Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/406d2758-405f-3fbb-8829-afb97db5f7bb.roa
File:                     406d2758-405f-3fbb-8829-afb97db5f7bb.roa (raw, json)
Hash identifier:          U4So85IgrVsQZLdDtD8s+WGgW3YCnpS+5Dcaokv9KWU=
Subject key identifier:   1E:40:4B:52:29:C6:92:77:65:12:29:6B:CB:6D:40:80:F6:C9:41:50
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB91A494A93ADF6D26044B180
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/406d2758-405f-3fbb-8829-afb97db5f7bb.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:c00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1a:49:4a:93:ad:f6:d2:60:44:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=7d58bdd7-8b60-49e0-93f1-bc54c0baa9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:02:fc:86:34:94:28:2b:d0:ee:ed:3b:af:
                    9f:34:66:a5:13:cc:16:cb:56:a9:82:94:5b:09:ae:
                    6e:37:ad:d7:b2:17:7d:87:53:78:a0:52:db:f1:6c:
                    51:b1:95:1c:0d:d1:ba:4a:f8:e8:3d:45:14:04:6e:
                    62:b3:88:b4:e0:5f:46:1d:51:b7:7f:4e:4e:4c:0e:
                    d8:de:b7:c0:93:5a:f6:83:c1:78:2f:5b:d6:5c:55:
                    c9:34:d5:94:a7:10:01:6a:09:ec:0f:33:8a:a1:cf:
                    fd:93:0c:92:7c:5e:2f:eb:e4:45:f9:3d:59:39:a6:
                    5b:86:a2:5a:fb:79:9c:a5:70:cf:06:92:49:d8:2f:
                    f0:e6:71:f8:b2:43:14:57:6d:96:35:26:a3:ae:e1:
                    90:b4:f2:6a:ea:1b:0c:d8:c9:d3:ce:32:60:a6:42:
                    c8:4e:8a:5c:33:b4:95:0a:e8:03:43:03:49:88:1e:
                    b3:2a:62:31:a6:04:3a:29:ae:4a:0c:8b:96:e9:01:
                    82:db:08:a0:f9:88:cf:5e:7d:a7:ca:b2:18:6a:ef:
                    6c:9d:4f:5e:2a:18:25:af:51:71:41:6a:bb:a6:ab:
                    62:69:fa:49:f8:d1:2f:b6:68:68:e3:4e:33:1f:cf:
                    6b:a3:4c:be:e7:5b:80:54:19:0f:c5:01:66:10:bb:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:40:4B:52:29:C6:92:77:65:12:29:6B:CB:6D:40:80:F6:C9:41:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/406d2758-405f-3fbb-8829-afb97db5f7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bb:a0:92:0c:28:26:c6:35:56:b7:9d:15:51:24:b2:38:cd:
         0e:d8:3b:44:f7:40:12:13:f9:e2:21:5e:09:cf:94:b1:30:51:
         fb:5a:3f:5e:71:95:b8:50:20:15:de:1f:bd:cb:4c:6b:51:31:
         43:6f:ff:71:f5:0b:9a:3b:29:54:b5:33:b7:4f:2c:a5:36:87:
         c5:f9:fd:1a:87:e4:88:a8:b9:20:af:08:31:41:6e:0a:98:1e:
         be:63:91:0c:54:35:70:ec:3f:b7:9b:90:50:c3:df:b2:39:9b:
         8d:0d:25:c0:f3:c0:7e:98:09:8a:c7:a7:d0:d5:51:d2:19:9d:
         ed:6e:fd:dc:5a:6d:0c:6c:37:55:ef:e6:1c:50:87:cc:26:bd:
         38:c6:81:2b:32:59:88:a5:04:22:c7:3b:d8:b4:34:d1:3e:50:
         0b:02:0b:fa:da:36:ec:68:9b:68:3b:9e:8f:d4:68:a7:f1:a7:
         95:63:cb:97:44:bf:81:58:28:f9:f1:0a:37:e2:0c:8a:76:3b:
         8c:9d:96:69:fa:2a:e3:fc:5f:8d:fd:e3:2f:7b:84:db:19:e1:
         e5:09:05:3d:5d:0d:39:6f:96:18:5d:19:97:6e:ff:38:fa:58:
         ab:6d:bc:47:2a:c0:73:0f:8f:7f:a2:4e:84:62:93:0c:a7:ef:
         69:3e:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----