Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018add0973331ae6/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          EWYTOI5QzErqbODUAur+6oxORWK7/bjPq+ejjSCyHPw=
Subject key identifier:   6C:5C:46:DD:A7:38:20:CE:6A:41:2A:FD:70:69:76:84:1C:BC:5D:D3
Certificate issuer:       /CN=fcb20f5966e098629a828168e351559c3ecb74cf5f67eaa9ca
Certificate serial:       1642A9D7C783A5E731496FD238BDEF6EBD082684
Authority key identifier: B8:08:EA:ED:E6:E0:3C:1B:CE:C6:B0:33:BF:25:79:FD:D3:D6:B1:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3b6a66d-821f-4fb3-b4ca-19a6d7c0cf9c/fcb20f5966e098629a828168e351559c3ecb74cf5f67eaa9ca.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018add0973331ae6/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Thu 28 Sep 2023 18:27:40 +0000
ROA not before:           Thu 28 Sep 2023 18:22:40 +0000
ROA not after:            Thu 26 Sep 2024 18:27:40 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:42:a9:d7:c7:83:a5:e7:31:49:6f:d2:38:bd:ef:6e:bd:08:26:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966e098629a828168e351559c3ecb74cf5f67eaa9ca
        Validity
            Not Before: Sep 28 18:22:40 2023 GMT
            Not After : Sep 26 18:27:40 2024 GMT
        Subject: CN=6C5C46DDA73820CE6A412AFD706976841CBC5DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:18:f0:21:37:0c:5a:ac:9b:cf:b7:81:91:
                    a2:a9:cc:6b:62:89:7a:66:87:cd:41:18:cd:29:79:
                    1f:bf:d2:f4:f6:f8:a3:70:ab:05:f4:e6:8f:9c:d3:
                    15:65:6a:bb:be:cc:01:bc:7c:5d:84:fc:05:5c:b3:
                    e3:44:ce:c0:2b:f2:fa:c8:b8:1e:d8:3b:32:8c:2c:
                    07:c7:a4:2d:2d:e0:f6:99:a6:53:6a:e6:4c:88:04:
                    aa:89:25:61:b0:b3:36:60:d0:2d:41:0e:3d:c1:06:
                    88:ad:07:65:9e:47:55:35:30:a0:d4:8f:a3:36:17:
                    cc:7f:bc:a5:c8:dd:68:a3:1d:ed:9d:29:ea:45:10:
                    b6:ec:d4:f6:4f:19:da:06:2e:64:4e:7f:47:af:65:
                    42:f0:91:22:c1:92:0c:b4:5f:bd:19:7c:b7:7b:cf:
                    4c:05:a6:6f:f7:62:5f:7e:b2:2a:17:d2:09:ba:32:
                    0c:77:ed:0a:c8:4a:74:d9:62:2d:70:f7:e5:55:df:
                    30:37:c0:df:e9:c8:d7:3c:9f:de:3d:09:e8:31:bb:
                    76:52:c6:ee:07:bd:7f:96:b2:bc:43:a9:d5:31:f7:
                    b6:7c:da:9f:23:3b:24:de:e0:cf:85:40:14:93:ec:
                    33:f6:65:7e:29:b0:44:b7:33:39:5e:bb:87:4b:05:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5C:46:DD:A7:38:20:CE:6A:41:2A:FD:70:69:76:84:1C:BC:5D:D3
            X509v3 Authority Key Identifier:
                keyid:B8:08:EA:ED:E6:E0:3C:1B:CE:C6:B0:33:BF:25:79:FD:D3:D6:B1:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018add0973331ae6/0/B808EAEDE6E03C1BCEC6B033BF2579FDD3D6B161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3b6a66d-821f-4fb3-b4ca-19a6d7c0cf9c/fcb20f5966e098629a828168e351559c3ecb74cf5f67eaa9ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018add0973331ae6/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:fe:ac:ef:2e:3f:5f:53:cb:4e:fd:ff:87:d8:c3:7e:3a:ca:
