Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/5d2c6a16-b9e7-35d9-8c24-4ee194382fd7.roa
File:                     5d2c6a16-b9e7-35d9-8c24-4ee194382fd7.roa (raw, json)
Hash identifier:          Ts8Mipms7Lokmp60iEfC/9Lm0H82aXDPuze8+fdFdNg=
Subject key identifier:   1F:EF:39:C5:23:CA:E0:8D:7D:42:ED:7C:6A:BC:C5:32:CE:93:6F:0D
Certificate issuer:       /CN=a2b35c64-0125-4744-9037-ed86e569783a
Certificate serial:       010D0C9F43285842D11975361E8AC233F5F84100
Authority key identifier: D2:5D:4E:FB:82:97:34:22:75:2F:89:1B:92:32:CE:AF:6D:41:CD:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/5d2c6a16-b9e7-35d9-8c24-4ee194382fd7.roa
Signing time:             Tue 08 Aug 2023 13:00:25 +0000
ROA not before:           Tue 08 Aug 2023 13:00:25 +0000
ROA not after:            Mon 06 Nov 2023 14:00:25 +0000
asID:                     62788
IP address blocks:        2602:fd78:ffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d1:19:75:36:1e:8a:c2:33:f5:f8:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b35c64-0125-4744-9037-ed86e569783a
        Validity
            Not Before: Aug  8 13:00:25 2023 GMT
            Not After : Nov  6 14:00:25 2023 GMT
        Subject: CN=fc14505c-369c-4c6c-a0c8-c5d99fff356f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:69:e4:cf:d7:b8:c0:71:16:d8:83:b9:08:
                    0e:6a:67:4b:bf:9b:43:37:7a:20:77:91:e6:d1:ee:
                    d1:af:6b:59:3f:01:89:3a:96:73:83:9c:9d:b9:c4:
                    29:49:9d:6e:1b:5f:92:d4:37:5a:e1:e2:a0:8d:46:
                    92:7c:61:01:fc:b8:00:b5:02:98:f9:e1:fe:61:e8:
                    ed:d3:a5:8b:53:a1:f8:a9:5f:4a:90:42:46:ba:03:
                    7f:c6:cd:ed:14:90:c4:69:8c:ff:a4:cf:58:40:39:
                    a0:a8:41:2c:e4:25:1a:c7:ca:95:26:8f:0a:0f:93:
                    2b:34:7d:b0:24:bc:ec:cc:77:e0:93:f2:ef:81:ba:
                    23:eb:16:bd:f1:37:59:90:68:83:db:41:68:14:60:
                    2f:86:c0:65:a8:27:ca:8c:d9:ed:3f:57:ae:5e:1b:
                    ca:8f:9a:92:10:84:76:d4:5c:13:75:df:2a:ff:65:
                    a1:35:19:60:42:f6:3e:af:c8:47:83:cf:02:86:49:
                    54:d7:cc:b6:81:df:f6:38:92:45:8b:d9:1a:c0:db:
                    09:b2:45:8d:2e:04:08:5d:b4:29:36:14:f9:7b:77:
                    80:45:45:66:83:5c:d8:c4:ca:8e:93:4c:75:44:de:
                    3e:8c:fb:6d:da:a1:2a:0e:1c:3a:59:66:82:5d:e0:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EF:39:C5:23:CA:E0:8D:7D:42:ED:7C:6A:BC:C5:32:CE:93:6F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/5d2c6a16-b9e7-35d9-8c24-4ee194382fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a/a2b35c64-0125-4744-9037-ed86e569783a.crl

            X509v3 Authority Key Identifier:
                keyid:D2:5D:4E:FB:82:97:34:22:75:2F:89:1B:92:32:CE:AF:6D:41:CD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2b35c64-0125-4744-9037-ed86e569783a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd78:ffe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:04:4c:20:53:5f:13:3e:f2:9c:c8:c7:a6:f1:0a:1c:d8:
         87:f0:31:93:f5:75:13:55:2d:db:09:ac:ff:98:92:c5:ab:90:
         83:45:17:05:16:fd:c0:3d:6e:d1:a9:6f:1e:8e:5e:c1:e2:2e:
         53:85:f9:b5:1d:d9:d9:78:97:d8:f9:2c:64:9d:05:b9:f0:b4:
         db:52:18:4e:ff:93:ce:dc:b5:de:db:55:5c:5c:84:39:34:77:
         03:aa:bb:ba:d5:9c:3a:7a:63:e4:d6:bc:b4:09:ba:af:fd:cb:
         7e:47:0d:83:3c:48:55:60:7a:64:65:53:be:0e:d0:27:1d:ca:
         9b:df:9e:cf:35:e1:1b:d1:05:cb:5f:a8:be:f7:f7:25:77:26:
         bf:b3:e7:b9:10:9c:b5:74:a5:a3:99:d0:0b:ef:38:a8:2e:fb:
         b5:e3:d7:24:5c:33:c5:52:8a:7b:05:ac:38:64:10:ae:da:07:
         bf:ab:85:ed:2f:b8:f7:e6:8a:31:c4:b6:6a:2e:30:9a:f5:38:
         64:57:63:c2:bf:59:1f:9e:b0:63:14:0a:a1:6c:c5:46:8c:11:
         59:b4:4b:e9:1c:93:a8:14:0b:73:74:42:f8:c5:87:2a:9b:fa:
         f8:df:c6:42:75:9a:75:67:9d:65:ac:f6:27:e9:6d:b8:08:5d:
         1a:88:42:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----