Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          noO6LaTDLI7fnkd8GhC0s7DuR6yA2dSZ0GqgInWs+9M=
Subject key identifier:   14:67:AC:5B:6E:0B:66:4D:3A:10:58:7A:4F:3B:D5:AC:E1:1D:6F:5F
Certificate issuer:       /CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
Certificate serial:       6CF5F9667701D052CEAD2DB9F2AE1E3DA9EC6BE2
Authority key identifier: E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Tue 31 Jan 2023 16:26:37 +0000
ROA not before:           Tue 31 Jan 2023 16:21:37 +0000
ROA not after:            Tue 30 Jan 2024 16:26:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f5:f9:66:77:01:d0:52:ce:ad:2d:b9:f2:ae:1e:3d:a9:ec:6b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1
        Validity
            Not Before: Jan 31 16:21:37 2023 GMT
            Not After : Jan 30 16:26:37 2024 GMT
        Subject: CN=1467AC5B6E0B664D3A10587A4F3BD5ACE11D6F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:cd:db:70:27:5b:e1:8d:a6:1e:13:58:b2:
                    f9:fb:f4:b5:e3:b2:17:0b:b8:16:c7:40:a2:80:7e:
                    e4:05:28:5d:83:2d:f9:bf:01:c9:3a:32:a2:a3:a9:
                    85:af:21:15:3a:0f:86:9b:c5:4f:a0:01:c9:ba:37:
                    9f:38:a7:84:38:9b:e4:b0:39:aa:63:a5:4e:b7:bc:
                    5d:a0:33:06:6a:8d:46:f0:43:39:d6:2c:4f:ff:49:
                    de:42:f8:5e:35:31:39:e4:24:e5:40:09:36:65:70:
                    40:63:94:49:d7:76:0c:d9:c0:ca:10:c7:29:14:61:
                    c9:3f:a4:c7:a3:28:ce:30:81:93:7e:31:2d:a4:59:
                    42:72:58:95:14:34:7d:b5:f2:bb:79:16:6b:f1:3c:
                    17:be:6e:ec:c6:73:2a:ca:06:2c:c9:e5:fe:32:c5:
                    3e:8a:34:36:b5:e3:8c:a7:6c:55:c9:70:e5:fc:34:
                    93:e1:a7:6a:d8:bd:dc:6d:e8:64:47:ea:b2:33:79:
                    90:3b:b2:0c:cc:07:33:58:32:25:7a:d0:53:06:97:
                    20:33:05:b2:c4:67:a3:f4:34:8d:75:f8:18:ed:47:
                    fb:44:6f:80:c7:80:c4:60:75:0b:6b:fc:0a:ae:39:
                    3d:9e:6d:2d:ea:62:cd:63:d0:8f:23:5b:39:34:57:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:67:AC:5B:6E:0B:66:4D:3A:10:58:7A:4F:3B:D5:AC:E1:1D:6F:5F
            X509v3 Authority Key Identifier:
                keyid:E6:90:83:63:80:85:3D:B0:77:35:66:AB:46:20:AC:B4:F3:DD:3E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/E690836380853DB0773566AB4620ACB4F3DD3E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/93dbef53-2166-44a6-a13b-260fc343eeee/fcb20f5966064b7393431d7702b18d610fc871d49c0dc355f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e40186045780dc0024/0/323630323a666333623a3230303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:69:25:19:69:0c:76:9e:81:92:a0:cc:32:ec:1a:2b:a8:6b:
