Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/d916ebe3-6a4f-32f1-8bd3-82af23ed443f.roa
File:                     d916ebe3-6a4f-32f1-8bd3-82af23ed443f.roa (raw, json)
Hash identifier:          8VK9aiv1K8xKBz+jaw3AEPS6XcFdTloNzFhYOvkURUc=
Subject key identifier:   F8:A6:E5:DE:55:32:29:37:EF:E9:4B:38:57:4E:23:C1:3B:74:8E:16
Certificate issuer:       /CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
Certificate serial:       010D0C9F4328583F9D5ADBF1E44C141682DF5890
Authority key identifier: E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/d916ebe3-6a4f-32f1-8bd3-82af23ed443f.roa
Signing time:             Thu 13 Oct 2022 21:21:08 +0000
ROA not before:           Thu 13 Oct 2022 21:21:08 +0000
ROA not after:            Sun 15 Dec 2024 05:00:00 +0000
asID:                     203333
IP address blocks:        2602:fafd:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9d:5a:db:f1:e4:4c:14:16:82:df:58:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca
        Validity
            Not Before: Oct 13 21:21:08 2022 GMT
            Not After : Dec 15 05:00:00 2024 GMT
        Subject: CN=132dbf52-8d16-4d4c-9889-7345eb0013ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:e4:24:21:ad:0a:86:cc:aa:0a:76:d5:94:
                    62:b0:d0:21:9e:72:84:34:e7:89:11:d0:67:2a:c2:
                    1a:9f:60:e9:18:81:66:a5:7a:e2:7a:34:e3:85:ce:
                    fa:89:88:b7:03:71:ab:66:96:f1:37:a9:96:64:5f:
                    ce:63:65:4b:5c:ed:14:5e:25:d7:ec:4b:a9:07:f8:
                    0f:fc:5d:fa:91:61:2e:4f:9b:d4:b9:95:7a:5e:09:
                    0e:0a:a6:d6:75:62:00:8f:81:e2:11:c3:d9:d6:f8:
                    37:af:1f:ed:dd:d3:60:39:76:3e:95:87:a9:bb:7a:
                    8f:22:64:c7:4b:3b:5d:14:18:1f:26:de:52:ba:91:
                    2d:c6:ea:0c:96:30:6e:5a:40:52:81:7b:4d:4e:a1:
                    fa:5e:6f:2d:e8:70:62:07:a2:06:34:c1:f2:01:ed:
                    0b:7e:a6:de:61:00:3f:f8:e9:c3:8a:00:37:46:c6:
                    99:17:bd:81:a6:25:e2:fa:a8:8e:85:ce:73:33:8b:
                    30:f2:b1:ef:97:37:a9:3e:3b:e7:64:e5:dd:06:77:
                    63:ce:76:95:7d:4a:18:26:ae:15:27:ba:65:73:2c:
                    f4:51:3a:d4:9b:ea:87:20:7e:9f:40:6a:94:6a:6a:
                    e5:46:f1:32:31:5d:57:d6:23:71:c5:72:ed:bc:74:
                    05:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A6:E5:DE:55:32:29:37:EF:E9:4B:38:57:4E:23:C1:3B:74:8E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/d916ebe3-6a4f-32f1-8bd3-82af23ed443f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.crl

            X509v3 Authority Key Identifier:
                keyid:E2:CD:EF:01:C2:EA:42:8D:BA:29:6A:9F:7F:B0:26:4C:98:46:C4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddb0f0d1-f3f8-4367-a660-e9f87b4f2cca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:57:76:8c:26:ba:52:85:9c:3b:56:a7:e6:1e:a2:09:24:00:
         b9:fa:52:45:64:ea:3b:f5:a1:6c:7d:1e:bf:0f:af:55:f9:34:
         64:a4:76:0d:7d:dd:8d:47:84:de:8e:5c:2d:3b:88:66:aa:97:
         7e:15:48:c0:03:57:13:0b:a2:ed:4e:f8:35:d7:58:5b:e1:e2:
         1f:74:a3:79:be:5a:90:d0:3c:9c:62:82:32:01:29:94:3a:e5:
         20:2d:c2:74:eb:2a:18:bf:a7:97:38:a6:46:6d:43:ee:00:2d:
         ed:87:4e:84:e8:fe:22:01:22:7f:00:7a:c2:f6:ed:12:91:b1:
         77:70:72:3d:89:26:15:bf:f8:3e:49:cd:a5:ba:59:fc:8a:37:
         40:ac:84:7f:e2:02:3c:be:ea:3b:86:a9:a1:38:e8:5f:d0:11:
         5e:25:37:e1:de:c9:17:c8:53:14:91:04:78:fa:79:6b:23:82:
         1a:c2:6e:ee:a9:44:03:ff:bf:16:4f:27:f2:61:7b:f1:8c:2a:
         74:b3:06:e7:27:fc:a9:3a:83:f6:cb:85:43:ae:b4:e2:d8:4f:
         eb:0e:35:2a:0a:66:9c:db:95:8e:2f:4e:bb:17:2e:09:17:1e:
         fb:80:bd:36:aa:df:76:2d:6f:77:8d:5c:62:47:d2:11:df:e4:
         d9:8e:07:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----