Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/af9e463a-4918-3150-94c4-80993b9f2a4f.roa
File:                     af9e463a-4918-3150-94c4-80993b9f2a4f.roa (raw, json)
Hash identifier:          WhQDACeOKpGD09vXQ2L5eLlmEQ2tudTLHfEb/09BPOQ=
Subject key identifier:   B2:9F:7D:09:2C:9A:86:EF:90:B7:9C:5F:30:A0:B7:21:97:5D:23:41
Certificate issuer:       /CN=13b05528-d516-4df9-90c8-05d780d1036f
Certificate serial:       010D0C9F4328583C876F364785BBEAAAF335EE20
Authority key identifier: 17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/af9e463a-4918-3150-94c4-80993b9f2a4f.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Fri 12 Apr 2024 04:00:00 +0000
asID:                     7719
IP address blocks:        2602:fbf6::/38 maxlen: 38
                          2602:fbf6:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:87:6f:36:47:85:bb:ea:aa:f3:35:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b05528-d516-4df9-90c8-05d780d1036f
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Apr 12 04:00:00 2024 GMT
        Subject: CN=7de0bc58-fdf1-4bf6-b603-1da82508fbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:dd:a5:7b:73:11:f4:d8:c4:fc:04:24:70:
                    1b:f1:58:67:d9:c7:0e:10:2a:ad:b3:29:b3:6a:ee:
                    d1:78:33:ae:ab:2f:b5:38:10:a6:a6:7a:b3:8f:1f:
                    8a:ce:ac:57:d2:5c:91:e7:bf:64:dc:33:e0:b5:cd:
                    f0:bf:0c:4f:9b:5b:46:d1:a4:d5:bf:f5:0e:85:49:
                    ae:30:55:1d:24:95:2e:de:2b:9e:32:f7:95:39:42:
                    32:26:31:35:71:f0:9b:fb:48:6d:ea:e4:db:8e:41:
                    0b:ba:bc:3f:48:7c:da:39:11:94:3f:e9:6c:37:9a:
                    06:f8:a9:56:8d:9c:78:db:c8:40:43:2d:61:aa:b3:
                    32:9e:00:12:7b:38:a2:55:39:dc:dc:7d:ac:5a:1a:
                    11:8d:7c:0f:04:34:55:4f:ba:0e:e6:15:95:45:b7:
                    f1:df:1e:93:c3:1c:e4:0e:c2:bd:a6:94:4d:d2:bf:
                    c1:e4:4d:5e:23:be:ba:83:26:b3:b0:ce:1e:2c:e8:
                    98:41:fc:c2:0b:49:c8:86:57:a2:a7:9d:9c:7f:00:
                    8e:38:37:6a:d6:e5:b0:55:15:a8:ec:b3:14:b9:60:
                    a4:8a:9e:ba:75:ed:51:7b:f8:dc:7d:57:04:1b:ff:
                    48:67:52:4a:ee:ca:cb:88:a3:77:f3:59:1e:a4:af:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:7D:09:2C:9A:86:EF:90:B7:9C:5F:30:A0:B7:21:97:5D:23:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/af9e463a-4918-3150-94c4-80993b9f2a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f/13b05528-d516-4df9-90c8-05d780d1036f.crl

            X509v3 Authority Key Identifier:
                keyid:17:9D:E0:20:0A:6F:07:76:B7:6A:FE:4F:3C:EE:75:A2:E9:9E:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13b05528-d516-4df9-90c8-05d780d1036f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:8d:69:22:a9:ae:f5:70:f7:6e:b3:09:16:c3:2b:93:a7:
         32:06:df:ba:7b:6c:66:88:d7:24:f4:0d:37:fb:db:18:1d:90:
         6e:6e:10:4d:7e:ba:21:97:dc:3e:38:cf:80:66:eb:d4:f3:9c:
         fc:2e:b4:7e:81:e3:7f:55:1d:a3:4c:af:0b:33:dc:82:b3:83:
         a0:20:1c:59:f5:bb:45:eb:04:ec:25:6b:e1:92:f4:59:f2:90:
         ed:48:fd:59:46:5b:a9:a5:de:83:47:41:fe:73:48:e4:ac:c5:
         55:f6:23:59:b4:c2:59:3d:34:a7:88:4d:84:01:98:8f:bf:c5:
         0f:3e:3c:a2:00:4c:1d:0c:27:1f:a2:88:80:57:e5:d7:d6:d6:
         28:4f:06:f0:16:62:ba:90:de:fe:66:63:95:4b:f1:c0:ae:4c:
         1b:06:cd:bc:f8:e3:dc:2e:93:51:eb:60:73:7b:8f:00:97:09:
         f9:96:5e:5a:0c:d3:19:fa:cb:68:fd:c9:af:a5:c6:28:13:0a:
         51:90:83:b8:ec:57:ac:84:d3:62:e4:c4:72:fd:45:42:2c:67:
         3c:5b:5e:5b:d1:b6:e5:c1:30:99:2e:45:e5:5f:d7:80:b6:9d:
         71:fe:84:8e:a7:85:28:00:1d:20:e1:2b:d2:07:b5:bc:d9:21:
         aa:02:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----