Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/f7b410b7-d700-397f-9ea1-774339309454.roa
File:                     f7b410b7-d700-397f-9ea1-774339309454.roa (raw, json)
Hash identifier:          kxDgyULpbxj5X3Nin8ivi1aio2WZTtyIu8QvZWyW54E=
Subject key identifier:   9F:61:D9:82:9C:C5:49:D4:BE:E6:CD:AA:2A:83:60:9A:7E:9F:85:1C
Certificate issuer:       /CN=7bcff135-f392-4225-9188-da7adfa6bf6c
Certificate serial:       010D0C9F432858422144DC236D3440AEA105A180
Authority key identifier: C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/f7b410b7-d700-397f-9ea1-774339309454.roa
Signing time:             Tue 06 Jun 2023 13:25:41 +0000
ROA not before:           Tue 06 Jun 2023 13:25:41 +0000
ROA not after:            Mon 04 Sep 2023 13:25:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:44:dc:23:6d:34:40:ae:a1:05:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcff135-f392-4225-9188-da7adfa6bf6c
        Validity
            Not Before: Jun  6 13:25:41 2023 GMT
            Not After : Sep  4 13:25:41 2023 GMT
        Subject: CN=b17c6690-6194-4780-b024-7313a5430de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:c5:b9:3c:1b:09:e0:41:bc:fe:b2:74:d2:
                    17:27:3b:76:20:c9:f6:09:51:fb:d7:38:48:32:23:
                    bc:52:4a:a3:af:d8:75:3e:b9:c7:b9:d3:86:9a:01:
                    4f:8c:44:b8:98:65:fd:81:a1:9b:d9:6f:f6:22:d4:
                    17:e4:f2:6b:e7:37:28:c7:0c:37:c7:8a:ec:4a:b3:
                    74:6b:fa:d7:2f:e8:92:38:0c:af:97:3a:42:b8:ea:
                    52:6c:98:90:88:1e:30:f7:60:3d:ef:90:56:d5:a7:
                    59:bf:33:3e:70:4b:95:aa:a3:30:05:da:49:98:e6:
                    36:9e:30:bf:c6:aa:8b:c6:e6:08:e1:d4:f4:8f:3e:
                    6f:f1:e9:52:b9:fb:09:44:47:c1:60:54:e2:59:28:
                    a2:68:fc:a7:6e:92:28:c9:5a:cc:22:fb:6e:4e:52:
                    86:e1:27:66:3d:ab:86:73:05:ac:52:ea:96:ee:cd:
                    1d:57:36:07:53:b9:b8:db:0e:2d:bd:55:95:fa:fc:
                    39:18:d5:17:9e:25:3e:29:63:d1:c6:45:33:64:42:
                    c8:a6:54:08:b1:97:e8:40:2b:fb:01:ff:f2:89:34:
                    b7:dc:40:d9:ae:2c:a3:07:99:00:80:45:d7:c2:e8:
                    f3:99:80:d2:e0:2a:de:84:75:e9:5b:3f:aa:e2:af:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:D9:82:9C:C5:49:D4:BE:E6:CD:AA:2A:83:60:9A:7E:9F:85:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/f7b410b7-d700-397f-9ea1-774339309454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/7bcff135-f392-4225-9188-da7adfa6bf6c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:ca:d8:20:ef:58:3d:35:75:56:f6:10:62:d5:0f:c1:38:
         06:c1:87:75:38:9a:df:16:bc:9b:b3:3a:e4:cb:6d:86:b8:da:
         5c:12:be:2c:a8:7a:db:5b:8a:e6:f0:8e:d6:1f:28:47:71:76:
         7d:36:2d:be:5e:c5:0c:a2:c7:ed:4a:7d:14:78:11:ab:a8:b4:
         ef:c5:b8:b9:70:15:15:60:9f:66:94:3f:b5:4a:70:4a:16:8b:
         27:1e:e1:89:3e:e7:88:a1:4b:1a:7d:46:6d:35:82:bb:c0:f0:
         a3:5e:88:c2:0a:2d:49:a6:40:25:8b:64:2e:9a:eb:00:62:85:
         61:f7:3d:a0:35:2b:c4:75:14:1e:e1:cd:f2:bd:20:2b:14:e3:
         76:7b:65:69:89:67:2a:12:9d:c3:12:75:5a:69:76:09:35:74:
         29:69:f7:a3:4c:f0:0d:69:e3:32:5f:f2:14:92:46:f3:70:4d:
         e4:7d:47:50:cc:0a:fd:c0:af:08:a4:ed:a0:d7:a5:b5:e7:10:
         00:73:8a:94:9f:05:50:95:9c:1c:8c:e5:c6:af:ed:c0:25:29:
         13:5b:6d:6b:f5:65:42:68:73:05:98:94:a3:0f:a1:5c:7d:31:
         e6:dd:48:4a:a0:2e:a2:32:6c:ac:1f:ce:a2:27:51:dc:5b:18:
         e6:f7:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----