Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/ba62bac9-91e0-3128-bbce-1f4fd4c70222.roa
File:                     ba62bac9-91e0-3128-bbce-1f4fd4c70222.roa (raw, json)
Hash identifier:          Ece4pfYpkuEgn1LTHBUMCwFZoJjyAFJ8BL2xx55QeVw=
Subject key identifier:   5B:B6:AB:D4:CE:62:36:9E:3A:4F:C9:76:73:38:6A:F1:0C:E9:69:F1
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843E7DF9639E43D457BB5E1E7C0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/ba62bac9-91e0-3128-bbce-1f4fd4c70222.roa
Signing time:             Thu 16 Nov 2023 09:34:26 +0000
ROA not before:           Thu 16 Nov 2023 09:34:26 +0000
ROA not after:            Wed 14 Feb 2024 09:34:26 +0000
asID:                     3000
IP address blocks:        2602:fa2e:a00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e7:df:96:39:e4:3d:45:7b:b5:e1:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 16 09:34:26 2023 GMT
            Not After : Feb 14 09:34:26 2024 GMT
        Subject: CN=da392ed1-fee2-4956-8cb1-0897f26cabb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:30:dd:40:86:52:2a:41:85:b5:de:ba:93:
                    fc:aa:dc:05:86:35:67:e3:e7:5f:cb:38:65:14:f3:
                    a1:3a:d3:0f:f8:97:3d:03:66:ea:ae:0e:73:84:b3:
                    9e:d8:8c:0b:9d:da:23:1d:6c:70:7e:0c:ba:25:21:
                    b2:0b:67:66:2e:e6:b5:d1:1a:e6:3f:67:c9:60:e5:
                    31:7b:77:22:cc:dd:1f:c0:07:26:f3:76:6c:1a:04:
                    30:cf:8d:ae:8f:91:21:93:c7:65:69:79:aa:1a:44:
                    94:86:60:a2:46:fb:40:9c:b1:84:f9:82:2e:4d:c7:
                    88:7a:16:be:43:97:7f:40:05:5f:78:db:9f:b3:d8:
                    24:cf:bc:3d:5c:ac:2f:6c:23:bb:6d:20:c2:87:6f:
                    c2:0d:46:d9:89:8c:d6:a0:f8:ce:7c:68:0c:5c:3e:
                    b5:ee:c4:89:28:4b:b9:50:4e:16:82:fb:39:3e:9b:
                    49:89:71:58:55:e0:dc:11:d0:f6:51:3d:dd:79:41:
                    1d:62:8b:b3:3e:3f:1f:b1:06:59:ed:c7:76:ba:5e:
                    c9:00:a0:71:dd:ca:e9:33:56:da:e5:3f:5f:91:a2:
                    c5:61:3f:dd:41:09:01:28:11:ca:ee:c1:5f:d2:b4:
                    65:49:95:ef:79:33:4c:ce:de:1c:1f:47:2a:e6:e4:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:AB:D4:CE:62:36:9E:3A:4F:C9:76:73:38:6A:F1:0C:E9:69:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/ba62bac9-91e0-3128-bbce-1f4fd4c70222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:79:36:44:8e:51:39:f4:28:de:cb:9f:32:b6:13:72:05:e3:
         2d:09:25:07:70:b0:28:7c:bf:9b:15:c0:a5:79:a5:cf:b1:93:
         f7:26:55:09:f5:9e:63:89:fa:db:5a:54:14:0a:7a:f2:b9:08:
         8f:86:72:d3:df:0b:ed:23:82:ba:36:df:5e:e2:94:f4:f3:cc:
         04:fd:14:0f:65:7b:9d:57:71:30:3c:3e:4e:95:9f:39:34:8f:
         f2:5c:44:1f:fc:80:33:bc:a2:ef:3c:2e:ea:36:d6:54:35:11:
         b9:f8:ba:b2:ff:79:47:f8:54:db:2c:0f:82:6b:0a:c2:c4:36:
         28:0d:69:d7:24:e0:12:71:ed:56:f3:bb:0b:f6:3f:5a:fe:5d:
         01:27:2f:6f:38:7a:de:70:61:0a:28:66:62:8e:a7:47:d2:b6:
         39:83:01:af:de:39:40:32:e5:c9:f3:f2:7d:ac:79:d6:72:4a:
         e2:7a:63:45:e2:ac:e2:92:b4:7d:0d:7c:0c:04:fa:a2:ad:fc:
         eb:56:f8:e9:60:a8:23:8e:7b:9d:91:14:10:12:ec:22:ed:5f:
         80:75:69:eb:14:a5:6b:0b:2e:c0:1f:d4:4a:f5:72:72:20:28:
         3d:c5:07:e5:a3:ec:e5:bb:f5:f8:95:98:fb:b3:14:f7:19:35:
         9d:20:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----