Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/3d839167-2540-3ec8-94da-7774a0977a4c.roa
File:                     3d839167-2540-3ec8-94da-7774a0977a4c.roa (raw, json)
Hash identifier:          T1oMzU2dJHgQQtSp1FgMBLHWCl1GLZdrChOiiYGWWW0=
Subject key identifier:   68:61:17:06:13:E6:67:42:01:93:29:33:A8:F4:6E:3F:A5:C0:5E:1E
Certificate issuer:       /CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
Certificate serial:       010D0C9F4328583FCD2250B81B1A36D3D9C86680
Authority key identifier: E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/3d839167-2540-3ec8-94da-7774a0977a4c.roa
Signing time:             Thu 13 Oct 2022 21:21:08 +0000
ROA not before:           Thu 13 Oct 2022 21:21:08 +0000
ROA not after:            Sun 15 Dec 2024 05:00:00 +0000
asID:                     203458
IP address blocks:        2602:fafd:f05::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cd:22:50:b8:1b:1a:36:d3:d9:c8:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
        Validity
            Not Before: Oct 13 21:21:08 2022 GMT
            Not After : Dec 15 05:00:00 2024 GMT
        Subject: CN=01e5f0de-0f6e-4ca4-b680-4db4a5b4c832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:4a:7a:ed:6a:44:26:b9:3b:b1:c1:c1:ba:
                    ba:8a:94:ce:6d:f5:93:74:a1:93:7f:8c:3d:43:9b:
                    d5:91:4f:61:e5:dc:37:8a:46:98:e7:ca:b3:14:76:
                    a1:dd:31:c5:0c:1b:b7:22:e9:db:80:d6:27:09:d0:
                    8f:d7:8a:0d:37:7a:25:26:c1:29:a6:ac:25:6b:b6:
                    7b:0d:ee:7e:d2:33:d4:60:35:05:10:4e:3c:5c:54:
                    33:83:11:89:7a:e5:c0:6c:54:db:c2:1b:01:61:c0:
                    8c:3c:02:cf:d6:0c:37:a7:0f:93:09:64:af:75:54:
                    b7:41:c2:10:fe:0d:81:5a:b9:61:46:69:6f:6a:64:
                    01:73:46:b0:f6:e3:f6:20:fb:4d:40:c5:31:db:33:
                    1f:e5:89:cc:b8:87:b5:0f:e1:df:d5:5b:1f:64:9e:
                    ab:c2:9b:e1:07:70:8a:14:e8:6a:04:5c:85:cd:9c:
                    b0:d3:25:50:5d:7d:61:3d:53:8b:e0:e1:19:6e:da:
                    ac:be:41:b6:24:46:34:ce:0d:08:3b:be:a8:33:f7:
                    16:cd:62:17:46:49:2e:3a:52:60:77:7a:da:53:c3:
                    f6:8c:75:be:6c:dd:7b:52:9d:36:bf:63:85:57:c3:
                    82:ac:d1:10:dd:49:1e:2a:78:c7:80:83:5b:f0:56:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:61:17:06:13:E6:67:42:01:93:29:33:A8:F4:6E:3F:A5:C0:5E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/3d839167-2540-3ec8-94da-7774a0977a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f05::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:e9:14:b6:a9:f1:45:69:48:da:5e:79:a3:83:75:ae:1c:
         5d:81:8b:66:e0:ea:e5:46:8b:4d:c2:ba:30:f0:c2:cd:31:0f:
         91:c8:71:5d:d7:35:78:74:72:10:ef:d9:07:8b:df:c1:62:43:
         b9:f1:f8:76:a0:e2:1b:f5:d3:db:62:af:ae:dc:ea:5d:4b:f0:
         19:8b:e7:d9:bf:ec:6e:9a:81:83:3a:05:98:6b:77:42:61:0d:
         60:46:ee:3e:45:64:9a:db:0b:9b:a2:22:75:9b:7a:42:24:0d:
         18:88:b7:7f:87:3b:01:dc:b3:25:00:e3:e4:81:87:c5:90:39:
         f6:f9:91:08:de:ce:c5:84:54:69:30:98:f3:03:bb:56:ac:1f:
         85:cd:97:25:71:2f:9b:ca:21:b3:31:85:50:dc:e6:11:c5:9d:
         16:87:f2:dd:1e:3e:6c:c7:69:ef:74:72:97:67:44:9e:d5:61:
         73:62:31:0e:57:7a:9f:57:42:4b:75:ab:33:be:c9:c8:91:dc:
         89:4a:d9:2e:47:a2:75:98:39:7a:23:6d:de:00:66:dc:ba:6c:
         13:3a:69:74:3c:1a:af:a4:6c:7b:41:06:cf:4c:55:64:f2:d9:
         c1:1d:77:da:4d:f6:1f:30:60:e6:02:d7:a0:43:c6:a7:c9:24:
         c3:22:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----