Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
File:                     323630323a666333623a3a2f33362d3336203d3e20333939393730.roa (raw, json)
Hash identifier:          Zus/NB/rmavHf6/sQ4qrh4xeCux/kpaV0abRYq8KVy0=
Subject key identifier:   B8:B4:59:1E:D3:56:AB:6F:A6:30:8C:C0:4C:01:48:04:EF:4F:3E:34
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       228C9660DA48198C44074946E7DF8CE65B313B7C
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:34:47 +0000
ROA not before:           Fri 09 Feb 2024 22:29:47 +0000
ROA not after:            Fri 07 Feb 2025 22:34:47 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8c:96:60:da:48:19:8c:44:07:49:46:e7:df:8c:e6:5b:31:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:29:47 2024 GMT
            Not After : Feb  7 22:34:47 2025 GMT
        Subject: CN=B8B4591ED356AB6FA6308CC04C014804EF4F3E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:f0:58:92:12:ba:29:a3:c8:f0:31:e8:8a:
                    b7:0c:64:33:36:4b:2a:10:f5:3f:e1:97:85:00:96:
                    58:77:18:83:13:63:c7:73:de:96:9e:8c:ee:bb:fc:
                    19:57:71:82:0a:75:9a:99:56:4d:bf:09:f9:9b:81:
                    74:c2:5c:a2:92:5a:51:83:4d:3c:6a:35:c1:32:c4:
                    4d:0c:6c:79:1e:3a:b4:49:ef:55:de:97:a5:9c:c8:
                    6b:59:5d:63:07:af:b8:58:18:bb:3a:aa:a1:d3:a9:
                    5f:68:fa:3f:2d:3d:48:f1:ea:d5:56:3a:7d:06:7a:
                    1e:bc:0f:54:19:0b:f7:c3:57:2f:0f:35:5f:25:39:
                    a2:7b:57:56:44:71:f3:9e:7d:62:c9:d8:fa:0f:10:
                    92:92:48:19:fe:0c:81:d1:80:da:0c:4c:11:9e:58:
                    5d:74:15:a9:12:66:7a:08:c9:b0:a7:8c:51:74:da:
                    c1:8f:04:dd:3e:d9:d0:9e:28:b4:d3:c4:bb:1e:84:
                    b0:56:50:a6:27:b0:71:20:ff:2c:e3:8f:84:69:fb:
                    be:15:3f:0e:b2:65:68:1c:d4:36:a0:bd:32:51:00:
                    cd:c9:04:f3:f4:f1:2f:b6:87:b9:81:4a:f3:e1:3d:
                    66:0a:23:aa:9c:f8:7f:31:28:cd:08:11:68:d8:b6:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:59:1E:D3:56:AB:6F:A6:30:8C:C0:4C:01:48:04:EF:4F:3E:34
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/323630323a666333623a3a2f33362d3336203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:d8:9f:6c:7e:9f:74:d8:d1:de:2e:af:a5:c8:15:ff:bc:
         42:bb:85:e7:c2:74:a3:29:46:03:6e:41:23:ac:b6:66:e1:b1:
         ae:fa:78:82:4a:ab:a0:67:fe:b1:7e:05:52:82:49:7d:ef:a5:
         30:c1:57:77:fe:69:7f:60:48:fc:50:62:c3:9c:40:ea:3d:f2:
         3d:b9:88:f6:11:62:dc:33:cf:27:e5:fc:a5:0f:b6:2f:53:6e:
         49:5e:6a:45:86:2a:1b:33:9d:af:cd:d7:9b:78:a6:92:66:06:
         a5:cf:31:aa:7c:b0:d5:4c:e2:7b:1d:99:99:fa:c6:fd:03:6c:
         0b:fa:bd:03:2c:99:17:44:2a:c7:2d:b0:9e:df:1e:4c:de:e6:
         ca:51:dc:2a:cd:0b:c8:13:10:a0:4c:d4:27:34:aa:5c:41:07:
         30:8e:be:f2:bc:5e:2c:72:14:5c:0d:99:ff:ab:5c:90:70:b0:
         1f:1b:2b:bb:31:56:41:c6:b0:fc:30:59:4d:9e:fc:d7:6c:d3:
         b1:2b:35:2c:0f:cb:2b:89:08:e5:de:b1:b2:12:6c:a5:28:01:
         17:95:85:8d:0b:a2:e5:14:28:7a:1f:77:64:90:1d:ec:89:b6:
         b2:06:c3:47:ab:55:7d:d1:8c:61:2e:4d:da:78:62:cd:8f:3b:
         c7:81:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----