Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/af690bef-559a-3e00-aa2b-f8ac03ed338e.roa
File:                     af690bef-559a-3e00-aa2b-f8ac03ed338e.roa (raw, json)
Hash identifier:          2j8VDCE7zc3RvPuaUyk30s0eJyZ3Tu2u3eIw9paFBxw=
Subject key identifier:   8D:0D:40:22:2A:B9:F3:14:BB:20:DB:2D:21:B7:BA:C4:95:F8:86:D2
Certificate issuer:       /CN=7bcff135-f392-4225-9188-da7adfa6bf6c
Certificate serial:       010D0C9F432858422144DC484A2DA2FBA28B0F00
Authority key identifier: C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/af690bef-559a-3e00-aa2b-f8ac03ed338e.roa
Signing time:             Tue 06 Jun 2023 13:25:41 +0000
ROA not before:           Tue 06 Jun 2023 13:25:41 +0000
ROA not after:            Mon 04 Sep 2023 13:25:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:44:dc:48:4a:2d:a2:fb:a2:8b:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcff135-f392-4225-9188-da7adfa6bf6c
        Validity
            Not Before: Jun  6 13:25:41 2023 GMT
            Not After : Sep  4 13:25:41 2023 GMT
        Subject: CN=9ebf11d6-13c3-479d-9d7c-157f2ab7639c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:b0:8d:cd:b5:46:fb:7c:78:27:5b:0a:ec:
                    74:e7:78:2e:89:00:51:f9:97:81:2f:43:4a:70:0c:
                    c3:49:09:5d:db:c2:0e:b6:f8:08:c5:c9:c6:5d:e4:
                    d2:9d:43:af:51:d4:16:4c:1f:4e:32:f0:6b:0e:ff:
                    7c:fe:e4:79:de:39:90:93:6d:2f:67:0f:5a:89:7c:
                    1d:a5:79:be:38:8e:34:52:3a:a8:27:78:b6:6c:ec:
                    7d:0b:bc:d9:4d:0c:5c:5b:3a:24:60:a8:d1:27:eb:
                    53:eb:09:98:cb:76:f1:cf:2b:29:ca:24:e3:5c:ef:
                    83:a1:82:41:64:d9:f4:2d:c3:3d:9c:80:25:e2:19:
                    4c:40:74:5c:1f:49:53:e8:76:00:c2:06:0d:a2:cc:
                    59:41:e8:29:ca:02:d2:94:eb:bb:5b:ce:2c:ab:e0:
                    ce:3d:60:b8:78:1e:36:03:0e:3a:d7:0d:9a:97:09:
                    c9:6a:6d:54:46:02:23:00:71:63:86:8a:a1:14:ee:
                    b9:28:6f:07:69:8f:8d:29:b0:b5:6f:21:ae:bc:6d:
                    68:e7:76:54:94:dc:d3:98:94:1d:c2:a2:99:c1:52:
                    60:07:83:2e:20:3c:37:a1:bc:01:81:93:e7:4b:6d:
                    f7:6b:5c:c0:71:9c:8b:f8:16:30:28:41:c8:13:1d:
                    62:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:40:22:2A:B9:F3:14:BB:20:DB:2D:21:B7:BA:C4:95:F8:86:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/af690bef-559a-3e00-aa2b-f8ac03ed338e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/7bcff135-f392-4225-9188-da7adfa6bf6c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:66:a7:db:13:d6:ed:a2:ed:47:20:ad:f4:f6:da:4b:e8:
         e8:ec:49:33:0d:9a:4c:6e:4b:1c:4d:71:77:2a:16:d1:57:18:
         a8:02:4f:59:ec:34:20:c4:26:5e:8f:61:0c:cb:32:67:57:fb:
         11:3d:ba:bc:ad:a4:18:af:a7:e9:0a:b4:99:9f:a9:c2:1b:27:
         8b:18:89:62:3e:c6:5b:fc:d1:bd:b8:87:b7:ca:b5:46:f5:44:
         9c:58:27:72:f5:a9:78:4c:c8:d9:ea:7d:d7:b0:a3:81:f1:c7:
         d9:d0:a4:c1:8d:72:6c:46:51:7b:f5:4b:3f:5b:b1:58:ec:6b:
         ac:b7:3e:18:8d:ed:97:42:42:a1:ae:ed:7c:43:39:55:70:fa:
         78:b6:62:18:ac:dd:56:99:67:23:8e:be:3f:b6:7b:aa:5d:0a:
         d7:6d:ab:27:8b:2c:85:4b:2d:fa:95:62:69:1a:27:0b:59:0b:
         ce:d3:bb:55:04:e8:51:6b:12:98:4a:3b:2d:b8:a1:6a:1b:4b:
         16:a2:a5:4d:e1:d2:d5:26:4f:c2:21:d0:cf:2b:b5:07:72:77:
         c0:50:a9:39:09:86:b4:d8:77:47:6b:80:a6:be:9d:ab:38:87:
         d3:3a:16:47:41:94:71:49:51:a7:36:57:39:85:ef:b0:14:01:
         7a:93:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----