Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          FSkK9fOwBR/olTAe2izU3sodc8DIJX9kyEEgZyNNOVs=
Subject key identifier:   C0:B0:74:D5:1C:CB:F1:2D:81:95:50:B9:41:55:4A:B7:49:43:80:44
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       6E508BB56ED246949DC1B4A6F298790231C42560
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:38:41 +0000
ROA not before:           Tue 31 May 2022 14:33:41 +0000
ROA not after:            Tue 30 May 2023 14:38:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:50:8b:b5:6e:d2:46:94:9d:c1:b4:a6:f2:98:79:02:31:c4:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:33:41 2022 GMT
            Not After : May 30 14:38:41 2023 GMT
        Subject: CN=C0B074D51CCBF12D819550B941554AB749438044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:38:25:2b:8c:7a:37:5c:fa:74:ff:f0:bc:
                    12:ff:d9:3c:6d:84:f5:06:a5:f6:f2:27:b6:fa:b1:
                    af:67:61:b1:cb:8f:74:04:67:d0:29:f5:73:31:1a:
                    bf:44:1f:f9:b1:dc:98:aa:24:b4:06:76:22:54:ab:
                    b1:b6:75:47:a3:e4:83:0d:7c:72:fa:c9:f1:4d:5e:
                    5f:60:df:2c:72:1b:0c:41:50:0e:c7:55:89:29:b1:
                    14:ee:55:46:1f:c5:b7:13:97:76:76:5a:53:ef:89:
                    d3:48:ad:f1:b0:e6:61:ab:53:02:33:4d:5b:c3:54:
                    90:bb:5e:72:5d:ae:ac:18:d7:23:a9:8d:5f:34:44:
                    5f:0d:1b:64:f1:59:a6:6c:3f:85:d3:e9:4f:97:c9:
                    5d:ac:c3:95:85:6e:a3:49:48:16:2c:69:9c:2f:4d:
                    ea:55:bd:dc:78:3f:fa:4b:20:e0:9d:1a:c8:85:5f:
                    05:ca:8b:c0:34:d3:26:41:c4:0d:d1:1e:62:ac:d0:
                    1c:78:0e:c5:b8:fe:34:bc:6c:fb:9f:11:28:88:e9:
                    78:2a:88:d4:e1:d5:4e:2e:fe:db:36:e2:c0:70:7a:
                    8a:02:8b:4d:a9:60:8f:85:03:0d:1c:14:5d:83:2c:
                    40:7a:ed:9f:dd:54:1e:d5:9b:3f:a0:fe:6e:6e:ea:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:74:D5:1C:CB:F1:2D:81:95:50:B9:41:55:4A:B7:49:43:80:44
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:67:63:e5:28:2b:5c:18:22:fc:9e:d5:af:a8:4a:fe:de:b7:
         d0:fb:de:c6:1e:44:8b:9f:cf:0e:8b:22:5f:03:c4:b5:9f:3f:
         33:a4:58:4a:be:05:e8:1c:f1:23:53:ef:c7:13:bd:86:64:50:
         4d:65:34:da:2f:9c:2d:ee:bf:cd:e3:f9:d5:d6:98:e6:9b:c4:
         ea:f9:18:53:95:5d:01:1c:5d:b4:4d:ca:17:fa:33:df:7e:5e:
         ca:ad:95:6f:0e:91:c9:46:7b:58:38:90:42:9f:d6:92:74:eb:
         60:7a:72:7c:3f:9d:79:ab:ee:0a:ec:d9:af:54:c2:8f:9f:45:
         3e:c1:14:59:b9:a6:48:c0:b2:c6:86:e0:ae:dd:f2:87:ee:72:
         0a:5b:49:bc:73:2b:c5:24:e9:16:62:f2:92:d4:97:4a:62:ab:
         74:82:ac:62:9b:a5:f8:a3:81:96:9d:c7:bc:1b:98:1b:79:55:
         5f:00:de:b9:53:3f:3b:40:af:4b:74:2f:68:4a:3c:3a:63:47:
         9a:e5:77:a7:95:9e:22:d5:09:bf:f9:a0:7a:f5:22:12:f1:91:
         49:52:61:6b:a8:23:4a:33:c5:61:6e:7c:82:35:ab:0c:d6:c9:
         a9:11:87:5e:ba:2b:b0:02:15:0d:b2:25:d4:b1:a3:51:63:5b:
         27:fb:8f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----