Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/5f716430-9a33-3bfd-a33e-45632a01538b.roa
File:                     5f716430-9a33-3bfd-a33e-45632a01538b.roa (raw, json)
Hash identifier:          34Eeoqkx9bQLs3TaKIjX74LyGrW9wqV5e77B1tpBIPw=
Subject key identifier:   E0:6C:25:D5:EC:0C:71:C2:17:D9:84:99:C9:E7:EE:A2:41:A2:1D:1C
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB9195B3F5741DF18B073C1E0
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/5f716430-9a33-3bfd-a33e-45632a01538b.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:19:5b:3f:57:41:df:18:b0:73:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=44ec6a38-301a-4a86-9a07-396738a847e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:02:97:fc:88:66:b4:d3:7d:43:3c:9b:c8:
                    ce:f1:0f:a4:04:7b:30:88:0c:dc:e4:14:98:32:de:
                    9b:f3:1e:25:a7:e4:3c:fe:1d:de:dd:af:57:2f:ef:
                    f4:d9:6e:c4:ed:ae:02:10:49:9f:33:58:ec:ad:18:
                    21:7f:72:fd:a6:c0:aa:40:8f:16:88:b6:99:d5:ea:
                    c4:51:e1:07:81:1c:24:6f:f5:be:60:c3:e1:64:df:
                    6c:a7:be:c7:f9:fc:e8:4f:5e:f0:3e:23:fb:f3:77:
                    8e:1b:9a:69:09:a1:e0:76:f3:97:b4:92:6e:7d:be:
                    af:d3:34:b8:b1:85:43:01:2d:e9:6f:7c:7f:31:9d:
                    22:1b:1e:de:df:28:57:0e:78:5d:42:6d:76:59:cb:
                    c0:04:42:bf:ce:83:0d:fb:07:77:a3:39:a8:46:6b:
                    bb:30:38:84:27:0e:e8:c0:1a:4e:9b:89:0c:32:fa:
                    74:ee:92:09:d0:4b:13:8a:88:70:be:78:71:b3:44:
                    16:43:7f:07:dc:45:8a:11:ce:5e:2c:f2:28:79:ea:
                    65:85:05:58:e4:b8:58:0b:0d:4a:98:e1:fc:bb:4a:
                    79:fe:ab:5b:71:eb:cd:1a:82:c2:6a:b9:76:7a:36:
                    db:af:c4:61:fa:fb:81:1c:21:51:49:0c:b7:a4:ee:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6C:25:D5:EC:0C:71:C2:17:D9:84:99:C9:E7:EE:A2:41:A2:1D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/5f716430-9a33-3bfd-a33e-45632a01538b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:07:b4:19:cc:d5:ec:4c:fa:2a:60:86:c9:4e:64:b2:1e:71:
         06:2e:41:4e:24:d5:ba:35:fa:a8:2d:03:31:7a:97:ed:56:ac:
         26:d7:04:bb:e3:4d:4b:e3:1d:71:0a:9b:3e:f0:7d:e9:fc:c0:
         ec:42:b3:05:12:ca:48:2c:29:e5:57:f1:a1:96:6f:f1:3a:f9:
         14:ab:d2:b5:c4:44:70:d6:aa:d0:84:c6:c2:8f:11:a6:e9:a8:
         2e:83:4f:a8:a6:82:0e:35:31:8c:d9:a0:e0:de:ae:40:ba:07:
         93:7e:6e:bd:99:d6:03:60:c1:a5:c2:c8:8f:e5:d7:8c:f3:c6:
         d7:d6:7a:2e:20:b9:8b:8e:f3:3a:27:cf:eb:f6:74:53:fe:3d:
         75:21:b1:09:b3:86:99:b1:e8:58:38:b7:0c:da:8b:05:cc:9b:
         8e:b1:5a:11:24:ed:67:cc:46:52:82:bb:cb:3c:20:9b:fc:b4:
         4a:6b:f6:ae:51:81:0b:bb:22:2e:b0:b7:42:e4:90:44:ca:9d:
         67:85:1a:5c:aa:c3:49:54:12:87:5d:af:d2:f1:87:ef:fb:c8:
         80:8e:8a:1b:90:04:de:11:f6:41:39:1c:0e:17:72:15:39:cc:
         6a:ae:35:1d:bd:fb:49:eb:c1:92:78:27:e2:7c:59:fa:26:d1:
         0f:9f:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----