Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/4c8cb017-c832-393d-9187-5a235daa8b55.roa
File:                     4c8cb017-c832-393d-9187-5a235daa8b55.roa (raw, json)
Hash identifier:          bWV0iqd5ULk1+s7eCJG5QckM97KgPoJKgSBjMCb5VWU=
Subject key identifier:   E2:5E:11:75:E9:1A:C4:D9:1D:1D:E2:35:F8:1C:D9:53:21:7B:61:41
Certificate issuer:       /CN=54b1659b-ba41-4341-b59b-302264dea33e
Certificate serial:       010D0C9F4328583EB88AB967AF67EE5BC10F6040
Authority key identifier: 72:9F:E8:9F:BC:EC:6A:F5:C3:96:0B:DE:8F:AF:D3:B9:D4:8D:80:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/4c8cb017-c832-393d-9187-5a235daa8b55.roa
Signing time:             Fri 03 Jun 2022 20:12:08 +0000
ROA not before:           Fri 03 Jun 2022 20:12:08 +0000
ROA not after:            Tue 27 Aug 2024 04:00:00 +0000
asID:                     23428
IP address blocks:        2602:fb68:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b8:8a:b9:67:af:67:ee:5b:c1:0f:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b1659b-ba41-4341-b59b-302264dea33e
        Validity
            Not Before: Jun  3 20:12:08 2022 GMT
            Not After : Aug 27 04:00:00 2024 GMT
        Subject: CN=8563dcbc-07af-4e0f-8234-9aec975d37b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:9d:67:98:49:e7:aa:3f:54:0a:bf:76:5f:
                    13:7b:64:0b:74:11:35:aa:f3:98:ac:c6:8f:a2:7e:
                    a6:26:15:7a:d5:8a:6c:37:a8:df:73:00:0f:20:d7:
                    a2:6c:88:23:7c:d7:6b:43:d3:45:c4:e1:39:97:f1:
                    3b:f7:7c:f9:4e:81:97:68:1a:9d:df:3a:5c:d2:25:
                    4d:b0:b1:35:a6:9d:2f:ed:81:eb:c8:22:08:c2:5a:
                    4e:e6:5d:dd:71:df:d4:61:c8:a5:17:9c:f5:43:05:
                    c8:bb:d2:7e:8e:8b:79:53:18:57:c9:b6:23:04:5f:
                    dd:ad:23:2d:8c:60:8e:e7:5a:d1:9e:d7:5f:74:78:
                    ed:30:e9:79:1a:4f:b8:32:a5:e2:11:2e:5c:ed:cd:
                    b0:ff:d3:c6:68:64:62:5c:d8:06:ef:51:8f:26:12:
                    39:d8:1f:b4:5d:05:5b:96:75:fe:d2:18:5b:e4:bb:
                    eb:d8:20:a4:06:b6:f4:9f:48:e4:97:bd:f5:86:f8:
                    24:4a:c7:cb:02:29:7d:0c:a4:8c:74:66:59:ef:39:
                    5f:57:a1:b1:fd:04:89:41:72:c3:b4:a3:d0:6d:82:
                    fe:27:0e:25:af:b1:01:e4:8c:eb:95:51:7c:2d:bd:
                    92:c0:d9:0e:37:34:33:f3:0c:e8:f3:cf:e1:56:c9:
                    6d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5E:11:75:E9:1A:C4:D9:1D:1D:E2:35:F8:1C:D9:53:21:7B:61:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/4c8cb017-c832-393d-9187-5a235daa8b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/54b1659b-ba41-4341-b59b-302264dea33e.crl

            X509v3 Authority Key Identifier:
                keyid:72:9F:E8:9F:BC:EC:6A:F5:C3:96:0B:DE:8F:AF:D3:B9:D4:8D:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:08:b6:ef:b3:d0:6a:9c:c9:cb:b0:63:2d:49:53:a6:15:c6:
         10:f8:bb:90:61:f2:75:70:c4:9a:74:1b:29:08:81:b9:21:be:
         b3:ab:8f:0d:1f:c2:14:13:b3:43:3c:59:28:4d:c0:8f:3e:ec:
         10:20:17:8f:43:e7:a1:e5:00:db:64:cf:51:67:63:1f:34:1f:
         70:0e:73:90:50:fc:c3:24:2f:4f:4f:85:84:da:05:16:c6:84:
         cd:75:ff:aa:c3:94:e1:ee:d7:87:12:7f:d8:cb:3f:c8:fd:a5:
         cb:0d:04:7b:c7:f9:82:33:10:bb:c6:6f:38:d2:96:3d:72:49:
         54:8d:1a:a7:80:63:26:45:a3:37:91:2f:cb:a2:68:2b:75:01:
         6c:73:f3:62:49:8a:c5:49:a7:f3:7a:55:a1:6d:71:8f:e8:ae:
         3b:18:23:3d:ae:df:bd:4a:36:ef:5b:35:61:69:f9:a7:1a:5b:
         34:b1:4b:af:0b:b6:db:72:6a:f8:e5:67:a6:02:bc:92:a3:34:
         76:15:ae:79:fe:67:f2:07:f0:42:0c:06:40:24:bd:08:6f:08:
         eb:98:ad:99:10:52:27:93:d6:92:46:80:14:f8:37:91:fa:63:
         bd:1d:99:1a:9a:be:0e:ac:e3:02:b5:f5:0e:d9:6a:21:1e:58:
         0a:0a:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----