Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3072b395-d230-3d7b-ab66-eae47fe32930.roa
File:                     3072b395-d230-3d7b-ab66-eae47fe32930.roa (raw, json)
Hash identifier:          LUmvr8DMuA8pJeYdNqvXhmHxKr2tM7RA4nmJDNS3NrM=
Subject key identifier:   74:66:67:40:79:58:40:99:25:59:1C:41:25:02:67:39:C8:39:C5:0C
Certificate issuer:       /CN=7c3e0065-2137-4495-8836-4a1420c6d42b
Certificate serial:       010D0C9F4328583DA35CD06B22411A0829BBD5C0
Authority key identifier: C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3072b395-d230-3d7b-ab66-eae47fe32930.roa
Signing time:             Wed 20 Apr 2022 15:18:32 +0000
ROA not before:           Wed 20 Apr 2022 15:18:32 +0000
ROA not after:            Tue 23 Jul 2024 04:00:00 +0000
asID:                     10
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:5c:d0:6b:22:41:1a:08:29:bb:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e0065-2137-4495-8836-4a1420c6d42b
        Validity
            Not Before: Apr 20 15:18:32 2022 GMT
            Not After : Jul 23 04:00:00 2024 GMT
        Subject: CN=75c7fb86-95fc-4d9d-8ff9-a43b1ed185f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:9d:9b:f6:80:11:4a:16:3d:79:80:9f:f3:
                    79:16:85:ff:c4:c6:cc:89:53:bc:be:3c:38:cf:fe:
                    9e:f0:05:2e:04:91:a0:de:b7:8e:8f:7e:2e:26:e9:
                    f3:70:31:81:60:f8:be:c7:62:ac:3b:fc:62:be:09:
                    f6:d2:bb:66:4e:b1:1f:a5:a4:be:12:6a:40:0e:05:
                    a3:64:58:98:fc:02:7c:d0:36:ac:0a:c9:78:aa:b3:
                    28:82:3f:da:ec:3e:0e:cd:38:16:7f:e0:41:6d:d9:
                    f9:20:94:18:bf:e8:51:3c:c7:0f:39:ee:3f:5a:96:
                    3e:89:e1:a9:fc:a7:85:75:84:98:b2:dc:31:f7:41:
                    91:fd:16:01:97:d4:80:2d:f0:2d:67:4e:fe:04:c8:
                    4d:61:33:3b:e1:0c:69:8e:57:35:30:32:75:3f:70:
                    29:99:ed:a1:42:5e:f1:ec:2a:99:dc:77:fe:20:27:
                    cf:06:d1:c3:9c:d6:4b:87:0f:70:95:51:6e:21:1d:
                    7d:af:97:5b:8e:40:c9:36:ad:9e:34:0c:9b:8d:e6:
                    37:4a:46:68:ca:af:f1:1c:63:1b:ec:16:56:2a:c5:
                    8e:1f:43:e0:35:9a:a8:6d:7d:df:0f:b1:2e:29:b8:
                    b9:ed:b4:a4:6a:4a:07:1a:02:12:dd:5f:d4:a5:98:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:66:67:40:79:58:40:99:25:59:1C:41:25:02:67:39:C8:39:C5:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/3072b395-d230-3d7b-ab66-eae47fe32930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/7c3e0065-2137-4495-8836-4a1420c6d42b.crl

            X509v3 Authority Key Identifier:
                keyid:C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:0b:86:fc:9e:23:04:73:01:94:7d:f9:bd:ce:4d:3d:64:
         94:9a:29:25:52:36:f9:67:b1:71:18:b9:90:43:97:fd:a2:b5:
         ef:a6:62:2b:80:ec:0b:81:0f:df:5c:cd:5b:1b:0d:24:40:f1:
         82:93:97:54:5d:aa:e7:e8:4d:ba:86:5f:99:b8:e2:27:d7:1a:
         ee:84:e5:da:bb:0a:c2:7a:27:7f:f5:d8:ff:59:6d:52:f9:53:
         1d:bf:e0:57:ae:e0:42:9f:98:d2:48:83:28:f1:31:47:d1:d8:
         7f:ef:c1:eb:76:85:16:6d:b8:cb:6e:87:5a:b9:80:32:2b:9d:
         56:16:35:a2:3e:91:bb:50:d6:a5:0d:cd:c4:19:e1:d3:00:69:
         ca:12:b2:dd:27:c6:ab:e3:f9:97:04:7a:1d:a5:5c:af:60:0c:
         08:a4:3c:28:be:96:15:97:d8:81:b2:96:bf:22:89:8f:cc:b6:
         88:9a:4d:c3:5c:1c:bf:0a:26:78:ea:a4:0c:f9:35:d4:0d:b3:
         12:2a:32:b8:37:67:cf:bc:ff:9b:64:bf:ed:af:50:69:ae:18:
         f9:d5:e8:4b:aa:3a:d7:ae:35:78:cc:20:d2:a6:31:3d:30:2f:
         63:14:8a:68:2b:71:99:90:8c:23:0d:71:4b:13:45:e2:fd:c6:
         09:41:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----