         f8:97:eb:f6:1b:2d:72:8f:22:28:0b:56:dc:76:35:f1:92:01:
         2a:34:be:d1:6c:a9:18:b7:85:86:6c:73:ef:1e:59:f8:a7:90:
         1f:19:ce:b1:82:71:ec:03:76:c8:80:be:a9:eb:2b:a3:ce:b9:
         69:c3:bd:06:0f:0d:71:46:4a:ca:2c:25:2e:fa:b7:5f:5e:79:
         73:d3:75:02:a2:63:e0:50:5e:76:04:0e:94:43:ad:7b:06:bc:
         3e:c0:4f:cc:9a:d9:75:8d:f3:66:33:52:35:ae:2a:03:de:24:
         8a:ee:c7:72:87:af:bc:ef:bc:d1:08:d1:bf:75:09:72:70:0a:
         2c:3d:aa:60:6f:39:73:10:7d:84:f1:54:6b:d5:ab:03:64:a1:
         73:32:31:d8:ae:04:e0:30:0f:79:95:15:be:cb:1d:e7:57:d1:
         30:65:c1:59:ae:b2:c9:a7:6c:d1:8d:fe:05:81:29:77:10:b7:
         78:22:fc:22:56:4f:a4:e1:77:ef:e5:87:01:56:99:23:a8:64:
         10:3a:a9:83:ab:11:77:e4:05:c5:6d:32:8f:d8:db:f1:63:ba:
         a1:78:4c:40:09:07:36:71:44:0e:f3:90:f6:bf:98:91:e4:85:
         1b:82:91:ed
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUbPX5ZncB0FLOrS258q4ePansa+IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjA2NGI3MzkzNDMxZDc3MDJiMThkNjEw
ZmM4NzFkNDljMGRjMzU1ZjEwHhcNMjMwMTMxMTYyMTM3WhcNMjQwMTMwMTYyNjM3
WjAzMTEwLwYDVQQDEygxNDY3QUM1QjZFMEI2NjREM0ExMDU4N0E0RjNCRDVBQ0Ux
MUQ2RjVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S3N23AnW+GN
ph4TWLL5+/S147IXC7gWx0CigH7kBShdgy35vwHJOjKio6mFryEVOg+Gm8VPoAHJ
ujefOKeEOJvksDmqY6VOt7xdoDMGao1G8EM51ixP/0neQvheNTE55CTlQAk2ZXBA
Y5RJ13YM2cDKEMcpFGHJP6THoyjOMIGTfjEtpFlCcliVFDR9tfK7eRZr8TwXvm7s
xnMqygYsyeX+MsU+ijQ2teOMp2xVyXDl/DST4adq2L3cbehkR+qyM3mQO7IMzAcz
WDIletBTBpcgMwWyxGej9DSNdfgY7Uf7RG+Ax4DEYHULa/wKrjk9nm0t6mLNY9CP
I1s5NFdhewIDAQABo4ICvTCCArkwHQYDVR0OBBYEFBRnrFtuC2ZNOhBYek871azh
HW9fMB8GA1UdIwQYMBaAFOaQg2OAhT2wdzVmq0YgrLTz3T43MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODYwNDQ2ZTQwMTg2MDQ1NzgwZGMwMDI0LzAv
RTY5MDgzNjM4MDg1M0RCMDc3MzU2NkFCNDYyMEFDQjRGM0REM0UzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzkzZGJlZjUzLTIxNjYtNDRhNi1hMTNiLTI2MGZjMzQzZWVlZS9mY2Iy
MGY1OTY2MDY0YjczOTM0MzFkNzcwMmIxOGQ2MTBmYzg3MWQ0OWMwZGMzNTVmMS5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2MDQ0NmU0MDE4NjA0
NTc4MGRjMDAyNC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhMzIzMDMwM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM5MzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OwIAMA0G
CSqGSIb3DQEBCwUAA4IBAQBTaSUZaQx2noGSoMwy7BorqGv4l+v2Gy1yjyIoC1bc
djXxkgEqNL7RbKkYt4WGbHPvHln4p5AfGc6xgnHsA3bIgL6p6yujzrlpw70GDw1x
RkrKLCUu+rdfXnlz03UComPgUF52BA6UQ617Brw+wE/Mmtl1jfNmM1I1rioD3iSK
7sdyh6+877zRCNG/dQlycAosPapgbzlzEH2E8VRr1asDZKFzMjHYrgTgMA95lRW+
yx3nV9EwZcFZrrLJp2zRjf4FgSl3ELd4IvwiVk+k4Xfv5YcBVpkjqGQQOqmDqxF3
5AXFbTKP2NvxY7qheExACQc2cUQO85D2v5iR5IUbgpHt
-----END CERTIFICATE-----