Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          J2FrveS1gpnLqMW2yi32TPMc7EXNcgb7vHPipriihHM=
Subject key identifier:   E6:46:2D:30:32:8D:55:F1:26:C1:00:7E:35:5C:6C:59:C5:07:4E:87
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       54690B700151FE50B8CD9B5904C10EE5CC8D2B1B
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:51:20 +0000
ROA not before:           Wed 01 Jun 2022 18:46:20 +0000
ROA not after:            Wed 31 May 2023 18:51:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:69:0b:70:01:51:fe:50:b8:cd:9b:59:04:c1:0e:e5:cc:8d:2b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:46:20 2022 GMT
            Not After : May 31 18:51:20 2023 GMT
        Subject: CN=E6462D30328D55F126C1007E355C6C59C5074E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:7d:8f:1a:ea:cf:fc:d0:bc:e5:4f:6e:4d:
                    f8:40:33:2d:2f:b4:4f:4a:07:40:6d:97:7a:3b:f7:
                    eb:59:61:5c:02:f2:e8:32:ca:fb:ad:8e:34:f1:a7:
                    79:18:1c:5d:7d:54:5b:9b:b8:e3:3a:84:78:bb:7e:
                    b0:a1:3a:a3:9d:16:89:59:9c:41:50:4d:13:cf:18:
                    a0:5b:6c:e6:7a:65:72:81:35:22:3b:81:0a:f1:b8:
                    4f:5c:57:c9:dd:f0:5a:41:81:b9:cd:2f:32:3f:8f:
                    d1:79:55:eb:2c:67:5e:c3:4d:0f:73:40:f6:c4:11:
                    dd:e4:0b:5e:63:b8:42:c1:e3:a6:76:f9:81:87:10:
                    c7:5a:b6:12:d5:77:ab:ea:27:8c:0e:b1:66:0b:6b:
                    d6:1d:56:eb:d8:60:1b:79:ac:c5:f2:8d:80:ae:fe:
                    38:9d:63:b7:f3:a7:31:5e:c5:2e:c3:91:43:e7:d2:
                    90:91:8b:23:fb:07:9c:80:86:b1:c9:53:e5:1a:f5:
                    a2:8c:1d:71:44:bd:e7:77:c7:25:93:46:35:fc:5d:
                    62:9c:06:a9:d5:ab:e5:d8:09:a2:87:9d:1d:3f:d5:
                    75:e8:a1:21:e7:ad:ac:d6:ed:fb:a1:05:95:0b:b2:
                    73:e6:f4:5b:f4:0f:4b:e1:c2:ad:4d:57:66:34:f1:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:46:2D:30:32:8D:55:F1:26:C1:00:7E:35:5C:6C:59:C5:07:4E:87
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:47:cc:8b:b5:5e:49:39:a5:5d:4f:88:c1:d3:f0:1a:e9:ce:
         09:b3:1e:4c:7b:59:16:e5:9d:be:8f:e1:48:98:6b:43:25:3c:
         ae:0b:d1:95:51:bf:09:05:35:fe:22:46:e5:ea:61:61:b4:a1:
         4c:e1:c2:a3:df:b9:19:45:71:8d:97:e9:02:e4:c1:bf:87:b0:
         13:99:1c:80:44:94:c7:b4:63:dc:30:c5:fc:cd:d9:4c:03:05:
         cc:df:22:db:cb:ed:c2:dc:9c:2b:a4:79:94:d3:0b:41:9c:74:
         79:fa:22:37:ed:1a:1e:89:d1:43:10:4c:84:48:ce:8b:4e:1c:
         5c:27:eb:af:8d:e7:51:f7:14:f9:4b:ed:57:c9:05:6e:f3:2c:
         5b:b6:e7:0b:27:4c:b9:c1:57:33:75:ce:aa:23:f7:04:84:33:
         1e:86:bc:e0:82:d9:cf:28:0d:32:2f:12:1e:f2:fd:0c:8b:ce:
         6e:06:84:00:98:ae:78:5d:b3:e5:44:66:87:12:dd:9a:30:e6:
         55:d3:c5:fd:3c:be:bf:21:a7:f5:54:c2:25:8c:c3:b3:db:7f:
         ff:68:a6:38:2f:31:3f:25:e2:82:7d:b4:95:28:9e:ff:b7:82:
         2d:1c:e5:cb:33:7d:8f:19:3f:05:b6:52:bb:ba:f9:6a:d6:c6:
         4b:53:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----