Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8/bcafd548-3c6a-3af5-84fb-c51e726d05df.roa
File:                     bcafd548-3c6a-3af5-84fb-c51e726d05df.roa (raw, json)
Hash identifier:          hOsmIgJN9quQ+fiG4rXI0FQWJPcQJT/VNM+TIrS1VUI=
Subject key identifier:   8F:E9:7E:AA:FA:5C:35:E8:7B:EE:42:DC:DD:D6:52:98:43:6F:F5:04
Certificate issuer:       /CN=17576475-887b-42b8-b7fc-a6c445437fd8
Certificate serial:       010D0C9F4328583B213BAF0E3700A79F16B3A800
Authority key identifier: 05:B6:6E:52:EF:73:DE:32:5B:FA:17:4B:73:B9:DA:3E:B3:E4:B0:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8/bcafd548-3c6a-3af5-84fb-c51e726d05df.roa
Signing time:             Wed 04 Aug 2021 04:00:00 +0000
ROA not before:           Wed 04 Aug 2021 04:00:00 +0000
ROA not after:            Tue 06 May 2031 04:00:00 +0000
asID:                     46082
IP address blocks:        2602:fc4c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:21:3b:af:0e:37:00:a7:9f:16:b3:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17576475-887b-42b8-b7fc-a6c445437fd8
        Validity
            Not Before: Aug  4 04:00:00 2021 GMT
            Not After : May  6 04:00:00 2031 GMT
        Subject: CN=4c3cf75c-1c61-4cf2-9a8c-91d2e616bc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:db:b8:04:f7:88:9a:ee:4d:25:20:d1:15:
                    83:84:f7:8d:9c:8b:92:3a:85:38:bc:f1:21:77:38:
                    3a:c5:21:d8:73:53:2b:97:b0:42:08:70:0c:fa:0e:
                    88:2c:c6:b9:ea:6f:02:5f:d6:bc:89:cc:88:19:1a:
                    7f:d6:60:06:86:2c:3c:98:b4:04:75:e1:68:21:62:
                    83:0b:0a:45:af:5c:b0:75:14:ef:8f:b0:c1:4a:3a:
                    93:d6:54:ce:e9:6f:c6:15:83:35:b5:c8:95:6c:9f:
                    99:43:ce:c6:9c:c6:2e:0b:5f:e1:d6:51:3a:2e:df:
                    b1:ff:93:97:9f:81:e3:d0:a7:b2:be:cd:9c:b0:40:
                    ee:19:00:72:f9:ef:30:ec:7c:69:4d:22:cf:f1:42:
                    f2:59:43:39:c4:66:a2:78:84:3d:ce:d1:70:f9:7b:
                    36:03:11:ab:82:6b:e7:49:fe:06:3a:e2:f9:25:cc:
                    49:77:42:98:9f:1f:eb:cb:c5:e9:d6:fb:f5:4c:65:
                    46:b7:7f:cb:e2:da:cd:4e:ca:66:21:5f:d3:bc:5a:
                    5a:35:49:59:be:a0:f0:91:23:a1:39:e5:b6:ab:43:
                    0c:17:ff:0f:3a:be:42:f9:c6:53:d8:bf:9e:33:8b:
                    28:1a:bd:4c:be:b4:c1:c0:19:3f:74:b7:da:ec:f5:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:7E:AA:FA:5C:35:E8:7B:EE:42:DC:DD:D6:52:98:43:6F:F5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8/bcafd548-3c6a-3af5-84fb-c51e726d05df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8/17576475-887b-42b8-b7fc-a6c445437fd8.crl

            X509v3 Authority Key Identifier:
                keyid:05:B6:6E:52:EF:73:DE:32:5B:FA:17:4B:73:B9:DA:3E:B3:E4:B0:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17576475-887b-42b8-b7fc-a6c445437fd8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc4c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f7:cb:5c:02:93:16:3f:2f:05:4b:29:fe:84:a0:92:bf:76:
         a3:1c:61:6b:af:f6:12:a3:1f:a4:23:39:ef:e5:09:d0:da:ef:
         6b:d7:9d:1f:72:31:4e:27:d8:19:4f:12:59:2f:77:3a:2a:ee:
         cb:43:3d:8e:6a:c4:9a:27:ba:99:d8:76:a0:33:f2:59:10:a0:
         55:0d:87:1b:bd:03:9e:ee:a6:0f:6c:10:0c:e1:65:92:82:b1:
         e3:36:a8:9a:41:1a:27:2d:33:b5:f9:5e:5a:fc:8e:22:1e:34:
         42:92:5b:e2:a9:9c:58:9f:30:a6:e1:f4:21:ce:45:18:22:ec:
         29:b1:2c:6b:25:65:19:78:e2:d3:95:f5:32:de:0a:72:82:e1:
         8b:6b:bf:d8:98:c2:a4:d0:f6:de:70:27:9e:e3:d4:be:ac:5d:
         10:1e:95:1a:9f:fb:f0:4d:24:d2:0b:38:64:40:80:ef:ec:9f:
         fe:2c:11:06:0f:b3:65:ce:6b:09:43:e3:7a:27:6f:c5:5a:2e:
         c2:8d:52:81:e5:a6:bd:d8:c8:65:ea:6c:10:10:7f:af:d6:37:
         35:45:06:a1:1e:79:30:9c:7a:95:d8:fb:8b:18:b8:9b:bd:7b:
         14:8f:54:8c:12:a6:be:a8:fa:b6:0b:0c:72:6c:95:e3:7f:4d:
         e8:23:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----