         51:86:25:6d:a3:91:9b:d6:b4:0e:d0:c0:0b:d5:fb:f5:99:25:
         ea:92:d6:93:8e:37:5e:e1:00:40:e2:bc:57:8d:78:b7:e1:10:
         a3:f4:66:57:3b:7a:7c:cd:b6:a5:33:d9:34:0d:b8:98:18:5d:
         f5:ae:bc:d4:14:0a:7c:98:18:61:1c:72:7f:e9:cb:85:81:d9:
         5c:2a:94:1b:7f:b5:d1:d1:ac:1b:94:07:e0:e1:62:6d:10:37:
         83:5a:18:8a:84:50:00:12:32:c4:6e:df:fc:d8:aa:11:99:da:
         49:e1:50:a2:7f:7a:a6:8d:b5:13:96:d9:2f:81:7c:ee:b1:47:
         d7:b5:af:3d:11:0c:e4:82:79:8f:9e:eb:86:3b:38:b0:7e:a6:
         e5:87:07:24:b9:98:46:f2:8d:32:a0:cf:6c:3c:0e:0d:ce:31:
         19:2f:a7:3a:66:d8:7d:6f:07:82:aa:f6:e1:81:99:87:03:29:
         df:74:bc:e8:d1:68:42:bf:05:c6:ae:7a:e9:fe:d8:88:85:e5:
         b7:51:de:fd:aa:13:e2:1e:12:29:37:78:92:93:eb:79:10:6f:
         4c:e6:dd:95:92:4b:be:eb:43:dd:97:44:de:46:67:14:5f:3e:
         5f:db:03:40
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFkKp18eDpecxSW/SOL3vbr0IJoQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmUwOTg2MjlhODI4MTY4ZTM1MTU1OWMz
ZWNiNzRjZjVmNjdlYWE5Y2EwHhcNMjMwOTI4MTgyMjQwWhcNMjQwOTI2MTgyNzQw
WjAzMTEwLwYDVQQDEyg2QzVDNDZEREE3MzgyMENFNkE0MTJBRkQ3MDY5NzY4NDFD
QkM1REQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55wY8CE3DFqs
m8+3gZGiqcxrYol6ZofNQRjNKXkfv9L09vijcKsF9OaPnNMVZWq7vswBvHxdhPwF
XLPjRM7AK/L6yLge2DsyjCwHx6QtLeD2maZTauZMiASqiSVhsLM2YNAtQQ49wQaI
rQdlnkdVNTCg1I+jNhfMf7ylyN1oox3tnSnqRRC27NT2TxnaBi5kTn9Hr2VC8JEi
wZIMtF+9GXy3e89MBaZv92JffrIqF9IJujIMd+0KyEp02WItcPflVd8wN8Df6cjX
PJ/ePQnoMbt2UsbuB71/lrK8Q6nVMfe2fNqfIzsk3uDPhUAUk+wz9mV+KbBEtzM5
XruHSwWaxQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGxcRt2nOCDOakEq/XBpdoQc
vF3TMB8GA1UdIwQYMBaAFLgI6u3m4DwbzsawM78lef3T1rFhMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODllMDJlOGIwMThhZGQwOTczMzMxYWU2LzAv
QjgwOEVBRURFNkUwM0MxQkNFQzZCMDMzQkYyNTc5RkREM0Q2QjE2MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2MzYjZhNjZkLTgyMWYtNGZiMy1iNGNhLTE5YTZkN2MwY2Y5Yy9mY2Iy
MGY1OTY2ZTA5ODYyOWE4MjgxNjhlMzUxNTU5YzNlY2I3NGNmNWY2N2VhYTljYS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg5ZTAyZThiMDE4YWRk
MDk3MzMzMWFlNi8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjMzMzYyZDMzMzYy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCYC/DsAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0/qzvLj9fU8tO/f+H2MN+OspRhiVto5Gb1rQO0MAL1fv1mSXqktaT
jjde4QBA4rxXjXi34RCj9GZXO3p8zbalM9k0DbiYGF31rrzUFAp8mBhhHHJ/6cuF
gdlcKpQbf7XR0awblAfg4WJtEDeDWhiKhFAAEjLEbt/82KoRmdpJ4VCif3qmjbUT
ltkvgXzusUfXta89EQzkgnmPnuuGOziwfqblhwckuZhG8o0yoM9sPA4NzjEZL6c6
Zth9bweCqvbhgZmHAynfdLzo0WhCvwXGrnrp/tiIheW3Ud79qhPiHhIpN3iSk+t5
EG9M5t2Vkku+60Pdl0TeRmcUXz5f2wNA
-----END CERTIFICATE-----