Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          Bjn6tSabBaLfoR5WSqRaVfegsX8jI89CK9tbeMb2m90=
Subject key identifier:   B5:98:E2:ED:5F:16:0B:E5:A9:65:73:AD:79:87:71:5F:50:A4:98:9A
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       228637FFA09B5A4E587263DE75FC45D40A7730EB
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:22:28 +0000
ROA not before:           Fri 18 Apr 2025 22:17:28 +0000
ROA not after:            Fri 17 Apr 2026 22:22:28 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:86:37:ff:a0:9b:5a:4e:58:72:63:de:75:fc:45:d4:0a:77:30:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:17:28 2025 GMT
            Not After : Apr 17 22:22:28 2026 GMT
        Subject: CN=B598E2ED5F160BE5A96573AD7987715F50A4989A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:9c:5f:bd:ff:02:20:31:68:a5:68:85:95:
                    d5:a9:20:12:4d:04:a4:7f:91:e8:d5:64:c5:29:aa:
                    0c:8c:52:64:1c:9f:09:d5:32:7a:62:af:fd:6a:66:
                    15:73:1c:ba:df:21:0a:d5:18:6f:36:be:b7:59:81:
                    7c:ad:68:79:9d:2e:5b:24:81:c5:59:2f:6f:73:f9:
                    ee:1f:fb:ff:a1:8e:5d:b4:df:84:77:56:13:7b:be:
                    8b:4e:be:ed:7c:75:95:3e:f2:16:37:3f:42:52:40:
                    b9:79:88:6e:a3:c2:c9:0a:ef:1b:6c:1f:3b:14:4b:
                    52:d9:5e:4d:e4:c4:37:37:5e:d4:5d:d4:db:e0:d0:
                    21:47:e4:46:1d:20:cc:5b:eb:bc:90:31:fc:38:6a:
                    16:84:33:57:c2:c9:67:91:79:5d:d9:43:23:f9:bc:
                    7e:d9:5a:f9:e4:4b:33:5b:90:20:5d:c8:ed:da:64:
                    a2:17:10:c5:39:33:da:99:88:b2:4c:cf:2e:6d:75:
                    90:fe:fc:85:00:37:da:5a:c2:fc:c4:a3:9a:88:33:
                    55:d7:f5:42:e4:b4:14:76:0a:0b:34:76:a1:66:22:
                    ed:67:34:ce:13:54:5a:47:ad:5a:ee:91:da:cc:05:
                    01:6b:76:b3:49:63:e1:31:40:d2:d1:9f:78:75:8a:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:E2:ED:5F:16:0B:E5:A9:65:73:AD:79:87:71:5F:50:A4:98:9A
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:eb:bb:8e:7f:9b:d4:0a:ef:e1:60:c7:44:c4:80:87:01:
         41:9b:83:fa:46:1e:21:fd:8a:97:f9:8b:21:4d:46:7a:2d:49:
         49:06:18:7f:28:8d:62:b1:a5:7b:74:81:3e:95:36:75:b0:a3:
         82:fc:7f:ba:ca:ec:46:c4:b8:5d:b5:ef:7e:5b:e1:c0:38:52:
         20:af:99:cd:71:41:93:58:64:d0:e4:3c:da:56:7d:50:82:c8:
         46:04:e7:43:40:ca:8b:d1:8f:ec:2a:ef:f3:6a:91:60:ef:87:
         b5:3d:a1:62:d4:36:07:9c:a7:d2:ec:25:5b:f9:f1:1a:88:18:
         2d:24:4c:55:79:25:f7:db:e1:f9:8c:2c:20:6d:91:da:f7:ff:
         59:46:d1:fe:3a:e8:6b:2c:00:21:09:cc:2b:d7:f8:65:53:8a:
         1d:ba:3f:73:5d:27:14:91:40:e6:da:c3:71:8e:98:07:89:a6:
         9b:57:e6:be:89:f2:69:fb:a2:d0:54:4c:bf:df:8d:7a:d3:62:
         d3:d6:0a:62:ea:5d:21:17:d0:38:b2:6c:04:a2:c1:b3:84:bd:
         7b:90:3d:d1:a2:5a:f7:20:d8:ee:4c:53:2c:e7:21:43:63:00:
         6d:eb:0e:ef:18:d0:ee:48:82:f5:f1:06:a8:b3:f1:ab:79:0f:
         15:37:b9:9d
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUIoY3/6CbWk5YcmPedfxF1Ap3MOswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjBjMmVmZmFiMDIyYjcyMDJjMTI0YWMw
MzY0YTNmMmY5MmYxZTdmYWEwHhcNMjUwNDE4MjIxNzI4WhcNMjYwNDE3MjIyMjI4
WjAzMTEwLwYDVQQDEyhCNTk4RTJFRDVGMTYwQkU1QTk2NTczQUQ3OTg3NzE1RjUw
QTQ5ODlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LWcX73/AiAx
aKVohZXVqSASTQSkf5Ho1WTFKaoMjFJkHJ8J1TJ6Yq/9amYVcxy63yEK1RhvNr63
WYF8rWh5nS5bJIHFWS9vc/nuH/v/oY5dtN+Ed1YTe76LTr7tfHWVPvIWNz9CUkC5
eYhuo8LJCu8bbB87FEtS2V5N5MQ3N17UXdTb4NAhR+RGHSDMW+u8kDH8OGoWhDNX
wslnkXld2UMj+bx+2Vr55EszW5AgXcjt2mSiFxDFOTPamYiyTM8ubXWQ/vyFADfa
WsL8xKOaiDNV1/VC5LQUdgoLNHahZiLtZzTOE1RaR61a7pHazAUBa3azSWPhMUDS
0Z94dYo7TQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFLWY4u1fFgvlqWVzrXmHcV9Q
pJiaMB8GA1UdIwQYMBaAFLegdNRHQhedQQPy+SuN1745V1zVMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRjYWI4MTdiNmJlMTQ5YzQ4M2QxOTQzMGUyNTQ1MzEwLzAv
QjdBMDc0RDQ0NzQyMTc5RDQxMDNGMkY5MkI4REQ3QkUzOTU3NUNENS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzljNjRkNGFkLTg0MWItNDBhOS05NTdjLTNjZDFmZTZiYjE1ZC9mY2Iy
MGY1OTY2MGMyZWZmYWIwMjJiNzIwMmMxMjRhYzAzNjRhM2YyZjkyZjFlN2ZhYS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS80Y2FiODE3YjZiZTE0OWM0ODNkMTk0
MzBlMjU0NTMxMC8wLzMyMzYzMDMyM2E2NjYzMzM2MjNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDMzMzkzOTM5MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/DsAADANBgkqhkiG9w0B
AQsFAAOCAQEADFLru45/m9QK7+Fgx0TEgIcBQZuD+kYeIf2Kl/mLIU1Gei1JSQYY
fyiNYrGle3SBPpU2dbCjgvx/usrsRsS4XbXvflvhwDhSIK+ZzXFBk1hk0OQ82lZ9
UILIRgTnQ0DKi9GP7Crv82qRYO+HtT2hYtQ2B5yn0uwlW/nxGogYLSRMVXkl99vh
+YwsIG2R2vf/WUbR/jroaywAIQnMK9f4ZVOKHbo/c10nFJFA5trDcY6YB4mmm1fm
vonyafui0FRMv9+NetNi09YKYupdIRfQOLJsBKLBs4S9e5A90aJa9yDY7kxTLOch
Q2MAbesO7xjQ7kiC9fEGqLPxq3kPFTe5nQ==
-----END CERTIFICATE-----