Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          NoCHx+d0oPrNg9SwxjtEjgOOCT7sko1GoX0kK31AErc=
Subject key identifier:   BB:67:C5:83:8D:92:7B:86:00:5F:7B:4B:FC:1C:87:9B:45:5C:7D:CA
Certificate issuer:       /CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
Certificate serial:       450C90681C08249CDDFA10CDF47D4E40F57B6427
Authority key identifier: E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 Jan 2023 16:26:03 +0000
ROA not before:           Tue 31 Jan 2023 16:21:03 +0000
ROA not after:            Tue 30 Jan 2024 16:26:03 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0c:90:68:1c:08:24:9c:dd:fa:10:cd:f4:7d:4e:40:f5:7b:64:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
        Validity
            Not Before: Jan 31 16:21:03 2023 GMT
            Not After : Jan 30 16:26:03 2024 GMT
        Subject: CN=BB67C5838D927B86005F7B4BFC1C879B455C7DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:31:c2:49:0a:d1:15:66:16:37:bb:49:32:d8:
                    d1:b1:59:56:35:8a:61:8f:02:2b:01:79:36:bf:19:
                    7e:45:f3:e0:f8:7b:f9:0a:e3:52:3c:3f:9c:54:7b:
                    e5:a4:86:59:26:28:a1:21:88:9f:94:59:25:fd:0c:
                    ce:a4:17:09:5c:a6:bc:e4:48:e0:70:18:de:22:5b:
                    7c:ec:c5:28:68:bb:ca:2e:af:03:2e:bb:2f:65:83:
                    da:5f:a8:0f:fc:e7:91:42:a3:33:23:dc:4a:7b:96:
                    b5:e9:c7:2c:0e:47:2e:bb:ca:06:b2:d6:5e:45:d9:
                    13:d0:16:ef:0e:95:0f:7b:c8:dc:b9:1b:33:5b:d0:
                    90:1c:e2:d3:fe:b9:c7:ec:48:8e:cb:cc:bf:a9:1d:
                    ef:49:18:1b:25:85:c4:57:46:b9:a5:ce:f8:13:7a:
                    b4:5c:2f:3f:ab:cb:b5:2c:a9:68:26:bc:b7:33:f6:
                    d5:31:84:37:a5:40:96:21:ff:da:2e:4d:1e:78:20:
                    1a:6f:04:4e:cd:5f:ce:22:ac:a3:e0:dd:87:16:6b:
                    79:cb:65:b4:a6:a0:a4:37:bf:c3:5e:f3:e7:af:92:
                    04:0c:1a:16:3a:cb:73:4c:33:b7:9c:57:f5:21:26:
                    72:54:51:39:34:1e:eb:a5:ef:f4:8d:84:0b:70:6e:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:C5:83:8D:92:7B:86:00:5F:7B:4B:FC:1C:87:9B:45:5C:7D:CA
            X509v3 Authority Key Identifier:
                keyid:E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/E690836380853DB0773566AB4620ACB4F3DD3E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3130303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:29:45:2c:56:08:71:2d:f7:75:7a:f4:d8:21:31:93:96:5d:
         1a:5c:8b:5c:8c:e4:85:fb:15:84:35:46:9f:9a:be:76:ab:fe:
         b1:d0:7d:ca:d9:05:09:32:c7:2e:3f:0a:59:a6:67:b6:48:32:
         e5:9c:d0:ef:7c:b2:54:89:68:ae:98:0f:cd:b4:a0:75:1b:49:
         9d:94:7b:73:89:cd:47:a2:84:35:26:e5:3e:79:8c:d4:08:33:
         6e:f8:77:ef:42:f2:a9:9c:be:4a:7e:78:6d:5c:0d:fb:f9:ea:
         94:4b:54:5e:8c:67:ff:c9:5d:82:ed:81:51:2a:51:10:2e:54:
         3b:7f:1e:e9:3a:b4:af:fe:5b:35:2b:5d:39:a7:c3:d7:3d:b1:
         99:89:61:99:8d:e5:85:a2:e3:c1:a8:db:ec:cf:86:17:a9:e1:
         d4:54:4c:78:6f:6a:ac:fb:5c:f9:dd:39:92:32:24:87:ff:21:
         06:f7:97:8d:ef:2c:05:e8:be:ee:97:4e:b9:39:d0:b3:3b:10:
         53:df:8d:ba:1c:a4:73:ea:5b:7d:a6:62:de:6b:4e:71:b9:44:
         12:e3:e8:f3:dd:34:57:1a:19:81:ac:12:44:48:1a:90:46:aa:
         b7:cf:73:65:4d:80:28:6f:a1:03:f0:7f:0a:b7:ee:cb:6f:a6:
         98:32:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----