Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/98a0ef7f-89fe-3789-8c2b-7af385542b45.roa
File:                     98a0ef7f-89fe-3789-8c2b-7af385542b45.roa (raw, json)
Hash identifier:          mHgWD0F5wt593HCNjNt2fSzSei/4gI513bWxCG9uMuU=
Subject key identifier:   86:76:54:91:61:7F:0C:79:FC:5B:2F:82:3B:C9:30:15:C4:F4:76:0B
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB916D7C11C8549CF960B0380
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/98a0ef7f-89fe-3789-8c2b-7af385542b45.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:16:d7:c1:1c:85:49:cf:96:0b:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=6731dadd-74ae-4f38-8f23-4113586e25e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:0d:b4:70:9e:1c:0e:9e:82:0e:bf:d1:83:
                    7f:2b:0b:0a:db:af:4c:35:d8:d0:b2:59:35:15:07:
                    28:de:7f:3b:8b:53:d2:71:00:34:7c:d1:2b:97:70:
                    59:62:7c:73:99:7d:d8:b7:88:b6:4c:3d:0f:f7:86:
                    69:8d:fe:ab:c6:cb:7b:35:c1:af:4e:d0:32:6d:85:
                    0b:53:98:9e:c6:ea:45:72:d3:8d:05:62:0e:a0:0c:
                    0c:92:86:b4:12:63:a1:22:fe:ac:cb:99:7a:ca:60:
                    32:14:b3:cc:c5:6f:10:6b:b9:7f:78:8b:8f:0a:db:
                    2c:5e:50:c7:d9:b1:17:e1:de:d9:73:48:4c:37:12:
                    68:94:9a:e3:04:b3:00:63:84:0c:df:c1:39:31:da:
                    c6:f5:49:fc:f5:dd:b3:2c:59:c9:ac:62:cf:2a:e6:
                    a2:c9:18:fd:59:6b:e3:c8:7f:ff:4e:71:a7:2b:c1:
                    90:18:03:ff:ab:fe:d8:e2:da:87:e5:8a:87:84:f4:
                    d5:17:fe:d3:bb:f8:54:13:fa:e4:e5:49:de:f5:c9:
                    d3:b0:c2:1b:d7:57:42:f5:d0:75:2d:c0:26:51:61:
                    4a:06:e3:ce:07:13:7b:f5:2f:55:0e:47:d8:36:34:
                    be:30:6f:86:65:83:35:68:09:bb:dd:58:e6:9e:2f:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:76:54:91:61:7F:0C:79:FC:5B:2F:82:3B:C9:30:15:C4:F4:76:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/98a0ef7f-89fe-3789-8c2b-7af385542b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:30:c0:d0:eb:9b:51:d5:75:d7:15:b0:5e:07:9b:ed:a9:
         79:0a:61:7a:eb:c4:94:84:16:7a:cd:72:1a:77:25:c4:8f:bb:
         bc:36:e8:17:87:63:1e:53:a9:e1:f4:c2:99:4d:bf:32:74:ba:
         6c:42:e0:f3:e2:77:92:9d:df:7a:bb:32:14:d1:d1:3a:92:1b:
         7e:24:1d:4c:b2:6c:78:b9:ae:73:5f:0a:52:df:aa:9f:d6:e4:
         7c:76:d6:86:d2:7b:43:2d:07:73:dd:2b:fc:f1:21:79:f9:b6:
         73:68:17:e8:64:76:44:23:83:a1:e1:89:8e:93:93:1c:79:9d:
         09:c5:40:5f:cb:c0:f9:1e:23:19:61:f0:c7:c3:ed:37:0f:e9:
         8b:41:41:cb:7d:52:f6:11:2f:eb:ba:aa:ef:36:b5:77:c2:b1:
         1f:d6:86:9a:ce:9b:da:af:ec:b1:0b:dd:ca:6b:26:31:31:5a:
         dd:ef:79:e3:28:17:c1:a4:a3:15:70:60:70:b6:01:d4:e0:5b:
         05:0a:f7:de:99:8c:6a:5a:5d:8c:fb:cb:b4:98:4d:b7:5f:4a:
         e2:b0:0a:30:dc:58:39:92:ee:0c:52:e8:93:80:a8:d3:fd:93:
         90:25:38:e5:b4:49:b6:1c:5b:0b:b4:43:b0:19:9b:44:a7:ee:
         c1:c3:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----