Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/7d392c9c-b6f2-32b9-8430-75502e7053d8.roa
File:                     7d392c9c-b6f2-32b9-8430-75502e7053d8.roa (raw, json)
Hash identifier:          to5xoxY6Pix0v0VMcbQ9aMXaabXdenL0Qfs0zCblW2o=
Subject key identifier:   02:7B:13:C5:7E:33:BE:31:02:EA:7B:89:B1:B1:3F:5F:3A:26:42:21
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8C67B44B5A34D3A1DF00
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/7d392c9c-b6f2-32b9-8430-75502e7053d8.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:67:b4:4b:5a:34:d3:a1:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=40808412-3906-402e-9cf9-38fad23aebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:f6:71:37:17:c2:8e:3b:57:23:3a:79:fb:
                    16:a9:71:4f:13:f6:51:2a:6e:9f:64:27:2d:2f:06:
                    73:68:5c:a2:5e:18:23:48:6b:3e:eb:7f:d8:ba:65:
                    63:cb:1e:4e:58:de:a4:d5:4a:d9:c0:4d:dd:6c:0d:
                    7a:2f:70:a8:14:3c:21:b0:ef:87:df:f1:99:6a:1f:
                    13:34:bb:c2:8c:1b:73:e6:3c:20:1b:95:1c:d6:12:
                    82:7b:1d:b1:6e:16:4d:55:f3:1c:24:d1:d0:9e:f4:
                    a7:16:35:e4:65:e3:b7:ca:a6:a7:b8:c8:43:55:14:
                    cd:96:8c:1f:3b:69:87:10:ca:ec:06:33:e6:99:e0:
                    53:50:a1:77:c9:3e:b4:7b:6a:86:26:8a:85:d9:bb:
                    6e:10:67:81:00:0f:11:64:49:bd:72:5f:e1:73:04:
                    c7:62:63:ac:a6:69:22:5c:f1:67:df:c1:94:2f:2d:
                    2a:a3:2f:96:42:4b:ee:b0:c8:60:a6:2a:58:da:4d:
                    9f:b9:2c:24:09:1f:31:98:7a:4f:7b:b4:e2:fd:38:
                    24:1e:be:75:33:a6:c2:fb:80:92:8d:27:09:e3:85:
                    f8:fa:f0:b9:60:1d:59:57:72:c0:98:6e:11:02:90:
                    13:ed:6a:5b:df:89:94:74:ff:7d:be:2d:7a:28:8a:
                    9e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:13:C5:7E:33:BE:31:02:EA:7B:89:B1:B1:3F:5F:3A:26:42:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/7d392c9c-b6f2-32b9-8430-75502e7053d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:d2:cc:82:21:02:7a:ac:23:d1:9d:6c:8c:c0:4f:45:38:
         14:82:09:70:33:38:66:ea:f1:e8:e4:86:b3:20:65:aa:1f:25:
         04:71:a0:08:24:5d:96:95:fa:f0:96:b2:5d:ba:92:42:26:89:
         f7:c0:6f:12:d1:af:eb:ef:44:8f:b8:67:7b:02:9b:95:fc:65:
         84:e2:ba:ba:ef:fc:82:7a:d0:b7:79:21:0c:54:fd:64:7d:38:
         c2:93:94:da:55:a8:86:6a:63:41:05:49:65:f6:4a:5b:45:78:
         23:fc:94:62:54:83:24:0f:93:75:b2:0e:52:84:e0:f1:17:69:
         ed:08:8f:95:5f:73:e8:7b:93:36:a7:88:c6:fb:c0:a1:13:0b:
         bf:d3:12:a0:80:0a:29:38:7e:bd:d0:68:e7:b6:55:7c:c0:6c:
         74:8e:5a:fb:bb:f8:49:ce:63:02:6d:9a:e8:36:b5:e9:29:86:
         79:89:32:99:d3:34:3d:48:9e:f3:73:02:c8:e3:76:70:1b:de:
         fa:65:79:0b:5b:53:da:f1:fb:91:a7:64:bb:9c:3b:31:6c:06:
         10:d7:80:7e:cb:de:8f:1b:a9:62:25:c9:d9:e2:26:95:f5:7c:
         b3:f6:7b:b7:03:99:91:62:73:05:fd:37:61:49:90:fe:9f:5c:
         1f:77:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----