Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          gMnyX86yFcQw8B1c93rwCgyqsWF6/4TTdcxLZb9PKDs=
Subject key identifier:   D2:1F:F1:D1:38:2A:4D:33:16:1A:C9:EB:23:DA:64:38:75:2D:6A:60
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       37014F8096D8F78F73F7BE053A6590788DF0E5D5
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:53:37 +0000
ROA not before:           Tue 31 May 2022 14:48:37 +0000
ROA not after:            Tue 30 May 2023 14:53:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:01:4f:80:96:d8:f7:8f:73:f7:be:05:3a:65:90:78:8d:f0:e5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 14:48:37 2022 GMT
            Not After : May 30 14:53:37 2023 GMT
        Subject: CN=D21FF1D1382A4D33161AC9EB23DA6438752D6A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:f5:b6:95:32:c6:91:a0:ba:d9:58:9c:27:
                    7c:33:0c:df:2d:67:25:92:c1:71:f2:39:54:68:9a:
                    1a:3c:1c:92:bf:ad:3b:aa:6c:4c:0c:83:b8:23:cb:
                    cd:8b:1e:9b:7f:6b:03:72:fe:d9:7a:39:81:fa:db:
                    37:09:9f:dc:07:c0:c6:b7:cc:6c:60:fd:99:17:86:
                    77:c5:4f:2c:65:45:8a:9c:df:d0:e9:be:29:b2:eb:
                    30:88:84:bf:a0:7a:bb:f2:ee:f9:87:50:4e:d1:ef:
                    f3:7b:d8:fe:8e:64:c9:52:d5:ff:a0:be:5f:66:41:
                    ff:9e:db:bf:5c:93:bc:fc:88:18:92:8b:26:b2:c6:
                    09:fa:12:28:6c:9a:19:18:4d:d5:5d:b5:f7:cb:63:
                    42:c5:4f:0f:66:05:53:d0:17:79:a9:26:86:6b:e1:
                    5a:5e:13:70:fa:6a:38:9a:ff:7d:d7:05:b2:4a:a1:
                    35:0a:ab:f6:51:ea:de:fc:7c:8c:2a:f7:5e:cf:8f:
                    13:d3:9f:6d:fb:b2:70:01:73:b5:4c:a7:bc:39:71:
                    87:0c:b1:b6:e3:df:9d:fe:89:b8:f7:d9:37:b3:6b:
                    e9:23:4c:f9:c2:5f:e8:a1:15:7f:0e:e5:f7:ce:d7:
                    41:5c:44:83:4d:42:55:70:11:79:d2:6b:68:09:bf:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:F1:D1:38:2A:4D:33:16:1A:C9:EB:23:DA:64:38:75:2D:6A:60
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/323630323a666333623a6330303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:36:e6:c5:9f:14:69:6e:6b:01:24:18:ef:5b:fa:73:91:42:
         73:70:42:75:80:37:8a:d5:3e:69:a7:95:8f:9b:5f:76:e2:88:
         82:79:79:4e:20:19:75:ee:f9:08:3f:da:d3:4e:b4:fe:83:00:
         91:1b:96:68:64:26:2c:a4:8a:d7:e1:14:2e:aa:c8:74:88:98:
         1b:1a:54:74:97:8a:ec:59:01:a1:8a:05:a4:7d:ed:ba:dd:ec:
         20:5d:79:4b:a3:ed:3c:7b:a4:b4:77:96:8a:36:12:28:48:99:
         11:49:b1:a2:21:e9:9e:d7:cc:a1:7d:05:8c:80:6d:2c:f8:4a:
         a4:5e:42:d5:1a:f5:dc:b4:6f:b1:be:80:3f:99:83:4f:62:52:
         cf:f4:ff:6c:67:4d:fa:82:89:fb:f7:55:9f:27:19:3c:c1:2f:
         b3:e3:e4:54:a6:a0:cc:d7:2c:a5:be:32:66:b8:35:af:0d:dd:
         a6:0c:c8:bb:d5:b6:9b:de:16:5a:82:b4:73:a2:81:f0:f5:8c:
         6c:3f:34:77:da:08:aa:97:e3:9f:4b:e5:aa:5a:41:b5:da:5c:
         c0:1f:5b:c9:80:ea:b4:9f:82:8c:6d:64:2b:57:3d:79:de:f2:
         43:66:fa:a8:71:a4:60:ec:ce:36:56:74:16:75:2f:f0:db:4e:
         bf:df:3e:68
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNwFPgJbY949z974FOmWQeI3w5dUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjRjYjU1YWU2YjA4M2M3ZWJjYTI2ZGFk
N2Y2MWU0YTA3YmFlYjUwMWQwHhcNMjIwNTMxMTQ0ODM3WhcNMjMwNTMwMTQ1MzM3
WjAzMTEwLwYDVQQDEyhEMjFGRjFEMTM4MkE0RDMzMTYxQUM5RUIyM0RBNjQzODc1
MkQ2QTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLj1tpUyxpGg
utlYnCd8MwzfLWclksFx8jlUaJoaPBySv607qmxMDIO4I8vNix6bf2sDcv7ZejmB
+ts3CZ/cB8DGt8xsYP2ZF4Z3xU8sZUWKnN/Q6b4psuswiIS/oHq78u75h1BO0e/z
e9j+jmTJUtX/oL5fZkH/ntu/XJO8/IgYkosmssYJ+hIobJoZGE3VXbX3y2NCxU8P
ZgVT0Bd5qSaGa+FaXhNw+mo4mv991wWySqE1Cqv2Uere/HyMKvdez48T059t+7Jw
AXO1TKe8OXGHDLG249+d/om499k3s2vpI0z5wl/ooRV/DuX3ztdBXESDTUJVcBF5
0mtoCb/ocQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFNIf8dE4Kk0zFhrJ6yPaZDh1
LWpgMB8GA1UdIwQYMBaAFC9zqZuOhV8kVqKPlzsh7XyGC+evMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODBmY2E1NTQwMTgxMWE2MmNmOTcwZDg2LzAv
MkY3M0E5OUI4RTg1NUYyNDU2QTI4Rjk3M0IyMUVEN0M4NjBCRTdBRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzExYmUzOTJjLTA4MmMtNDlmOS1iYjY0LTI5MTcxZWNiZjgxNS9mY2Iy
MGY1OTY2NGNiNTVhZTZiMDgzYzdlYmNhMjZkYWQ3ZjYxZTRhMDdiYWViNTAxZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgwZmNhNTU0MDE4MTFh
NjJjZjk3MGQ4Ni8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhNjMzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwwAMA0G
CSqGSIb3DQEBCwUAA4IBAQBENubFnxRpbmsBJBjvW/pzkUJzcEJ1gDeK1T5pp5WP
m1924oiCeXlOIBl17vkIP9rTTrT+gwCRG5ZoZCYspIrX4RQuqsh0iJgbGlR0l4rs
WQGhigWkfe263ewgXXlLo+08e6S0d5aKNhIoSJkRSbGiIeme18yhfQWMgG0s+Eqk
XkLVGvXctG+xvoA/mYNPYlLP9P9sZ036gon791WfJxk8wS+z4+RUpqDM1yylvjJm
uDWvDd2mDMi71bab3hZagrRzooHw9YxsPzR32giql+OfS+WqWkG12lzAH1vJgOq0
n4KMbWQrVz153vJDZvqocaRg7M42VnQWdS/w206/3z5o
-----END CERTIFICATE-----