:10:37:f0:a5:c3:d1:10:89:
                    ec:a3:1f:10:58:c2:59:c8:ca:ab:18:e0:72:94:00:
                    76:ef:c2:26:34:fc:dd:6c:b2:e5:1f:77:5f:02:de:
                    78:54:c1:8a:4e:6f:30:44:36:a8:77:e1:b9:cd:6c:
                    79:70:30:0c:fe:ae:20:91:46:76:f4:08:6b:69:5d:
                    ca:47:db:df:81:e6:09:45:b1:b3:cf:79:ff:41:75:
                    46:35:00:54:c3:b8:b0:95:bd:c8:20:9c:ac:89:c7:
                    9f:55:18:c7:81:30:fb:0b:b5:61:e6:9e:bc:27:24:
                    15:43:b6:6e:95:59:89:cf:88:6c:24:0f:ee:bc:6b:
                    97:ca:3a:67:70:70:50:51:4b:6a:01:42:38:6b:02:
                    f7:dc:04:4b:58:5e:fb:f4:1b:17:c3:09:ef:64:16:
                    74:60:22:0e:b6:79:4b:7b:73:6e:0d:dc:8f:9c:6c:
                    5e:69:8a:66:8f:e0:6a:85:d1:29:e6:cb:98:31:49:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5A:07:D3:0F:A6:70:45:FA:BA:34:AA:D8:11:40:53:D1:91:6C:8A
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:45:4f:ea:a7:b7:5a:e1:cd:ff:8c:d5:8e:a0:ff:e9:39:fc:
         5e:fa:cf:be:03:ab:96:ab:d9:37:65:c7:dd:1d:dc:1f:bf:d9:
         97:05:37:be:1b:64:9a:38:e6:c6:c2:4b:79:0a:e1:2f:58:50:
         12:2d:67:1b:ff:ce:b1:3e:fb:39:2c:a6:75:93:75:03:20:96:
         47:1b:28:1d:6f:0f:de:b7:cb:cb:1c:31:54:02:51:53:fa:84:
         ae:ef:86:47:a1:5c:2e:ba:59:35:96:20:c8:99:5e:26:b2:d6:
         a1:9d:31:b4:63:f7:20:8a:0e:b6:d6:2b:28:87:ef:97:72:e8:
         2b:d2:0d:8c:50:49:36:87:03:aa:3d:b5:33:ae:a8:ae:88:bf:
         7f:7c:7d:3a:83:69:83:4a:de:51:ab:eb:09:06:6b:0b:1c:e9:
         f0:e1:e1:5f:d4:29:c2:6a:f6:b6:06:5c:b4:b5:13:24:0c:42:
         10:b3:b0:4b:ad:3e:a6:61:78:40:02:6d:f4:59:0d:4f:c8:54:
         4d:fe:95:46:80:2f:e5:63:b3:ae:18:f3:85:dc:62:2e:13:48:
         ee:c9:9e:76:13:51:5a:d7:2b:76:62:8e:28:03:f2:2b:5b:53:
         cb:65:28:b7:b3:65:6d:66:fb:af:96:03:4b:53:63:8e:29:40:
         30:9e:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----