Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/28201ebc-b6ba-3f45-8aa8-9a90ffd7fdeb.roa
File:                     28201ebc-b6ba-3f45-8aa8-9a90ffd7fdeb.roa (raw, json)
Hash identifier:          BzZxb/LTUa+QQG4JdCFZnGVu7rgAPp5McY8aWZ+LoxQ=
Subject key identifier:   B4:AC:85:0A:4E:6E:80:7F:92:EC:8C:D8:AF:3E:E0:59:D1:64:01:E9
Certificate issuer:       /CN=7bcff135-f392-4225-9188-da7adfa6bf6c
Certificate serial:       010D0C9F432858422144DBF553E058F1E264A4C0
Authority key identifier: C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/28201ebc-b6ba-3f45-8aa8-9a90ffd7fdeb.roa
Signing time:             Tue 06 Jun 2023 13:25:41 +0000
ROA not before:           Tue 06 Jun 2023 13:25:41 +0000
ROA not after:            Mon 04 Sep 2023 13:25:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:44:db:f5:53:e0:58:f1:e2:64:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcff135-f392-4225-9188-da7adfa6bf6c
        Validity
            Not Before: Jun  6 13:25:41 2023 GMT
            Not After : Sep  4 13:25:41 2023 GMT
        Subject: CN=c337b294-1406-4067-9829-06c4d991789b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:3b:61:3a:bc:94:64:da:6d:07:38:08:cd:
                    40:f6:32:b8:c3:e1:43:e9:95:81:64:50:ba:01:c8:
                    18:07:e3:18:7a:f2:83:d4:5a:ee:7d:7f:39:1a:d8:
                    9b:89:28:a7:02:cf:2c:ab:b3:cb:98:1f:b4:25:67:
                    6f:cd:7c:6a:24:e7:4e:f8:98:a8:2e:8d:ba:82:59:
                    60:86:bb:9a:6c:67:8e:2c:f4:10:00:58:42:0a:7f:
                    2d:fe:33:b9:46:08:03:30:64:18:91:a3:53:91:71:
                    1d:ed:7e:22:dc:29:5e:35:8d:77:73:8f:9b:7f:a3:
                    00:9d:f6:2a:41:a3:48:77:26:33:fc:32:10:cb:dd:
                    cc:fe:3d:fc:02:01:b7:3e:cb:3c:41:4f:00:ca:bd:
                    bd:a9:87:5d:90:00:7b:07:4c:7d:3e:e5:2c:02:f8:
                    e4:b4:df:be:92:d2:8c:a9:1e:9c:f0:80:6e:8f:1f:
                    2a:78:63:a1:0b:3b:3d:1b:9d:2a:89:71:5a:ac:d7:
                    3c:f7:7c:c6:8d:6d:06:10:f3:2c:fe:39:09:d7:49:
                    21:d6:c3:1a:b3:dd:af:f6:e9:0f:6f:2f:7f:2a:07:
                    50:2b:cf:9b:9d:cc:43:0c:09:cb:df:c7:bb:7e:01:
                    ec:6a:69:af:db:b0:be:10:fe:15:9d:bb:cf:77:bd:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AC:85:0A:4E:6E:80:7F:92:EC:8C:D8:AF:3E:E0:59:D1:64:01:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/28201ebc-b6ba-3f45-8aa8-9a90ffd7fdeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/7bcff135-f392-4225-9188-da7adfa6bf6c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:90:48:ee:8d:dc:f4:a5:74:6b:f4:88:e9:2b:02:7e:a3:
         87:04:8b:a6:87:2e:3d:11:a5:5e:8b:dd:2d:9c:d9:78:b3:f4:
         3a:fd:a9:81:31:5a:f1:e7:8a:8a:36:3a:fa:70:17:45:c5:5d:
         c4:34:7b:2b:f5:4b:fa:41:8c:77:c5:77:8b:a6:7b:11:ec:19:
         4c:cf:0b:8a:97:9e:11:0a:b3:2a:c4:8f:04:c7:6a:c6:dc:e7:
         6e:26:77:dd:0e:d9:86:ed:d7:ba:a3:25:39:71:e5:a9:52:86:
         c8:b8:16:68:35:e7:4a:d7:d1:74:9d:f3:8a:4e:42:35:dc:24:
         ac:9d:71:42:d1:e0:af:71:37:e8:39:e3:0b:f3:8f:18:11:b2:
         62:5e:20:ef:4b:57:c8:d0:59:95:92:17:b1:52:f3:15:b6:51:
         0d:4b:1d:e8:a6:e0:3e:ce:f5:9e:56:37:c8:6d:9e:4a:67:c5:
         06:40:6a:db:6c:40:e2:8d:02:cf:ff:bc:55:13:d5:9d:e3:0a:
         b3:a6:75:70:0b:68:b0:3b:14:c8:78:03:30:a5:11:9f:43:ac:
         ac:ba:0e:80:9d:25:53:96:f3:d3:7e:d2:3e:6b:ba:9f:47:14:
         63:6d:7f:fe:da:d7:12:f9:55:3f:49:af:23:87:eb:23:8e:66:
         10:14:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----