Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/51a6ee46-871b-3b12-b0e2-544c58187b86.roa
File:                     51a6ee46-871b-3b12-b0e2-544c58187b86.roa (raw, json)
Hash identifier:          tLiaRU5Hp2rnciS5tNVOGPNCeTN8p/Z02BOv9HJLpS0=
Subject key identifier:   A5:70:A2:C6:77:E9:EB:C8:F4:2C:9B:36:6C:E0:80:DB:13:A8:B9:B7
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F4328584218E205926E10B6711DC1E900
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/51a6ee46-871b-3b12-b0e2-544c58187b86.roa
Signing time:             Sat 03 Jun 2023 13:20:04 +0000
ROA not before:           Sat 03 Jun 2023 13:20:04 +0000
ROA not after:            Fri 01 Sep 2023 13:20:04 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:18:e2:05:92:6e:10:b6:71:1d:c1:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: Jun  3 13:20:04 2023 GMT
            Not After : Sep  1 13:20:04 2023 GMT
        Subject: CN=79e84208-9095-4a7c-b497-462b84953d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:4b:b9:f7:c9:dc:47:20:c1:4c:48:08:a8:
                    84:1f:3f:a8:8c:b7:07:50:af:c3:bf:4a:52:fc:76:
                    9a:0e:ef:4f:fb:cc:dc:7d:71:34:f8:14:33:5c:43:
                    08:ec:d2:7b:dd:e6:ef:4c:64:d1:e0:b5:b0:0f:be:
                    cd:19:3a:04:48:80:d7:e5:90:db:d7:d7:2a:d7:a2:
                    df:e9:ae:de:46:15:d4:69:79:c9:12:0c:e7:dc:2b:
                    25:cf:9b:be:5f:24:b8:cf:e0:eb:0b:92:55:af:da:
                    57:89:cf:f9:58:ae:94:17:86:b8:c3:75:65:d0:62:
                    90:25:5d:8e:84:3f:7c:bd:ae:1d:31:4f:03:0e:2e:
                    9c:2c:54:ea:51:6d:b5:ca:93:22:51:9d:fb:7a:dc:
                    b0:79:7a:dd:b8:93:bc:69:de:b4:39:8a:28:05:a6:
                    5c:23:41:0f:60:79:77:98:8b:1c:f2:72:c3:9f:d2:
                    24:23:e7:27:b2:46:6f:df:f2:ea:80:01:8e:55:85:
                    67:33:6c:f9:8f:16:5c:a7:c4:5a:58:81:9b:46:2b:
                    89:eb:b8:33:06:5c:30:62:cf:77:cc:65:8d:7f:f8:
                    1b:2f:d6:1d:8e:20:aa:17:81:99:2a:30:57:58:cb:
                    0f:9f:9c:f0:81:3a:18:c7:e4:5a:19:af:85:5e:59:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:A2:C6:77:E9:EB:C8:F4:2C:9B:36:6C:E0:80:DB:13:A8:B9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/51a6ee46-871b-3b12-b0e2-544c58187b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:c4:7c:5d:27:44:eb:22:60:2a:38:8f:c3:50:85:b0:be:
         86:09:bb:09:4d:46:34:21:cb:c7:c3:69:34:48:48:14:d6:e9:
         c1:2b:92:94:32:07:bc:7c:d3:23:38:b0:a5:b6:c0:19:7b:6c:
         46:40:a0:83:a7:05:17:ee:9e:e7:90:ed:7a:94:b0:e1:14:60:
         2d:a8:52:5a:9f:3d:cf:b1:24:89:1f:97:91:94:0b:8f:3f:a5:
         50:a5:16:e7:2b:64:2f:78:94:2d:2e:66:0e:67:30:3c:4d:ac:
         5a:fd:80:49:0f:b7:7e:dc:03:2b:86:96:c7:4e:38:35:4e:4a:
         34:dd:e6:20:88:41:a9:f8:6e:9a:cf:f4:ef:4b:9f:17:18:ad:
         7a:b2:ce:0f:b5:69:69:67:03:43:c1:dc:d5:c7:68:91:d6:48:
         3a:f7:0d:f8:f6:cd:93:7a:4f:b8:f8:47:3c:1f:82:f2:db:09:
         62:8b:f0:82:60:46:08:f5:ef:24:31:0a:5e:8f:56:19:80:3b:
         db:98:4e:88:b4:6d:2a:d6:61:79:38:3a:21:18:fb:68:f9:26:
         87:a1:01:18:c8:70:6d:fc:c0:92:eb:ea:7b:49:55:28:25:ee:
         d5:b8:2b:2c:9c:77:d9:9d:1f:0c:03:f9:e5:14:4f:f5:63:ff:
         da:4e:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----