Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
File:                     323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa (raw, json)
Hash identifier:          HECt9EqUFH2DaWU4vErROgPfqVq2tIoWNQeM6UycbYo=
Subject key identifier:   C2:89:70:A1:34:37:80:18:23:C7:93:5D:09:95:A8:61:22:A6:E9:A0
Certificate issuer:       /CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
Certificate serial:       246D89F88B1B2037FB2DD94DB34D53DE5B80538A
Authority key identifier: B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa
Signing time:             Fri 18 Apr 2025 22:23:18 +0000
ROA not before:           Fri 18 Apr 2025 22:18:18 +0000
ROA not after:            Fri 17 Apr 2026 22:23:18 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6d:89:f8:8b:1b:20:37:fb:2d:d9:4d:b3:4d:53:de:5b:80:53:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa
        Validity
            Not Before: Apr 18 22:18:18 2025 GMT
            Not After : Apr 17 22:23:18 2026 GMT
        Subject: CN=C28970A13437801823C7935D0995A86122A6E9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:d8:83:76:ed:63:19:46:62:7b:e5:85:f0:
                    9c:b6:b6:f7:35:31:34:66:9c:b6:7b:87:d5:d2:2e:
                    2b:bc:7b:c0:68:f7:a4:a4:bd:bf:18:7d:39:26:81:
                    a9:44:1d:1b:c7:fa:82:e9:ec:65:9f:9a:ae:97:ef:
                    ae:2e:22:a2:af:3c:2b:11:2b:3d:a8:ef:c5:69:6c:
                    27:3e:7b:f1:21:d4:71:15:ae:b0:6e:fc:60:07:17:
                    b8:9b:fc:83:73:20:fc:42:0c:d3:21:ca:23:6a:90:
                    b8:58:d0:76:af:25:8e:e0:a0:22:bf:d3:62:59:d3:
                    25:fe:2d:50:bd:c1:fc:54:f4:dc:87:72:57:30:5b:
                    1f:6b:c1:77:15:d4:f7:f3:0d:c2:16:5e:76:73:80:
                    05:4e:2b:12:33:2a:b1:ee:ca:81:15:d8:88:d9:c7:
                    b8:8a:b0:87:c9:84:a6:3f:57:14:70:b6:93:4e:02:
                    00:bf:51:7b:da:60:64:62:37:c5:d8:88:9a:10:49:
                    b0:8d:e1:cd:f3:ca:97:40:25:bf:c0:45:21:74:f0:
                    85:44:fb:e5:04:3e:d1:e5:b3:6c:8f:e4:66:f9:72:
                    27:07:6d:07:ed:20:a9:5c:ce:1d:76:b5:94:81:46:
                    8f:24:a5:6c:8e:38:36:34:1a:86:7e:2b:44:a2:16:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:89:70:A1:34:37:80:18:23:C7:93:5D:09:95:A8:61:22:A6:E9:A0
            X509v3 Authority Key Identifier:
                keyid:B7:A0:74:D4:47:42:17:9D:41:03:F2:F9:2B:8D:D7:BE:39:57:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/B7A074D44742179D4103F2F92B8DD7BE39575CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c64d4ad-841b-40a9-957c-3cd1fe6bb15d/fcb20f59660c2effab022b7202c124ac0364a3f2f92f1e7faa.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4cab817b6be149c483d19430e2545310/0/323630323a666333623a6630303a3a2f34382d3438203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:6e:bc:c4:cf:34:6a:d5:bd:33:33:d2:53:0f:5b:f6:4c:
         15:c1:6a:ae:95:f4:92:60:dc:ad:cf:b6:d6:67:e5:b7:68:b0:
         c7:1c:96:12:c1:91:76:3c:e4:29:23:6c:4a:52:ec:df:4a:0a:
         cb:02:aa:fd:46:d3:4c:d6:19:0c:b8:21:11:33:70:03:2c:41:
         3e:9b:9c:42:25:5b:39:79:cc:a6:27:c2:c6:e2:e9:29:14:48:
         0a:e8:cc:9e:ff:26:b3:42:d2:58:0f:ed:e0:24:ca:a2:14:83:
         8d:18:12:38:b4:35:d5:43:f6:07:0b:77:48:ef:5e:7d:5c:3a:
         ce:4d:9a:48:08:e5:b3:b0:e0:a2:f0:b5:e2:d0:ae:dc:77:1a:
         2f:ab:f9:bb:d3:fd:a4:50:bb:46:23:00:5c:e6:61:46:a7:2f:
         26:2e:0e:ae:69:e1:b7:d3:a9:d3:6d:32:ca:6a:74:52:17:dc:
         43:a2:01:93:ec:39:2d:2f:dc:8e:b7:7a:bc:29:82:2e:53:71:
         ee:39:89:53:08:e1:3c:40:72:1b:b1:45:9f:24:01:16:2e:16:
         2d:2d:a7:c7:f3:6f:18:fe:e0:31:1f:9b:11:47:73:3c:9a:e0:
         d9:a6:e7:9f:1c:cc:cf:d5:b1:57:12:96:9d:ce:07:6f:45:13:
         1a:1d:8b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----