Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          L91RUlT+UEhvXawaGyqVV+3ex4sfJAWv3FOIsFXSWEU=
Subject key identifier:   3A:ED:98:68:01:00:64:1C:BF:7B:6C:E9:2B:2C:90:53:41:38:17:C8
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       6FA9466DD25F79D9A796408961C0F1AD1C69DC4D
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:59:31 +0000
ROA not before:           Wed 01 Jun 2022 18:54:31 +0000
ROA not after:            Wed 31 May 2023 18:59:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:46:6d:d2:5f:79:d9:a7:96:40:89:61:c0:f1:ad:1c:69:dc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:54:31 2022 GMT
            Not After : May 31 18:59:31 2023 GMT
        Subject: CN=3AED98680100641CBF7B6CE92B2C9053413817C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:33:e9:7f:57:25:14:ee:d4:0a:6a:6e:ee:
                    49:40:31:78:2e:7c:dd:b0:22:bb:dd:0b:4c:2f:1b:
                    ff:5f:9f:99:d5:f7:fd:a6:d2:6a:72:d6:e9:71:c1:
                    42:92:5a:fb:7b:c3:9b:e8:c0:51:cf:1b:31:31:07:
                    94:75:7d:60:01:ca:04:1a:59:57:2b:d0:ad:68:43:
                    f7:08:b6:e7:9d:b4:94:a9:f8:41:8f:0b:a8:14:84:
                    82:b1:b7:ee:a1:ef:fb:71:4f:38:65:be:a7:21:b9:
                    14:d4:e2:7b:39:5b:17:41:f6:5d:50:dd:a8:27:2a:
                    b1:7b:67:f5:5c:0d:80:79:b9:7b:dd:e8:45:f9:f1:
                    25:47:25:79:ed:22:c7:2f:81:e8:f9:6b:92:3a:b6:
                    2e:af:4c:04:e6:e8:c3:c1:7f:57:6a:9e:12:6e:3a:
                    0f:39:2c:6c:f3:3b:05:52:6e:96:0e:d0:bf:89:a8:
                    74:c9:61:64:80:60:70:26:df:5c:c6:6b:10:8c:cc:
                    31:10:06:aa:82:22:0a:56:fd:fc:2d:66:64:ab:53:
                    b8:29:fe:cc:20:a1:60:c7:da:45:96:56:c7:52:ac:
                    e9:38:6a:8f:8e:b9:88:a3:a7:cf:a3:72:b4:d4:d9:
                    77:3a:f9:4b:01:85:1f:d9:7e:e4:ce:f0:61:56:f4:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:98:68:01:00:64:1C:BF:7B:6C:E9:2B:2C:90:53:41:38:17:C8
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:18:e3:c5:94:1a:14:f8:ef:3e:96:0f:df:4c:ee:86:ca:
         3a:fa:ed:a9:ac:7e:df:f6:69:8e:c8:a7:0d:b4:b3:ff:ea:ff:
         83:c4:f6:17:c0:b7:f7:fc:27:d4:35:b6:5f:94:84:b8:80:f9:
         f5:b0:37:91:72:10:ab:03:04:90:f0:73:0c:6a:7a:7a:81:9c:
         39:19:1f:ba:f5:cc:07:ab:ce:63:50:41:a9:78:cd:5d:83:b6:
         01:b6:d8:96:a7:ea:3e:fd:80:9c:00:b7:36:c0:8c:8b:d4:95:
         16:cd:49:61:93:db:a7:b7:d2:c6:ca:0e:06:94:f7:b8:fe:34:
         e2:63:b6:88:3a:63:45:d0:1b:bf:53:02:e6:79:d5:b5:92:81:
         03:0e:3a:86:66:1b:e8:14:69:ba:34:4b:71:5b:36:ac:2d:79:
         c5:f1:13:8c:8c:25:d8:90:ad:2d:5e:5b:fb:b3:8e:27:42:33:
         01:5f:f5:5b:e2:d7:a6:ef:cb:0f:0c:96:3c:f1:2d:3b:ff:c6:
         1b:9b:83:a3:04:94:90:00:4c:46:bf:2f:73:8c:31:70:8d:dd:
         1a:9e:f4:29:2f:a5:39:21:7a:c9:c8:bb:6a:27:7f:62:2f:e2:
         13:98:f5:6d:54:7a:28:19:82:dd:04:21:a4:ab:46:4e:51:96:
         c4:5d:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----