Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/988c8a51-4985-3c3e-952f-005ae28f3aeb.roa
File:                     988c8a51-4985-3c3e-952f-005ae28f3aeb.roa (raw, json)
Hash identifier:          mEL3UX5DNM7RC4GictcgOEva2nQFKEA74nG73ORmyKo=
Subject key identifier:   F4:FA:E5:C1:3D:C4:1C:9C:FD:74:18:F7:E6:F7:7A:EE:19:27:36:48
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583D28A33FDB3EBCA0EEC49BF100
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/988c8a51-4985-3c3e-952f-005ae28f3aeb.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Sun 09 Jun 2024 04:00:00 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:28:a3:3f:db:3e:bc:a0:ee:c4:9b:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Jun  9 04:00:00 2024 GMT
        Subject: CN=42534a9d-843a-404a-aef2-ea543abc7dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:6f:50:1f:88:a6:e9:7a:f1:b1:8a:89:b2:
                    3c:f0:19:37:34:b2:a1:bb:fb:6d:75:c7:5a:bb:ea:
                    53:8d:eb:5c:e2:47:b1:c4:6f:2f:aa:2e:a5:91:c3:
                    31:bf:a2:8b:b7:c4:0a:b0:82:77:17:3e:56:ef:2f:
                    61:da:4a:e1:ea:53:d3:7d:a8:cd:9c:e6:d7:db:1c:
                    bf:29:49:f5:c7:90:14:95:7a:ac:13:92:a6:aa:a5:
                    fc:3a:f4:2a:9a:5b:a7:cf:c2:42:f0:2a:08:65:2d:
                    f0:bc:19:7a:69:c6:43:4e:3e:dd:c4:ed:96:f7:93:
                    ad:86:bf:01:37:f7:0b:f7:63:56:da:c7:ef:1f:9d:
                    cc:36:2a:86:41:4e:67:d8:ce:f0:45:cc:63:65:1c:
                    82:5d:b0:11:3f:6d:24:88:3c:39:30:09:71:9b:c9:
                    fa:68:b6:61:e7:c0:f5:a0:a5:51:9c:2f:75:6c:55:
                    63:ac:70:9f:05:3a:d4:59:8f:28:51:8a:73:b7:0c:
                    09:62:0b:d4:f8:c8:56:99:c2:51:02:81:7d:10:30:
                    a1:27:bd:87:5e:c1:f3:29:e8:7d:47:5e:98:0f:45:
                    55:28:5f:3a:a2:d1:10:ac:48:a1:ae:73:93:24:b2:
                    dd:cc:0a:92:40:a5:69:aa:32:0e:ac:a3:bf:c0:fe:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FA:E5:C1:3D:C4:1C:9C:FD:74:18:F7:E6:F7:7A:EE:19:27:36:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/988c8a51-4985-3c3e-952f-005ae28f3aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:45:0a:cc:bb:65:83:4c:23:5e:ef:9a:40:eb:36:2b:b6:66:
         3c:01:89:75:c2:5d:0f:72:ee:a7:83:ae:86:29:53:68:e0:6c:
         fe:f2:ea:82:e0:3f:71:a2:fa:f1:c2:6b:2b:fb:75:b5:b9:f5:
         b0:e4:97:01:eb:fc:c7:1d:c9:98:62:7d:24:eb:8e:48:ce:7f:
         4d:7c:ad:01:6b:9c:f9:6e:a6:09:37:0a:5b:4e:62:9d:56:45:
         e0:df:18:ad:11:f5:90:8a:cc:a1:c7:77:e4:66:cd:6b:da:97:
         36:48:d1:1b:4e:ea:ff:37:55:60:10:2e:15:f8:7b:29:08:fd:
         d6:a2:15:77:95:a3:0a:30:09:9b:d2:f3:54:76:f3:07:14:ba:
         e7:19:b9:2c:fd:a3:40:d2:e3:c2:7f:89:f6:36:cc:76:ea:08:
         7a:b4:67:78:95:72:4a:4e:b2:22:44:f4:f5:1c:b1:c1:94:b3:
         de:16:8b:17:81:1e:8a:aa:89:eb:a7:bc:9a:83:1e:09:39:bc:
         4b:d7:ca:23:24:ab:8e:5d:cc:00:d8:42:3a:ab:3e:e2:b4:50:
         8e:1a:0d:2b:ea:a0:ae:59:05:27:65:b3:62:d4:ec:b2:60:98:
         36:16:2f:95:17:d8:3f:3e:28:13:0b:2c:c6:28:9f:5e:9d:95:
         b4:21:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----