Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb1fade3-fb66-309a-93d4-5cc853880e94.roa
File:                     cb1fade3-fb66-309a-93d4-5cc853880e94.roa (raw, json)
Hash identifier:          rp4xIpzakyfzjRNsdZavys4M9EzrtTu4/U+qPNATul4=
Subject key identifier:   00:97:A6:01:4A:AC:7A:B9:03:8A:83:1F:90:E5:83:A8:E1:C9:2C:9F
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583E9874579B70C1F6E16FACED00
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb1fade3-fb66-309a-93d4-5cc853880e94.roa
Signing time:             Fri 24 Jun 2022 17:36:07 +0000
ROA not before:           Fri 24 Jun 2022 17:36:07 +0000
ROA not after:            Fri 19 Oct 2029 04:00:00 +0000
asID:                     60438
IP address blocks:        2602:fba1:999::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:98:74:57:9b:70:c1:f6:e1:6f:ac:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Jun 24 17:36:07 2022 GMT
            Not After : Oct 19 04:00:00 2029 GMT
        Subject: CN=0a90ade1-8330-49a4-89c5-9ac03f04a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:63:12:8d:49:d5:ce:1c:65:42:10:75:35:
                    3d:4d:dd:06:72:9b:0a:b9:b7:e4:34:99:45:aa:a3:
                    35:bc:9c:ec:4d:42:a0:d8:84:75:23:a3:55:5b:fa:
                    7e:45:d6:58:87:d1:38:41:03:b6:d6:69:72:4d:8f:
                    fe:28:1a:ef:96:77:ae:9f:29:86:fb:73:c5:75:6a:
                    fe:c2:6f:b1:a6:07:20:10:13:1e:79:cb:c3:d4:7f:
                    dd:e8:d5:b7:c8:e1:6b:72:4a:1c:13:7e:d3:98:c9:
                    1e:15:90:87:49:18:8a:f5:f6:2c:61:a8:ba:09:c2:
                    1d:c9:45:a6:ee:f9:22:35:b6:4e:61:31:1a:03:22:
                    fd:2e:bc:6f:da:03:77:e5:e5:54:d3:e6:ca:bb:01:
                    58:86:ff:10:9b:d4:5c:a1:57:3e:ce:f3:3d:44:8d:
                    a4:c3:a1:88:2e:88:4e:c1:d4:3c:65:79:1a:4a:99:
                    b1:6c:fb:47:de:26:1c:76:03:d0:cd:4f:bb:16:1f:
                    b5:68:c1:d5:ae:ee:22:e2:af:fe:be:e8:08:04:06:
                    1a:be:44:eb:64:55:38:89:9e:49:f7:7c:93:e8:cb:
                    63:d3:2c:dd:ed:06:0f:41:b6:a7:ed:59:65:97:0c:
                    90:68:35:e6:15:9e:28:80:68:e1:24:1c:12:e1:d6:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:97:A6:01:4A:AC:7A:B9:03:8A:83:1F:90:E5:83:A8:E1:C9:2C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/cb1fade3-fb66-309a-93d4-5cc853880e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:999::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:32:1e:6a:be:91:81:f6:59:b8:4e:99:c4:48:bc:1e:10:
         d1:0c:08:71:20:e2:ee:d0:4c:d4:1f:c5:6c:73:28:d8:bd:e4:
         bc:b8:20:aa:61:6a:fc:a2:f0:2f:1e:65:9f:2b:0e:53:82:e4:
         59:f1:15:dc:11:e9:48:27:3b:48:d5:89:1e:26:4a:cf:16:90:
         a1:4c:c7:97:cd:63:0f:53:93:ca:f8:22:12:d6:d2:6f:99:3c:
         53:96:eb:0a:10:5c:96:56:88:90:9e:94:34:f7:f7:e0:c4:3c:
         4c:1d:22:b7:81:e3:ee:42:80:cc:2d:0f:09:d5:72:ec:77:77:
         c2:d6:d8:08:40:35:12:ed:50:68:60:c5:34:ab:9f:fd:18:40:
         4e:a6:67:05:00:00:3e:55:7b:d8:a6:06:11:6e:84:fd:27:11:
         c2:9d:f8:88:7d:81:3a:1b:b0:72:89:e0:7b:83:76:4d:37:eb:
         26:1c:6b:d5:46:35:09:c0:58:a1:0d:a0:3e:46:74:95:dd:29:
         07:c7:00:bd:f3:1e:bc:e3:4b:9b:e2:89:c5:47:70:7e:6d:33:
         73:00:a4:af:f3:16:16:af:1f:ba:53:b9:0b:4c:24:61:fe:39:
         23:d1:4b:02:a1:ad:12:42:fa:aa:95:f1:13:6d:c1:49:4b:57:
         5c:28:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----