Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/a57df2f7-724d-324c-9c5c-52163a9b45d2.roa
File:                     a57df2f7-724d-324c-9c5c-52163a9b45d2.roa (raw, json)
Hash identifier:          DB1aSgeDO5SWKA9A4Qjk33UpDdQZkO9rlwa3o7rZO8A=
Subject key identifier:   3E:2F:37:B8:C7:B1:44:BA:D5:29:38:28:FB:3A:71:EF:54:0F:48:4F
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F43285842DC83B14356CA22DF54CBD300
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/a57df2f7-724d-324c-9c5c-52163a9b45d2.roa
Signing time:             Sat 12 Aug 2023 15:08:27 +0000
ROA not before:           Sat 12 Aug 2023 15:08:27 +0000
ROA not after:            Fri 10 Nov 2023 16:08:27 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dc:83:b1:43:56:ca:22:df:54:cb:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Aug 12 15:08:27 2023 GMT
            Not After : Nov 10 16:08:27 2023 GMT
        Subject: CN=d20125b3-4379-4ada-8b3a-8c9853214103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:2a:d9:e6:f8:49:8c:85:2e:09:f0:1a:2b:
                    dd:73:81:43:ee:de:c6:03:c4:46:c9:79:26:5f:93:
                    b3:4c:c5:e0:25:19:af:c6:cf:af:cc:32:2e:c2:6f:
                    75:7c:6f:46:af:25:78:9d:30:d7:6c:ca:6f:20:76:
                    78:22:d5:ec:2c:85:ac:81:43:8d:14:89:5c:c4:fd:
                    12:76:30:4b:f2:17:a5:d3:cf:5c:48:dd:a0:db:e1:
                    70:87:12:09:d5:76:36:9e:e2:e3:09:90:f9:ab:56:
                    88:92:83:b4:f8:2a:44:d9:ed:94:ea:02:32:b6:74:
                    da:ea:b4:69:e3:02:a9:77:0d:22:4a:65:04:95:8e:
                    cb:f6:03:e4:cf:62:68:fe:43:37:02:9b:50:e1:b7:
                    d0:1f:07:9a:65:17:54:12:b1:e5:08:35:0b:be:d1:
                    06:7e:5e:27:dd:cd:93:53:5c:6a:26:03:8b:fb:39:
                    61:fe:4c:7e:05:1f:07:3c:c0:14:1f:b5:1d:42:2c:
                    e1:00:37:80:f6:d9:8a:ca:45:80:63:25:d0:72:3d:
                    11:df:51:b5:50:69:d2:49:1f:cb:03:40:9e:e1:33:
                    8c:9f:22:80:cf:9f:22:f7:2b:d3:5b:f6:74:a7:38:
                    fe:85:d4:94:44:12:61:72:f7:1b:a2:1f:ea:87:e0:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2F:37:B8:C7:B1:44:BA:D5:29:38:28:FB:3A:71:EF:54:0F:48:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/a57df2f7-724d-324c-9c5c-52163a9b45d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:35:3c:8d:6f:a5:48:ab:90:c6:40:50:99:74:42:0d:fe:
         16:8e:84:15:66:65:f8:e2:fc:08:ac:91:b2:5c:25:72:b7:df:
         a8:72:8f:17:54:89:7d:d5:48:da:42:c8:6d:7f:95:e1:b5:d9:
         52:4f:dc:e1:61:bb:da:ba:45:fd:4a:17:e4:ae:4a:9a:39:b6:
         30:d7:99:bb:1b:40:e4:66:5e:4d:55:ed:7e:68:0d:a3:31:9c:
         52:79:f5:54:94:86:38:62:ba:88:16:a2:98:6c:20:1d:22:5d:
         44:a0:60:3a:b1:b3:8c:38:10:d4:b7:c0:0e:66:bb:82:24:db:
         08:35:a8:b7:8b:c0:27:e2:f3:fa:32:b3:93:18:ce:ee:94:9d:
         db:b5:a4:91:ef:6b:b0:fa:1f:37:41:8d:f3:ce:77:fa:b6:31:
         76:b3:65:19:c9:bc:7a:36:4e:d8:d2:d2:73:df:27:6a:64:97:
         08:c2:78:9e:43:31:71:45:5d:35:f4:a4:bd:90:21:d8:ec:7f:
         a8:4a:59:22:49:72:b3:c1:13:f5:63:7c:d2:16:a8:6a:98:90:
         41:01:f3:d3:02:8c:02:75:38:02:a9:49:88:f5:fe:5e:6e:14:
         2f:69:59:0f:df:31:d1:37:36:83:b8:f1:e6:47:0c:00:91:11:
         9e:7d:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----