Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          7M8/jXn/EQkvlAX41POwPVk6ap+JNcsKOBu4fNW9VNI=
Subject key identifier:   00:CB:E1:4A:4E:1A:49:B4:A2:7C:E5:00:81:EC:B2:92:D9:90:58:E5
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       556C42052FFB779D8077EF8BD848534CFE01E0DD
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:900::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6c:42:05:2f:fb:77:9d:80:77:ef:8b:d8:48:53:4c:fe:01:e0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=00CBE14A4E1A49B4A27CE50081ECB292D99058E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:47:fb:57:58:e6:42:ae:4a:4d:75:3e:77:
                    12:5b:96:93:f7:bc:c3:86:b3:76:0d:57:2a:02:f8:
                    61:68:ff:0e:78:97:f9:bb:7f:6b:ee:45:16:19:cf:
                    73:bd:51:93:d0:5a:a3:d3:f6:72:f5:34:96:58:0c:
                    a3:3f:9e:14:29:d0:92:05:4d:db:81:a7:86:ef:2d:
                    4d:29:30:e6:65:cd:6f:23:9c:94:ee:cb:a8:f8:be:
                    af:9c:f3:11:e1:f7:ec:a0:7a:73:17:4d:d1:15:4f:
                    cf:9e:84:0e:71:fc:d0:f9:5d:1f:e5:04:6a:c0:2c:
                    a8:ec:d7:a3:f2:b1:dc:18:59:1a:4b:3c:03:1a:ca:
                    33:2e:49:80:6a:b0:33:59:cd:f8:d4:2d:0b:00:2f:
                    d0:88:47:c1:0c:32:91:b2:1d:f8:52:66:c2:9f:c9:
                    28:c3:54:94:14:a4:99:b9:26:08:12:4f:ae:6b:4d:
                    02:d8:56:b7:f9:fb:e2:f1:bd:54:53:e8:55:8b:ca:
                    05:c9:6e:b2:67:9f:58:f8:60:b1:ca:21:cb:2b:bc:
                    94:cb:bc:9e:fc:66:0a:6f:1f:fd:f4:70:1d:6f:9e:
                    5b:b2:ef:85:04:f5:5e:2d:09:72:06:f0:f5:c4:c7:
                    a9:4f:7c:35:1a:ae:8e:a0:f0:54:68:4f:bc:fc:b0:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:E1:4A:4E:1A:49:B4:A2:7C:E5:00:81:EC:B2:92:D9:90:58:E5
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3930303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:94:4d:99:4c:cc:2a:82:a3:c1:51:66:f2:c7:1d:1c:8f:05:
         01:fe:ec:83:b7:46:a1:90:41:83:4c:e6:23:62:20:cf:4b:12:
         9a:c3:06:74:1c:77:5d:ca:3b:9c:d3:09:54:2a:ac:3e:96:ed:
         18:ef:56:96:90:64:47:3e:b3:2e:a3:99:96:24:3b:f9:bc:bf:
         c9:55:b1:59:04:74:a7:01:25:97:51:12:7e:ea:11:60:48:d4:
         00:2e:94:17:fb:2e:bc:b3:58:c6:68:85:b5:b7:98:b6:76:cc:
         65:8b:17:cd:42:26:d4:42:3c:6f:75:b0:fa:9e:46:d7:9d:72:
         d2:73:ba:45:9b:ee:6c:16:45:f1:2b:da:6f:25:3a:6c:0f:9d:
         4b:77:17:40:8d:42:09:4b:5b:3e:91:b7:b9:17:a7:1e:2c:a4:
         22:f9:f3:a4:e5:0b:01:01:94:a0:0b:2e:3a:3f:19:e4:22:d5:
         33:4b:09:d0:a5:93:a0:68:f2:98:c8:87:6b:03:c2:0e:ed:c7:
         06:b6:d7:54:24:87:fa:2e:ee:c8:b5:60:91:cf:8e:95:fa:16:
         95:fb:35:ed:b8:38:88:c2:45:f9:27:7e:32:d1:35:de:25:ab:
         86:c1:96:16:66:d1:d0:f3:64:83:23:a8:a6:78:85:57:58:b5:
         f0:e5:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----