Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b/1bf5098e-3822-3b34-bb4b-a92abc90acaa.roa
File:                     1bf5098e-3822-3b34-bb4b-a92abc90acaa.roa (raw, json)
Hash identifier:          gcl8GDu/M683GOWAQF7xWmEyF/f44ajtllr0xx/qzsk=
Subject key identifier:   F0:6C:FB:DD:0D:E0:0C:8C:9C:B2:B7:E5:74:C1:36:B4:63:0A:D1:12
Certificate issuer:       /CN=09eb6530-af55-4850-923b-e59c3bd21a9b
Certificate serial:       010D0C9F43285839463DF713CC5CE21BE981E500
Authority key identifier: D5:B3:A3:B1:93:ED:74:01:91:B4:8B:23:19:EA:73:0A:79:09:51:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b/1bf5098e-3822-3b34-bb4b-a92abc90acaa.roa
Signing time:             Wed 03 Feb 2021 05:00:00 +0000
ROA not before:           Wed 03 Feb 2021 05:00:00 +0000
ROA not after:            Mon 19 Jun 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        2602:fcbc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:46:3d:f7:13:cc:5c:e2:1b:e9:81:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09eb6530-af55-4850-923b-e59c3bd21a9b
        Validity
            Not Before: Feb  3 05:00:00 2021 GMT
            Not After : Jun 19 04:00:00 2023 GMT
        Subject: CN=fe73a9a8-d14e-46b1-94c0-ee1a0fcb090e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d4:b0:a6:5e:08:68:d1:91:1c:e7:50:75:23:
                    21:35:d0:af:08:0b:ea:f1:72:ee:9f:ce:1f:02:5e:
                    96:3d:36:9c:98:ff:11:50:cb:81:95:85:d7:13:f5:
                    a6:0f:a2:8e:9d:03:d8:e3:aa:d4:c4:74:47:b6:b7:
                    c0:ea:a5:4d:65:bb:f6:43:a5:47:8f:e8:49:14:96:
                    d6:e3:c8:e9:68:39:a7:77:ce:cd:3c:24:64:7a:15:
                    45:1b:46:e0:04:f4:45:a9:c6:49:f9:79:84:86:9a:
                    fe:8a:92:98:fc:c8:33:9a:19:92:e0:ed:7b:16:f4:
                    1b:4d:59:f1:df:35:5e:ba:65:c9:e6:fa:bf:17:37:
                    eb:1a:de:5b:07:df:9c:48:bf:df:f5:28:a0:41:7f:
                    7e:4a:9c:f7:be:15:b8:6f:ff:9f:90:8e:09:4f:58:
                    e0:e4:a6:a6:60:31:89:d2:50:10:ca:2e:85:62:9d:
                    47:88:52:ee:27:93:27:c0:cb:d3:1d:ba:22:cc:ef:
                    7b:ab:29:92:ec:7e:97:48:a9:42:d4:66:b8:ca:91:
                    af:3f:22:5e:0c:81:cc:e6:bc:0d:56:a1:aa:f2:dd:
                    41:1d:82:fb:5b:e6:d3:fb:93:53:a2:f3:09:3d:9d:
                    c9:50:e5:06:d0:6e:ae:4f:45:2e:d0:3e:03:35:65:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:FB:DD:0D:E0:0C:8C:9C:B2:B7:E5:74:C1:36:B4:63:0A:D1:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b/1bf5098e-3822-3b34-bb4b-a92abc90acaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b/09eb6530-af55-4850-923b-e59c3bd21a9b.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B3:A3:B1:93:ED:74:01:91:B4:8B:23:19:EA:73:0A:79:09:51:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/09eb6530-af55-4850-923b-e59c3bd21a9b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcbc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:80:3a:9f:52:dc:10:67:d3:ee:0b:f1:4a:41:d1:f0:30:
         45:cc:61:15:59:06:83:0c:a8:ce:c8:b8:8d:01:4e:a0:53:c6:
         0d:2f:22:4d:ad:38:d8:61:12:c8:e2:fd:f5:6a:9c:82:d9:8d:
         2a:a1:f8:87:43:11:59:dc:a9:52:c6:9b:61:04:1a:50:1e:c4:
         ed:b1:21:a2:65:d9:cf:78:bf:76:4c:24:1c:d1:16:10:02:8f:
         1d:2c:f9:b3:4f:a7:49:e9:9b:36:80:75:66:0c:d3:43:fc:c6:
         c0:ac:fa:0f:3e:15:3e:69:7d:0d:bc:ff:74:a0:90:a2:bb:f5:
         e6:47:69:82:46:7a:56:b5:c3:cb:5c:3d:1b:d3:47:78:49:b4:
         49:0f:19:aa:fb:26:8e:71:12:a2:34:3b:f3:4b:f1:0b:e1:f4:
         a7:02:8a:9b:c2:a9:e7:02:93:08:e9:e2:d3:3d:ea:ac:96:61:
         56:83:d2:e4:0a:aa:5b:fc:a7:4b:89:b0:24:8c:cc:18:b0:a4:
         7a:8a:6c:f2:cb:7e:a1:6e:da:08:ed:d3:05:92:57:47:5e:8d:
         7e:7b:44:ed:10:0e:bb:6a:49:57:bf:a7:6e:27:3d:fa:d8:ac:
         76:eb:d2:9a:96:8b:9e:a8:dd:f0:2a:16:14:6d:58:91:7a:b4:
         cc:7f:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----