Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/87b53328-1117-3c9b-a419-4ec29514428a.roa
File:                     87b53328-1117-3c9b-a419-4ec29514428a.roa (raw, json)
Hash identifier:          d3wPXYFMKozfRLNaI7hVENdrr1vvW6CyUpiqtKbG6Zg=
Subject key identifier:   C0:AF:03:6B:00:2C:42:53:33:75:DA:B2:9C:9E:C9:9D:93:45:61:14
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843F4D709AB5ABE573538753080
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/87b53328-1117-3c9b-a419-4ec29514428a.roa
Signing time:             Tue 21 Nov 2023 01:02:43 +0000
ROA not before:           Tue 21 Nov 2023 01:02:43 +0000
ROA not after:            Mon 19 Feb 2024 01:02:43 +0000
asID:                     401
IP address blocks:        2602:fa2e:100:2000::/52 maxlen: 52
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:d7:09:ab:5a:be:57:35:38:75:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 21 01:02:43 2023 GMT
            Not After : Feb 19 01:02:43 2024 GMT
        Subject: CN=b5a06890-c65b-49aa-aad6-677025e0312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:b9:cc:84:5f:01:37:8c:1e:a7:7c:70:d8:
                    64:e1:78:27:1d:3f:c2:32:42:ad:b7:f6:c5:3e:35:
                    44:a5:30:9f:89:cd:87:9a:12:e1:57:83:8f:c1:a1:
                    49:f4:f8:9b:76:56:9e:7f:c7:e4:80:49:ff:4c:f2:
                    f3:fa:90:49:21:88:f5:56:a9:e4:dc:5a:e8:0c:c9:
                    6f:1a:50:77:1f:2f:54:d1:f6:d6:94:75:f7:df:f6:
                    7c:ef:b6:99:6c:89:d7:ba:42:9c:e8:84:dd:44:dd:
                    8b:2a:9f:e4:42:e0:9f:77:78:c7:67:54:32:f4:1f:
                    d0:79:3e:75:16:9c:80:c5:be:4c:7b:e0:91:94:bb:
                    7f:04:32:74:fc:8e:da:bc:5d:fb:d7:8d:e4:00:93:
                    9c:72:bc:3e:56:f6:f3:b4:82:3f:f6:84:b1:72:65:
                    44:e2:ea:24:e0:8f:a6:f6:e0:20:0f:f9:90:d6:5a:
                    f7:40:f0:12:09:e7:e8:16:13:e7:25:97:66:cb:75:
                    ec:22:08:df:21:cf:b9:1d:5b:83:e1:67:5d:2b:de:
                    7d:57:e5:44:8c:eb:0d:fb:e3:ff:41:e5:ae:8f:09:
                    d7:08:a4:5d:cb:88:7d:bb:5b:55:d1:2e:2b:db:91:
                    74:c6:11:f7:6d:59:02:5e:9e:9e:0d:8a:d4:21:3b:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:03:6B:00:2C:42:53:33:75:DA:B2:9C:9E:C9:9D:93:45:61:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/87b53328-1117-3c9b-a419-4ec29514428a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:100:2000::/52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:44:ff:0d:55:16:04:a8:29:be:b6:2f:5d:66:e8:42:04:ce:
         e9:bf:ed:a4:4b:a8:60:48:63:43:56:9e:66:a9:e3:ae:ba:de:
         b8:94:b4:2a:5b:83:06:c9:c3:70:44:09:ef:83:7e:f8:75:67:
         67:55:14:2d:82:40:74:42:52:d3:76:7b:7b:31:3f:5c:19:c1:
         44:69:58:65:0a:46:08:79:ff:4c:0d:f4:32:7f:ae:b7:48:34:
         9f:02:fb:af:8c:2b:b0:7f:e6:40:eb:46:c2:b3:1b:1a:ad:46:
         69:df:c8:0c:a6:af:8c:34:b2:0d:77:8a:da:aa:bf:42:62:3d:
         80:41:4e:5f:2b:79:e3:ac:7c:87:ad:03:75:6f:14:75:cc:cf:
         24:08:cb:38:2a:df:39:42:1d:4b:08:18:69:18:d3:69:56:3e:
         77:aa:52:33:6a:ce:0a:fb:3d:48:66:39:19:a1:09:c7:e5:ca:
         3b:f1:21:5e:57:53:be:aa:b8:89:2a:8d:06:93:0f:ca:2b:74:
         7a:f0:ae:17:34:1b:ab:67:d3:ad:25:96:2a:ad:e2:5f:34:82:
         b5:67:a3:59:a7:2f:24:ab:ba:9b:a9:00:06:a3:13:f1:7f:c0:
         cb:e8:da:9c:96:50:a4:a8:a1:28:b8:d4:81:15:be:1a:da:48:
         bb:60:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----