Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/82d4307d-28f9-3982-b7ea-25cbfd91d861.roa
File:                     82d4307d-28f9-3982-b7ea-25cbfd91d861.roa (raw, json)
Hash identifier:          pO7LVVRrmyC+Vq9B3ZaaNuqUCRRW2Ct028oPg1ed87s=
Subject key identifier:   DB:7B:A2:F1:2B:FD:6E:AB:D0:7E:DB:D0:93:72:BF:BD:F9:C2:4C:97
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BFAFCDC3A216C1134A26F700
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/82d4307d-28f9-3982-b7ea-25cbfd91d861.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:af:cd:c3:a2:16:c1:13:4a:26:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=40a1df9c-c379-42b7-95f1-5ad9326f4491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:15:66:d5:cc:ef:e5:9f:af:36:2b:b5:fd:
                    1a:a9:34:d8:fa:93:29:58:17:f4:72:4f:4c:c8:22:
                    2d:f5:84:62:bb:ba:0b:55:f9:cf:39:1c:b9:16:c3:
                    98:e9:a0:37:d3:8e:21:a1:88:29:2c:07:19:cf:02:
                    e0:fe:3b:48:13:2d:89:4c:6a:4b:68:28:59:9b:ab:
                    51:60:93:ce:1c:e9:68:fc:06:0a:ec:66:d4:05:a2:
                    d5:9c:94:c7:6d:90:d3:1a:28:02:55:1c:ce:a9:1a:
                    8f:40:20:89:89:04:e5:1c:5f:ca:1a:46:d3:e9:24:
                    43:41:9a:44:b5:7d:c6:1f:a0:02:e9:a3:c1:c6:c4:
                    81:12:27:04:12:c9:8d:4e:8e:4d:0f:20:0e:c9:54:
                    05:ac:63:f1:67:74:6b:7b:08:a7:8f:59:87:ab:5f:
                    6d:9d:ba:99:da:dc:de:ed:17:39:de:08:a7:71:e6:
                    df:8b:f7:06:32:36:68:37:6a:98:8c:d8:42:39:a7:
                    9e:fb:be:d5:16:a7:4a:76:44:e7:79:bc:ba:54:37:
                    2a:92:3d:e7:91:85:88:39:85:ad:5a:73:16:c2:08:
                    0c:65:57:30:c2:d2:d1:3c:07:c6:8d:c2:3b:cf:02:
                    94:f6:30:22:c6:19:13:8e:f6:be:02:a4:d8:4c:0a:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7B:A2:F1:2B:FD:6E:AB:D0:7E:DB:D0:93:72:BF:BD:F9:C2:4C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/82d4307d-28f9-3982-b7ea-25cbfd91d861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a2:ba:45:e6:99:6e:95:90:62:5d:73:ba:e1:1c:7e:aa:39:
         b9:0d:8e:c1:a1:5f:c0:04:92:11:5f:f8:85:e6:41:b7:39:36:
         88:7b:3a:2f:57:9c:54:80:0c:63:84:3b:9d:f4:84:e2:05:9d:
         14:59:5d:99:38:cb:f3:86:6f:60:c8:91:56:94:61:b9:3d:0d:
         21:f0:60:65:e3:3a:65:b2:92:1e:f4:46:00:a2:ad:3d:25:77:
         b2:ef:1b:2d:5a:eb:e1:45:35:aa:1a:97:96:84:42:2a:d6:3f:
         ca:00:d1:3c:a0:48:d0:75:5f:3f:32:ce:5c:87:6e:cd:6e:1b:
         6c:8e:02:4c:b6:2e:13:99:57:f1:e0:61:62:ff:48:4a:1f:52:
         04:eb:35:08:2f:ce:18:67:e6:a2:27:67:2d:13:cf:63:13:33:
         91:bf:2a:06:c4:ef:33:b5:10:29:d4:4b:ac:42:31:70:10:60:
         46:d4:39:66:3e:82:1b:49:90:59:f6:6b:50:fa:23:1f:c5:fe:
         dd:70:0e:07:fb:25:d4:31:35:9f:18:28:9e:4a:ee:2e:92:74:
         a3:42:6b:3e:f3:40:3b:3a:8e:50:7d:1b:d3:1b:9f:37:3f:a1:
         b5:64:66:cc:be:44:b8:ea:6a:d6:bc:a8:9f:fc:10:32:74:1a:
         a9:66:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----