Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/3927ba3b-671f-3834-a0fc-48c383ab29f1.roa
File:                     3927ba3b-671f-3834-a0fc-48c383ab29f1.roa (raw, json)
Hash identifier:          CrJUO1AnPYbD++NiLq+Ojr+gFy2/iMO8GPpvX5tmF2Q=
Subject key identifier:   47:67:74:1F:8F:3A:14:67:CD:CE:7A:63:AE:3D:28:67:75:E7:19:9F
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583C10879D38A240B47BA070B740
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/3927ba3b-671f-3834-a0fc-48c383ab29f1.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Fri 01 Mar 2024 05:00:00 +0000
asID:                     142419
IP address blocks:        2602:fc23:130::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:10:87:9d:38:a2:40:b4:7b:a0:70:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Mar  1 05:00:00 2024 GMT
        Subject: CN=58f455a8-ec41-42ea-9311-3e0a30682402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:fe:0a:6b:91:9b:7d:b3:cb:ba:3b:12:cb:
                    61:2d:aa:99:50:e9:df:bf:c6:4c:c1:ea:c2:9f:b4:
                    63:60:4e:35:b9:c0:98:5f:c9:7b:b3:3c:27:09:9e:
                    8a:05:b3:d5:2a:c0:2b:38:9e:47:bd:cf:7a:f1:16:
                    46:f9:54:4d:7e:96:20:3c:38:b8:56:d1:4c:64:2a:
                    c2:38:57:7f:62:d5:30:a6:d9:a6:0a:b2:92:4f:3d:
                    85:1c:ff:f9:62:ad:21:e4:57:26:f1:ca:d0:53:29:
                    65:6b:53:1d:35:89:5f:a7:7f:3b:59:c9:f4:04:bc:
                    62:3c:eb:9e:0a:8a:4e:32:2b:66:b9:13:2b:c6:3b:
                    ac:68:be:d1:da:b4:b5:13:95:d3:d3:7e:4a:9b:b5:
                    6a:d6:2f:e8:49:c5:b8:df:ef:4f:36:d9:9f:84:24:
                    66:29:44:d1:62:0d:51:a1:ba:29:1e:db:58:b7:f4:
                    66:6c:35:c6:d3:e2:d7:2d:c1:3f:d8:a1:b5:a2:50:
                    80:c4:b8:b2:8f:2e:8b:de:38:ce:4b:5a:15:e6:25:
                    2b:dd:8d:49:a5:d0:09:2c:c9:98:16:65:f1:b2:39:
                    bd:cf:04:64:10:ee:ac:98:d9:1b:eb:52:0e:cb:aa:
                    f2:e3:6f:1d:b0:ac:11:e8:b8:61:c8:4d:4b:6b:e7:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:67:74:1F:8F:3A:14:67:CD:CE:7A:63:AE:3D:28:67:75:E7:19:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/3927ba3b-671f-3834-a0fc-48c383ab29f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:64:3a:dc:43:97:52:02:b4:16:84:91:15:e9:1f:75:7a:
         a6:44:23:30:26:29:fb:9b:72:d8:18:c0:c2:d1:10:04:f2:66:
         fa:be:b1:66:4b:3f:27:5d:6b:0d:27:57:fb:e4:e7:73:02:8a:
         b8:fd:00:c7:f4:89:a9:3d:a0:47:92:4e:9f:ac:29:01:00:a3:
         f9:9a:06:e4:a1:d9:f0:02:64:13:08:a7:62:90:10:43:71:d2:
         30:5e:50:09:2a:90:5e:92:99:a0:de:20:00:3e:cd:ba:dc:a8:
         c9:66:df:e2:85:09:f4:4d:fa:92:c6:ce:82:62:c0:a2:23:c7:
         e9:db:41:fe:7a:f1:bd:b8:3a:6e:b0:be:3c:e7:ff:78:3f:2b:
         7a:c5:f2:12:2c:71:ea:13:3b:ea:bd:15:07:53:50:e0:cb:cc:
         88:1d:c4:c3:3b:ea:5c:af:67:61:c7:5f:e8:1c:14:75:d4:96:
         e7:24:99:ac:5d:e5:74:cb:ee:f8:3c:32:61:56:40:bb:2e:ce:
         21:b2:1a:62:02:03:08:ed:58:3b:67:4e:8f:8f:b2:cc:72:1f:
         e5:62:b8:b6:f3:e2:39:0d:04:d4:3f:47:03:c5:0e:b1:e7:46:
         24:6b:d0:d9:fc:2b:b3:ed:0c:d7:59:33:e9:ea:8e:16:a8:a1:
         a0:28:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----