Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          yNHrovKajKe8bvL6TQx59MtHCqCuRfZoPO3ivtMYC1Q=
Subject key identifier:   3F:8C:3D:34:DB:B4:6C:96:11:64:EB:C2:C7:29:2F:0D:66:1C:55:F7
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       533E70BA7AC1BF265CBA7A83F0B82E3DC38232E4
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:23:16 +0000
ROA not before:           Fri 18 Apr 2025 22:18:16 +0000
ROA not after:            Fri 17 Apr 2026 22:23:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3e:70:ba:7a:c1:bf:26:5c:ba:7a:83:f0:b8:2e:3d:c3:82:32:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:18:16 2025 GMT
            Not After : Apr 17 22:23:16 2026 GMT
        Subject: CN=3F8C3D34DBB46C961164EBC2C7292F0D661C55F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:8d:01:0e:7f:61:fb:23:8d:e0:59:b0:b2:
                    30:f0:f0:63:ef:48:73:91:5d:dc:26:20:b6:fb:49:
                    f4:fe:6f:c5:80:24:46:20:2e:b0:34:bd:1a:5d:01:
                    3d:3d:09:f7:9b:97:12:8b:d7:f0:47:ad:bc:8a:87:
                    b8:cf:44:4b:89:d5:eb:f6:c5:ff:f7:27:da:d2:12:
                    09:3f:9a:fe:19:20:40:b9:50:bd:a5:5e:af:37:c3:
                    09:21:6f:06:9f:3e:47:3e:1d:57:2e:63:11:fe:a0:
                    6e:ea:e3:91:4b:da:32:4b:6d:9d:bc:8f:46:53:90:
                    fa:3b:ac:5e:69:a9:7a:ca:2d:76:19:62:20:f3:de:
                    66:41:d5:1b:8b:30:0f:48:22:5a:67:d9:51:99:28:
                    8e:2e:29:39:76:c9:1f:71:4d:ac:ae:13:a0:20:9e:
                    cf:a2:b8:45:67:e4:f1:1e:7e:d4:14:91:79:eb:b0:
                    df:e7:55:60:20:15:7f:e2:29:d0:ca:16:44:8a:c3:
                    1d:d6:0e:ca:75:2f:ed:85:85:fd:18:68:a5:99:d9:
                    de:b8:36:30:c5:af:f5:c7:ce:dc:f3:df:43:4c:ec:
                    68:f7:db:b1:45:bb:9e:53:99:df:0d:5a:2a:8e:e7:
                    78:ce:a3:ee:3f:95:b2:8c:94:3d:63:1d:69:a0:b0:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:3D:34:DB:B4:6C:96:11:64:EB:C2:C7:29:2F:0D:66:1C:55:F7
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6530303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:d9:68:27:3a:24:02:b6:8f:66:44:ee:93:e5:3b:82:bb:
         f7:e6:a2:de:da:cb:d1:5c:bd:9e:27:46:e6:58:a2:0c:b7:4c:
         ec:8b:56:6f:2b:3e:df:81:36:e2:b6:7a:2e:78:57:63:e5:cf:
         c2:11:a9:d9:fe:47:47:6b:c0:dd:9f:da:f0:d3:72:5f:fb:54:
         95:60:ed:99:51:75:a3:7d:e6:db:58:dd:75:95:76:a9:3d:02:
         4d:d0:58:de:f3:73:79:b6:a6:5f:ff:dc:46:b1:71:63:2d:ae:
         f4:1e:c8:7f:d5:33:bb:b0:f3:85:f7:cd:ed:d6:66:38:f7:96:
         97:f9:50:0b:b4:43:c8:fc:4a:7b:06:25:38:95:95:c3:ed:b7:
         fc:90:c0:52:fc:44:07:e0:ac:a0:69:15:23:2b:2f:31:3f:0b:
         15:06:ba:f1:b0:e9:92:18:eb:3e:cf:5c:d0:d5:53:91:07:f1:
         8d:0d:b4:1d:dc:36:3c:1a:c2:81:9e:b6:3a:70:d3:7b:f6:74:
         55:72:dc:07:d9:ca:79:71:fd:b9:c3:66:8e:65:13:ee:50:ce:
         9f:f8:95:58:07:4d:fd:18:b4:75:f0:26:9e:66:d5:e9:39:7d:
         a2:9c:b7:bd:b1:34:85:bb:a0:74:c4:60:06:1c:24:6e:b0:a3:
         f2:ea:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----