Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9c360b20-624c-3ba9-963d-e3b787ff2f61.roa
File:                     9c360b20-624c-3ba9-963d-e3b787ff2f61.roa (raw, json)
Hash identifier:          BJ73RjGEpUjMGlOzwVDuUXdfc1+z84fu5C2GA00DuhE=
Subject key identifier:   47:90:C9:4E:99:CE:C9:A1:08:2D:20:F0:5F:64:35:97:C0:AF:BE:38
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583C3BF7BC709CB88C8ABA6BB740
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9c360b20-624c-3ba9-963d-e3b787ff2f61.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Sat 16 Mar 2024 04:00:00 +0000
asID:                     54625
IP address blocks:        2602:fc23:150::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:3b:f7:bc:70:9c:b8:8c:8a:ba:6b:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Mar 16 04:00:00 2024 GMT
        Subject: CN=50701cde-3cb4-4c6c-9a63-25022c6e44b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:5f:09:2e:fe:d3:94:81:08:34:49:ea:24:
                    aa:31:c0:95:c3:16:b3:c4:e7:0c:1c:c2:9c:90:1d:
                    fe:52:3e:ad:72:05:bc:2f:0e:9f:3a:79:80:eb:92:
                    14:fe:8d:ab:0f:51:40:d1:02:69:4b:0f:0f:11:c2:
                    db:56:08:48:83:d8:e3:df:5a:a9:cb:61:76:16:65:
                    7e:da:e4:04:98:5e:88:15:11:ae:8f:03:22:ec:36:
                    79:0a:18:3d:3f:64:df:43:92:2a:9b:ce:13:6b:03:
                    aa:95:0f:67:56:28:82:07:af:74:67:30:bc:0c:ff:
                    6a:6b:f0:36:a0:1d:ca:d0:8d:ea:38:c8:e8:8c:8c:
                    c4:31:70:28:a5:2a:32:81:b5:93:69:11:0a:15:29:
                    66:4a:80:c8:4a:76:16:e2:c2:1e:89:f9:69:56:22:
                    d0:35:7c:59:2c:a8:6e:dc:21:84:48:1b:01:f2:5e:
                    5b:4a:a8:a2:c2:ea:3e:6a:12:e4:05:04:04:98:03:
                    62:2f:5d:67:40:99:21:06:c0:d3:bc:1e:f3:e1:8f:
                    5e:25:57:ff:a4:d4:ce:16:2a:57:96:7c:2c:2b:29:
                    c6:4a:a6:e2:dd:55:cd:48:cb:8b:0d:43:e0:d9:d9:
                    60:55:54:79:1f:3b:2c:bb:41:0a:4f:75:ae:e8:90:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:C9:4E:99:CE:C9:A1:08:2D:20:F0:5F:64:35:97:C0:AF:BE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9c360b20-624c-3ba9-963d-e3b787ff2f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:c8:5f:25:44:3f:58:22:87:89:7d:44:b7:c3:fb:46:f6:
         3f:54:58:ae:4a:23:79:67:6a:5b:aa:75:4c:71:c2:82:52:b5:
         17:94:19:54:ea:f5:a1:b6:12:e8:c0:ca:fc:65:90:38:f3:62:
         b2:76:3b:a2:ee:28:87:9c:fb:92:63:3c:06:95:18:a9:d8:fc:
         ac:79:6d:d3:49:4b:b2:3f:f7:4d:38:42:ce:08:a4:f4:11:2c:
         20:1a:31:ac:fe:ec:cb:7d:fd:60:45:a9:9b:11:cf:18:7a:8c:
         ba:1e:04:a0:10:f6:2c:9c:0b:93:95:11:fd:fa:10:df:37:c6:
         75:22:14:df:e2:0d:ce:b0:c3:4c:58:99:27:f6:c8:a1:8c:77:
         bd:c5:86:0d:76:58:0b:6b:ac:0c:5e:cd:d2:31:8e:5f:33:62:
         5a:53:ae:de:47:48:e5:38:dc:a4:8f:c6:1f:de:5c:49:dc:60:
         ed:11:43:32:57:96:fb:a9:bd:69:11:4a:db:8a:ea:84:58:89:
         07:57:ad:90:8f:0c:d7:3f:8f:31:1e:d4:d5:4b:b2:dd:cb:c9:
         3f:3a:f3:91:f0:aa:b4:47:70:ae:82:9a:f1:64:e0:89:04:b2:
         7f:a1:7e:b4:86:d1:78:cb:13:07:2f:2d:99:33:74:09:0b:b8:
         b8:17:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----