Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/c5222684-1304-3766-b45f-cceb985cce06.roa
File:                     c5222684-1304-3766-b45f-cceb985cce06.roa (raw, json)
Hash identifier:          Ubd1F61UV+zss57Z74hCALbCgc0F2Foxy2wngoAF9yc=
Subject key identifier:   28:0D:C2:6C:B4:00:8A:24:25:5A:4D:5D:06:19:22:79:AB:0A:C9:C0
Certificate issuer:       /CN=2daa05d7-4212-40cc-8395-01a754675daf
Certificate serial:       010D0C9F43285844F465593B21D8C9DAC11C2900
Authority key identifier: 4F:7D:86:6B:7E:5B:E8:BF:67:ED:EF:A5:5E:49:3F:C7:B3:69:65:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/c5222684-1304-3766-b45f-cceb985cce06.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     14618
IP address blocks:        2602:fbcc::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:59:3b:21:d8:c9:da:c1:1c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2daa05d7-4212-40cc-8395-01a754675daf
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=60626aaa-c2ff-4cab-b0f0-681b481c31bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:c2:6f:dd:9b:5d:8f:55:b0:54:e9:e9:83:
                    07:f7:58:4b:a9:7c:63:f3:ae:37:3f:1c:58:b7:cb:
                    a8:32:c3:5c:7d:c0:f8:07:3b:19:a8:6b:d8:7c:e8:
                    11:95:38:1d:02:e4:fe:19:6c:99:8d:83:1b:5f:1e:
                    92:e5:bb:c4:88:32:4b:cc:41:68:50:89:ab:d8:2e:
                    d3:a0:b7:f6:ee:2d:2d:3d:a3:b6:33:20:2a:4f:95:
                    f5:3f:13:c3:56:83:93:10:14:13:8d:0b:68:e8:61:
                    34:60:92:f1:48:d9:bf:ef:a0:28:51:e9:54:1d:ef:
                    d6:a0:2b:2f:43:5e:00:cf:d2:18:bc:f8:41:a3:bd:
                    57:65:ec:b4:1c:fd:02:1a:35:2d:b9:a5:da:dd:13:
                    e7:be:28:a2:21:e3:83:3c:30:a1:50:ba:94:8b:52:
                    53:43:3b:9d:1d:43:d0:05:88:4d:1c:e2:92:af:39:
                    ee:c7:4d:c5:39:af:3e:2d:75:8f:61:af:0f:51:b7:
                    61:ee:54:cc:47:90:c8:2f:0b:c7:4e:c2:ee:36:37:
                    0a:ab:13:19:9d:e5:5b:c6:1d:15:b4:ee:0d:43:2c:
                    67:44:4d:99:d8:e0:33:49:0b:2b:36:fc:84:b9:07:
                    5b:58:be:06:4e:7a:0d:59:ad:82:fd:09:ed:ee:f0:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0D:C2:6C:B4:00:8A:24:25:5A:4D:5D:06:19:22:79:AB:0A:C9:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/c5222684-1304-3766-b45f-cceb985cce06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf/2daa05d7-4212-40cc-8395-01a754675daf.crl

            X509v3 Authority Key Identifier:
                keyid:4F:7D:86:6B:7E:5B:E8:BF:67:ED:EF:A5:5E:49:3F:C7:B3:69:65:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2daa05d7-4212-40cc-8395-01a754675daf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:b0:f7:b2:9b:e1:ad:2b:f5:b7:7f:cb:78:e4:b8:8b:bc:
         85:3e:ba:a2:f5:70:a6:07:be:12:31:bd:db:a7:b4:0e:80:70:
         8a:e6:d4:70:97:ef:c1:9c:2e:20:01:cc:9c:19:69:4b:ca:8b:
         15:87:4d:f8:54:8e:1f:8e:db:8b:4d:e7:91:1e:36:9d:cb:53:
         37:fa:d5:3d:99:33:b1:dd:a6:49:20:27:92:eb:b8:0f:33:4e:
         27:a8:2f:cb:36:cd:a8:07:f4:43:e4:c8:9d:b6:cc:74:58:5a:
         cd:0e:5b:ae:b0:6d:00:fe:c6:9f:89:11:29:21:eb:c0:01:0b:
         6d:99:d7:ae:54:87:3c:a5:55:bd:c9:a8:51:6e:3b:e7:1b:e4:
         8f:f8:ef:7d:b1:56:8b:4f:76:09:f7:73:14:d4:64:01:1f:94:
         20:9c:21:52:e2:24:f0:31:08:49:8d:75:23:c9:50:09:5e:b6:
         b8:54:ff:bf:73:77:55:84:ac:c2:58:10:1a:41:a4:93:d8:d6:
         e0:b4:3f:52:72:f8:35:29:88:b4:70:a3:f5:f2:88:b0:2d:c1:
         ea:14:0b:c0:d9:5e:0f:bc:69:20:e7:3b:30:af:2c:0a:2c:84:
         cd:e9:a0:9d:b0:bb:1b:73:d6:a1:b4:13:4e:bc:8a:43:89:61:
         2c:2b:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----