Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          bh+WyjNenNmEPe+Tx8ir/6Sut9R2YM8NpHYBe0rlcr8=
Subject key identifier:   E1:39:7F:22:F2:5C:F9:42:16:EC:2E:40:EF:EB:99:82:18:BD:62:A3
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       5F6DC66593774078CA24B17848FCE2EBF543BB95
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:53 +0000
ROA not before:           Fri 18 Apr 2025 22:17:53 +0000
ROA not after:            Fri 17 Apr 2026 22:22:53 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6d:c6:65:93:77:40:78:ca:24:b1:78:48:fc:e2:eb:f5:43:bb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:53 2025 GMT
            Not After : Apr 17 22:22:53 2026 GMT
        Subject: CN=E1397F22F25CF94216EC2E40EFEB998218BD62A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:bf:28:e3:5b:8a:a8:ba:b6:58:03:9d:b9:
                    86:c0:f9:e5:8a:1d:d1:9b:fe:74:1f:49:6a:ed:34:
                    a7:99:fa:ef:e7:68:ac:51:0d:bc:c1:a5:ea:12:a1:
                    09:94:dd:bc:fa:b6:dc:f3:3a:37:85:ef:79:63:42:
                    5b:93:f5:6f:08:c6:26:79:6b:87:49:db:ad:f1:f9:
                    45:f2:6b:3e:25:01:07:10:8f:1d:f8:87:f5:61:6b:
                    50:87:ec:ec:81:1d:fd:21:a4:8c:4b:11:48:73:52:
                    b0:b1:a2:94:af:4e:a4:58:98:4c:5e:7d:c1:53:47:
                    10:31:a5:59:e9:ad:54:84:8b:bc:cc:3b:94:a7:ff:
                    0e:55:e4:93:8d:3e:81:76:56:52:1d:30:e7:9f:67:
                    d4:ff:5f:c5:cd:81:f9:3a:1e:8a:01:ee:b2:f2:62:
                    49:d9:9b:ac:74:1b:bd:36:66:40:44:57:d3:02:82:
                    7a:2e:25:1d:f5:00:a8:8f:1e:50:9a:d9:3d:d5:fb:
                    8f:1b:7f:6d:dd:5e:b9:cb:07:f6:63:8c:3d:8c:ce:
                    ed:e0:01:85:7d:62:96:72:78:9b:5f:00:a5:76:2a:
                    a8:b5:c8:23:8c:f6:50:26:87:8f:bc:7c:bd:8f:d9:
                    88:a8:1a:79:62:60:e9:ca:3f:49:8d:b2:2e:19:67:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:7F:22:F2:5C:F9:42:16:EC:2E:40:EF:EB:99:82:18:BD:62:A3
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:c9:fd:04:2d:d1:da:55:5a:e1:c8:e7:ad:23:41:81:19:b2:
         e3:47:29:23:c5:f1:d7:0d:e7:d8:9d:b0:bb:a5:c6:0a:27:5a:
         93:b7:db:4a:fd:ed:2b:30:2e:9d:69:8d:d4:66:38:9b:42:b1:
         86:b7:ec:d6:8e:c4:ed:13:6c:dc:21:0f:92:7f:47:b7:ac:87:
         16:10:1b:19:5e:39:4a:6f:ee:2a:76:f3:e0:cc:43:0c:2c:88:
         7d:12:83:88:9a:53:b2:d5:36:5e:cb:9d:30:ec:81:48:91:ed:
         0e:9d:18:86:31:f6:64:8d:4e:08:74:ca:5f:9e:da:0d:14:e8:
         d7:e2:2b:f1:bc:10:1e:fd:0f:2d:28:4b:4e:b8:c0:5e:8c:4c:
         ad:dc:08:ac:eb:f8:cb:14:4f:5a:1c:0f:d1:0e:35:ae:33:2b:
         ba:2f:d0:b4:53:a8:1b:c5:9d:18:8f:4b:6f:a4:18:ba:84:0b:
         81:65:4a:78:69:44:27:44:12:ff:8a:cd:4f:6b:52:95:1d:8b:
         fe:87:52:7f:15:ff:13:89:2b:ff:4c:49:c3:15:48:bc:fb:d7:
         1a:07:ac:34:88:b7:03:ed:f4:75:53:16:c7:26:5d:5a:c2:90:
         68:b6:a1:d3:ad:17:97:9c:ea:be:44:78:fb:ad:d7:61:d1:40:
         f3:58:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----