Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/8623483e-ac57-3f96-a0eb-a49fac517f56.roa
File:                     8623483e-ac57-3f96-a0eb-a49fac517f56.roa (raw, json)
Hash identifier:          rdp7nx49MIYVfJ1ozjTE9w/aoJZ2YWVZ319R+DfzBiQ=
Subject key identifier:   BC:F2:87:F4:5F:60:1D:69:23:60:79:8B:8B:39:1C:2A:06:62:BE:5D
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB91AA008219DFB1254111600
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/8623483e-ac57-3f96-a0eb-a49fac517f56.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1a:a0:08:21:9d:fb:12:54:11:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=49b06061-1058-47ee-bac7-61060e5d4c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4d:03:d1:73:2d:71:2f:53:cf:5b:32:96:48:
                    26:ae:a4:99:28:09:4c:bd:51:bd:4c:2d:68:bb:9f:
                    d1:09:4b:55:fc:e1:f7:9c:06:9e:64:27:13:3e:1a:
                    0a:2a:aa:d5:74:5c:fc:0c:c0:17:ea:f5:ac:da:24:
                    ff:ec:c9:46:0c:14:4f:05:93:f7:df:f8:2b:2c:60:
                    47:02:25:de:6a:40:5e:dd:a6:63:1a:02:69:72:74:
                    cf:d8:f1:ca:65:21:94:18:a4:68:ce:59:09:c7:b3:
                    fe:16:f8:08:30:9f:9e:d5:28:9c:24:8d:91:4d:46:
                    2a:6d:02:47:ae:c3:6d:dd:0e:ef:fd:45:bd:ec:de:
                    b9:c6:96:28:f1:2f:09:1d:0d:8a:94:05:21:e9:be:
                    87:ac:72:71:90:8e:56:a3:da:e9:0e:af:6b:0a:59:
                    c9:7b:3d:b6:90:c6:a7:dc:3c:ab:bd:19:e9:4b:28:
                    dc:20:31:39:4a:bd:c2:8b:c4:a8:a1:f5:5f:f7:5f:
                    c2:11:b6:13:91:4a:82:98:ed:8c:86:10:c7:56:17:
                    77:70:de:37:88:cd:b4:9d:c6:06:17:72:d2:87:1c:
                    32:44:bb:e9:d4:f1:64:df:b4:f8:9b:42:68:75:7f:
                    08:e9:c8:87:ca:09:63:0b:e4:6c:e4:4e:fa:d0:09:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:87:F4:5F:60:1D:69:23:60:79:8B:8B:39:1C:2A:06:62:BE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/8623483e-ac57-3f96-a0eb-a49fac517f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:24:77:9c:39:4d:82:d7:ca:3a:76:e2:5f:b8:59:1c:e1:fd:
         68:0c:79:ba:a8:ca:76:ac:5b:d9:78:b1:6e:f1:43:c6:92:8f:
         35:9a:dc:33:fd:93:3a:c6:63:97:f8:85:2c:a1:1d:c7:f5:4e:
         b3:1a:a5:b1:91:11:89:d5:e4:57:99:58:71:71:f4:59:fc:9c:
         96:3e:ff:2f:d4:33:da:22:84:10:41:4b:c5:07:23:88:5c:aa:
         79:7a:59:50:8c:2b:12:99:20:69:c2:fe:6f:e6:c2:8e:f2:6c:
         3b:b8:73:94:ab:6d:ce:19:dc:2e:b7:3f:1e:c8:ef:ad:b7:6c:
         64:f7:12:ba:e1:41:e8:5e:86:5d:84:45:aa:9d:eb:49:2c:d7:
         c8:16:7a:89:f8:7d:81:55:3a:67:95:b8:c1:d2:b8:59:60:19:
         68:72:3c:f1:23:be:85:ce:a5:f7:4d:3d:d7:f1:b3:bb:71:4f:
         2d:73:bc:de:49:10:53:a0:72:aa:22:f3:fe:93:1f:d0:67:ed:
         71:35:53:26:cf:3e:c5:8b:16:d2:44:30:67:6f:fe:d2:ef:46:
         87:d5:ca:12:4e:97:9f:5f:a3:97:07:91:63:44:d2:e0:60:1f:
         14:13:70:ef:6c:3d:b5:f1:b6:df:f6:a2:81:1d:3c:4c:16:bc:
         28:d8:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----