Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/2bd43f15-ab20-3dab-9c4c-186aabb3e12a.roa
File:                     2bd43f15-ab20-3dab-9c4c-186aabb3e12a.roa (raw, json)
Hash identifier:          9XBcnOH9kw8wzVaKdVlW2mUuAfxxsVzc/B8mdZkLnr8=
Subject key identifier:   D0:3D:27:B4:AB:6A:18:0A:93:EC:F5:5B:C0:D6:5A:00:25:01:9C:EF
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB917C6B00C41C5361FA68F80
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/2bd43f15-ab20-3dab-9c4c-186aabb3e12a.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:17:c6:b0:0c:41:c5:36:1f:a6:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=90e61bf0-25df-46cd-81ba-a6525f5a478d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:bf:79:1f:fc:92:65:f9:36:88:20:0f:a2:
                    55:61:4d:fc:29:53:22:68:5f:e3:df:0d:3b:58:a6:
                    bb:fe:39:e0:cd:ff:44:2e:e7:2f:d5:f1:2d:92:38:
                    4e:7a:eb:42:12:c3:4d:cc:58:1d:b5:28:45:50:24:
                    fd:22:86:bf:04:b4:c5:02:24:5a:60:82:33:49:62:
                    c4:28:4c:a8:54:06:e6:da:d9:45:b1:9f:3d:0b:95:
                    c8:53:ad:b6:16:b2:96:3f:c5:5a:2c:e3:9a:8b:65:
                    b2:b6:6c:fe:12:06:17:72:56:fc:1a:af:44:57:91:
                    e9:81:5d:7b:a1:b7:de:6f:e1:00:80:79:f7:b5:a6:
                    15:09:5a:11:43:db:d1:c8:eb:7f:da:2a:b2:0b:58:
                    b3:ce:5f:a9:ff:8d:a1:a9:9e:5e:0e:ca:ee:e9:0e:
                    4c:ab:63:99:1a:a0:63:c0:43:e4:5d:6f:fc:00:29:
                    84:df:83:eb:66:59:69:12:ec:31:1d:0a:03:95:7b:
                    29:40:55:56:44:b1:77:e8:f8:72:3c:4a:56:9a:13:
                    34:2c:22:ca:e1:6d:6c:10:df:25:0a:ba:29:fe:cc:
                    e3:fd:30:4c:e8:d3:e2:b3:b8:52:ad:94:4f:15:53:
                    37:db:2e:81:19:35:5c:39:56:ba:7f:99:5c:aa:15:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3D:27:B4:AB:6A:18:0A:93:EC:F5:5B:C0:D6:5A:00:25:01:9C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/2bd43f15-ab20-3dab-9c4c-186aabb3e12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:07:09:8e:7c:9a:14:46:22:b4:fa:6a:01:03:ae:1c:91:94:
         13:8e:7b:00:4e:fa:99:7a:45:29:a4:83:f9:71:6d:cc:2b:80:
         11:e4:d0:c4:f0:5b:be:14:c6:90:94:24:5b:71:0d:a5:2c:06:
         46:2a:75:88:ee:df:22:95:da:39:c8:c3:96:05:7f:1f:83:bf:
         24:72:9e:18:20:dc:77:df:23:f4:5a:70:d7:31:4a:7e:2f:71:
         56:4b:b4:5c:0f:f2:c6:d0:73:0c:86:df:3b:42:ee:23:2a:5e:
         ae:90:ca:d0:6d:dc:32:d9:f1:6d:c6:28:8a:af:4d:c5:5c:14:
         6c:16:2b:8d:eb:6e:7b:56:c0:54:ff:3d:08:0c:3a:bd:dd:17:
         ac:3b:51:98:b0:d7:25:ce:10:46:fb:8c:9f:f7:eb:68:90:14:
         41:10:ef:84:90:04:b2:2d:47:2c:08:10:ef:39:0d:2c:d1:0b:
         5b:1b:3f:81:71:a4:c8:fe:37:1d:32:89:9f:90:06:a5:f1:8e:
         5b:0a:44:59:e8:5b:bd:6a:bd:e6:5f:cb:8d:75:34:7f:c6:21:
         73:90:25:87:be:75:2e:79:64:b8:eb:b3:83:a5:69:5a:9f:1a:
         f6:63:82:47:c5:10:a5:85:e6:c2:34:ed:a3:a8:2f:a5:35:b8:
         d4:2b:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----