Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          W9MEXmDXvFx4vvWQUgQEsM7RmAcuQ+VWd7z26Zwmz8w=
Subject key identifier:   F1:0A:2D:12:59:E0:3C:C2:89:C8:58:EA:20:67:FA:C5:30:55:9D:0E
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       175B3A77EB2CE5FD1DC35C2AEEE4A005482EEB6E
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:44 +0000
ROA not before:           Fri 18 Apr 2025 22:17:44 +0000
ROA not after:            Fri 17 Apr 2026 22:22:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5b:3a:77:eb:2c:e5:fd:1d:c3:5c:2a:ee:e4:a0:05:48:2e:eb:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:44 2025 GMT
            Not After : Apr 17 22:22:44 2026 GMT
        Subject: CN=F10A2D1259E03CC289C858EA2067FAC530559D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b8:e7:23:ad:0c:e6:5b:3e:49:67:21:f1:ce:
                    18:6c:3b:40:6f:fc:5a:7f:3d:97:e9:23:62:8c:5f:
                    34:9b:a3:ed:34:90:34:c7:ed:2f:f8:02:39:dc:20:
                    36:29:01:35:bf:d0:cd:a2:3b:3c:87:a0:1c:dc:1c:
                    7b:ce:2c:9a:6c:7f:8a:c0:9d:6a:e3:1a:17:b4:fb:
                    2a:1f:a5:33:0d:e7:4f:82:e1:bc:93:7c:68:f0:21:
                    84:4a:06:d5:70:0e:cb:d7:10:43:17:3d:dc:01:e6:
                    1f:ca:d5:b8:33:bd:8f:5c:b7:03:d4:f1:2e:b0:f6:
                    41:68:fa:73:3a:fa:9e:42:31:80:f3:12:9f:e6:6e:
                    9d:61:70:93:50:3e:91:a9:36:f4:4c:b6:04:ba:6e:
                    71:95:4b:5e:84:bd:88:4c:05:4d:f6:a4:dd:0f:2c:
                    da:54:e9:72:d0:9c:bc:6f:91:4d:44:43:a0:6b:8d:
                    95:5b:c1:de:8f:1b:19:11:65:dd:6c:a8:5a:6d:69:
                    60:d4:bf:78:2c:e5:ba:fc:04:ff:cc:ae:8a:7e:c1:
                    15:b4:38:6a:17:ff:a7:cb:2b:60:20:07:51:9e:61:
                    97:40:ae:ba:dd:c1:7c:ee:c8:1d:78:67:e9:b5:b7:
                    12:94:7a:83:b3:1e:b0:51:57:58:c1:78:ea:c4:4a:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:2D:12:59:E0:3C:C2:89:C8:58:EA:20:67:FA:C5:30:55:9D:0E
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3430303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:fa:27:56:fc:f2:ea:62:da:19:f7:ae:c5:24:c0:41:93:d9:
         77:6e:6b:28:ff:ec:3c:84:3d:20:19:6b:6d:8a:c8:67:1e:d6:
         0e:41:c3:0c:83:6a:fe:1d:20:1f:04:c3:d7:8f:a7:7c:3f:ef:
         45:29:be:99:18:b3:71:c6:69:45:75:c6:7e:37:65:b2:0c:1d:
         ce:ae:80:d1:b7:fb:98:d9:d7:a4:ef:85:3a:9c:9a:34:ca:fd:
         13:f2:dd:0c:ab:fb:3f:06:c2:51:aa:59:47:81:1d:33:36:5e:
         c6:45:b9:e5:b3:ff:b2:ac:b8:3a:bf:15:2d:32:1b:42:e4:6b:
         0e:e9:73:05:cb:2d:43:f1:d2:2f:c3:a1:42:b3:f9:08:5b:d4:
         99:a3:80:c5:bc:d8:65:d2:8d:ae:5a:50:0e:e3:e3:38:76:ce:
         07:36:2c:f9:f4:3f:87:1d:ae:a6:fe:77:7c:3f:35:44:2a:f8:
         47:79:32:3e:c3:5f:39:a0:80:f4:20:1a:6b:f9:c5:50:a0:a2:
         95:f5:36:ff:9e:0b:fc:c9:0c:26:49:3a:4b:c6:d5:34:05:c7:
         8e:1c:f8:6c:ac:6f:90:b2:a5:4c:f4:7e:6c:cd:3d:0a:2f:fe:
         14:cd:4b:cc:5d:36:4e:1b:b9:37:d1:40:22:a1:d1:b5:15:6c:
         b9:f6:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----