Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/292380d1-531e-3ee0-b2b0-1bf82ba515a6.roa
File:                     292380d1-531e-3ee0-b2b0-1bf82ba515a6.roa (raw, json)
Hash identifier:          8EFcQeMQ+M37CqcpC6fZwSADImsOh69IpgARlWnq7og=
Subject key identifier:   7E:66:82:B5:3F:75:C9:87:5D:BA:E3:A1:8E:02:E0:8E:17:A9:A5:CC
Certificate issuer:       /CN=2d60be5a-50f8-4925-8133-058bde8f7ed2
Certificate serial:       010D0C9F43285841E4476B894A8E544C004D5100
Authority key identifier: D6:1D:8E:10:E9:1A:DC:97:F6:A6:47:4B:D1:B3:C5:8C:0C:85:00:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/292380d1-531e-3ee0-b2b0-1bf82ba515a6.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 13 Jun 2023 12:16:35 +0000
asID:                     399114
IP address blocks:        2602:fc51::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:6b:89:4a:8e:54:4c:00:4d:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d60be5a-50f8-4925-8133-058bde8f7ed2
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun 13 12:16:35 2023 GMT
        Subject: CN=fe571e68-50b9-404b-bdfb-9ecae1dd0701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:15:30:e1:58:dc:a4:b8:56:87:85:45:26:
                    99:6f:87:f0:b9:71:bf:c5:c9:d7:37:c8:bf:11:79:
                    14:72:f2:b6:0f:0d:8d:05:fd:39:50:46:94:5c:bb:
                    d9:65:92:10:ca:de:12:54:08:2d:08:e2:2d:e1:90:
                    ab:93:d7:91:ce:2a:9d:7d:ad:00:c1:f3:69:4b:c3:
                    86:71:63:87:eb:c5:88:40:49:11:e8:ab:2b:05:10:
                    3b:0e:f9:18:eb:0e:c0:2c:f0:49:3d:f2:ee:a8:57:
                    3d:7b:81:49:90:49:bd:ac:3c:4d:c6:c5:ca:3c:0c:
                    ff:c8:d7:c5:c4:4f:d4:48:0d:87:ad:19:c2:36:aa:
                    20:af:73:73:54:4c:d8:c8:65:49:91:10:6c:ec:ee:
                    c5:bc:78:6e:21:08:f6:b4:47:6e:73:76:aa:8d:c7:
                    8c:f4:8a:5b:b2:a6:d6:d6:ff:25:5e:2c:64:45:32:
                    72:1c:8f:fa:6b:fc:35:ee:04:54:2e:1f:c2:ad:b0:
                    cf:e4:e4:e9:ed:8b:cf:29:c5:60:b1:19:03:51:2a:
                    31:5a:b6:43:26:7f:a0:cd:cb:38:65:a7:14:cd:8c:
                    27:23:18:37:d9:b1:0c:47:29:10:d4:eb:85:ba:61:
                    2b:e6:76:35:64:7d:d2:da:41:45:c7:64:9b:30:d1:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:82:B5:3F:75:C9:87:5D:BA:E3:A1:8E:02:E0:8E:17:A9:A5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/292380d1-531e-3ee0-b2b0-1bf82ba515a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2/2d60be5a-50f8-4925-8133-058bde8f7ed2.crl

            X509v3 Authority Key Identifier:
                keyid:D6:1D:8E:10:E9:1A:DC:97:F6:A6:47:4B:D1:B3:C5:8C:0C:85:00:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d60be5a-50f8-4925-8133-058bde8f7ed2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc51::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:15:69:db:bd:ed:85:1e:d7:db:bc:16:23:70:a6:c2:9b:
         27:c6:1f:ee:6b:96:7e:cd:05:ba:0f:00:b5:13:57:6e:b4:47:
         5a:f6:10:d8:59:5f:a3:2a:23:21:36:0b:d8:84:ef:1c:84:4f:
         8d:e3:98:d8:45:ad:f4:ea:99:09:5e:70:11:46:43:83:6e:21:
         fc:48:c0:3f:6e:e5:3a:f5:69:6a:cb:b6:a1:a0:67:91:e8:f8:
         7c:41:b7:7c:26:4f:71:9d:60:93:50:fb:63:b9:21:15:45:67:
         e1:12:da:34:7f:fd:5f:a1:9e:a1:d4:a8:81:1e:d7:fa:3c:31:
         fb:38:ba:72:c7:e3:6f:e2:8d:a6:10:20:a9:e5:75:09:15:b6:
         46:10:4d:cf:6e:b1:60:30:2f:b9:71:8f:0e:7a:20:ef:db:77:
         ec:80:f1:f2:9e:6d:d6:60:3d:67:01:65:df:87:7a:10:bc:c4:
         4d:48:17:92:59:39:04:85:9f:36:5e:bd:c2:2c:b4:05:82:9a:
         b4:7a:0e:27:63:7c:30:30:6c:d5:72:8d:51:37:aa:c1:dc:dd:
         97:0c:a8:47:8d:a9:d3:ae:2b:92:b4:b5:91:25:f8:b7:81:db:
         61:a4:cc:e2:86:fc:54:01:c2:52:ed:c6:5e:c0:00:b6:b7:1b:
         23:c8:4f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----