Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e/0ce627b8-b4d0-395c-8893-45d96618807b.roa
File:                     0ce627b8-b4d0-395c-8893-45d96618807b.roa (raw, json)
Hash identifier:          f73xHh8E3l2jtqIFb81o3Ee859WChvrGIZ1qIW54/Ek=
Subject key identifier:   73:AB:79:F3:2F:D8:DD:D2:AE:8C:63:E1:27:04:54:E3:67:84:08:AD
Certificate issuer:       /CN=95c1a59a-5395-4fa0-9a6d-76bb3fda419e
Certificate serial:       010D0C9F4328583E84228BD9CF36BD1260381600
Authority key identifier: 2C:26:ED:14:DC:2C:51:48:60:59:47:07:62:8C:1F:F3:D8:C7:DE:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e/0ce627b8-b4d0-395c-8893-45d96618807b.roa
Signing time:             Fri 08 Jul 2022 13:50:04 +0000
ROA not before:           Fri 08 Jul 2022 13:50:04 +0000
ROA not after:            Thu 10 Oct 2024 04:00:00 +0000
asID:                     138517
IP address blocks:        2602:fb45:f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:84:22:8b:d9:cf:36:bd:12:60:38:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95c1a59a-5395-4fa0-9a6d-76bb3fda419e
        Validity
            Not Before: Jul  8 13:50:04 2022 GMT
            Not After : Oct 10 04:00:00 2024 GMT
        Subject: CN=9a23f7c0-c38f-424e-a621-8267017012d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:42:bf:a5:96:36:32:4a:30:00:f2:ec:e8:
                    a3:83:8f:73:c4:4f:20:05:0c:44:f7:dd:e2:57:96:
                    f4:98:ef:f9:7e:f0:ed:c3:ce:63:80:fe:b0:4f:46:
                    d2:0f:d6:bb:01:bd:14:8c:39:f1:28:b7:46:76:7a:
                    ca:47:55:09:56:53:ff:93:44:42:80:87:0b:ec:45:
                    c4:56:1b:5b:f6:28:78:39:e8:04:9d:73:f6:ac:d5:
                    42:a3:03:d7:3d:21:a5:9d:13:eb:b1:ce:2d:fa:04:
                    a2:da:46:05:aa:46:b4:b0:5a:fb:44:d3:8a:53:fb:
                    82:68:b0:de:10:0f:9e:4b:bc:1d:f6:dc:bd:11:a9:
                    09:4c:ea:34:8c:89:bf:ce:8f:aa:6b:97:73:d2:92:
                    9b:b5:0f:09:0a:4f:6e:b7:38:2c:07:92:6b:cf:77:
                    dc:3c:a6:82:ca:a7:a5:56:2a:68:c8:c6:e8:12:58:
                    0c:33:f8:80:a6:97:3c:28:31:19:5d:79:2b:ac:22:
                    5d:11:b8:4d:6c:ee:4a:b6:54:06:9c:05:92:df:7a:
                    fd:92:e6:03:23:df:2d:c9:44:37:b9:af:a9:63:3d:
                    0a:a7:a9:f0:a5:af:9e:27:e5:99:f7:4b:77:3b:8d:
                    d0:3d:e4:f4:96:e8:ea:aa:d2:06:16:50:0a:ed:b6:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:79:F3:2F:D8:DD:D2:AE:8C:63:E1:27:04:54:E3:67:84:08:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e/0ce627b8-b4d0-395c-8893-45d96618807b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e/95c1a59a-5395-4fa0-9a6d-76bb3fda419e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:26:ED:14:DC:2C:51:48:60:59:47:07:62:8C:1F:F3:D8:C7:DE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95c1a59a-5395-4fa0-9a6d-76bb3fda419e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb45:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:f1:57:80:d4:31:4e:e2:ba:53:5a:b3:58:00:c1:6b:ee:
         40:31:a0:49:a3:61:ad:c4:91:b0:13:5e:aa:fe:d8:7a:59:bf:
         95:88:b9:57:20:5e:05:87:29:42:aa:2e:b1:28:42:25:37:f1:
         1e:13:31:f0:c9:e8:4f:b6:f5:d5:f1:0f:87:3a:1d:26:78:52:
         b7:d2:c3:2e:6d:dd:6a:39:87:9a:2a:b5:33:89:db:51:e2:c4:
         10:d9:10:6e:4c:b9:10:6b:b8:d2:b7:47:d6:19:88:51:05:de:
         cf:db:ea:be:42:26:42:ce:87:83:9f:b3:e9:3e:72:10:ae:fe:
         37:f9:f4:5b:b7:32:92:69:ed:82:21:30:ca:47:78:52:9f:5c:
         d4:dd:ca:c5:d5:16:6c:c4:77:f2:a6:ca:ef:5f:01:85:3b:f9:
         0f:fa:35:25:3f:d2:09:aa:bc:e8:11:36:c3:09:48:33:e4:69:
         0d:63:1a:71:af:6b:2c:ca:95:a7:b0:c8:fc:61:91:fa:e5:bf:
         62:da:4c:8b:53:9e:9f:8a:37:da:ec:9c:08:48:e4:fd:c7:e6:
         58:21:43:b8:2a:56:95:ad:02:1d:55:7f:f1:70:0e:d4:7f:16:
         1c:9a:a9:a5:61:e8:25:f2:79:9b:b4:dc:63:6a:fa:c2:19:1a:
         c3:df:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----