Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/af9fcc2a-a1d5-38b1-846d-2aa543e5b582.roa
File:                     af9fcc2a-a1d5-38b1-846d-2aa543e5b582.roa (raw, json)
Hash identifier:          aceDTXejjY0USHN3u8aC/On8UZzn6h+thBT2ue9VR7c=
Subject key identifier:   49:62:C7:B6:B6:0C:BD:C0:30:1D:2A:AF:DC:6A:09:B3:60:3F:A4:FF
Certificate issuer:       /CN=397e65b3-25ee-4351-afff-5f34fe35c2e6
Certificate serial:       010D0C9F4328583B22A713E460A18956013A3C00
Authority key identifier: D9:EF:51:78:D6:4C:46:4B:F3:28:78:53:A2:D0:C5:BC:C1:87:34:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/af9fcc2a-a1d5-38b1-846d-2aa543e5b582.roa
Signing time:             Wed 04 Aug 2021 04:00:00 +0000
ROA not before:           Wed 04 Aug 2021 04:00:00 +0000
ROA not after:            Mon 06 Jan 2031 05:00:00 +0000
asID:                     399905
IP address blocks:        2602:fc49::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:22:a7:13:e4:60:a1:89:56:01:3a:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397e65b3-25ee-4351-afff-5f34fe35c2e6
        Validity
            Not Before: Aug  4 04:00:00 2021 GMT
            Not After : Jan  6 05:00:00 2031 GMT
        Subject: CN=1efa8e38-fa9e-450f-9d4f-80b573c4a205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:c4:d9:d6:60:d1:77:ca:66:2e:69:66:37:
                    1e:f7:1d:b7:a4:9b:57:5c:c8:4c:c7:8c:71:a8:b1:
                    99:44:fc:79:cd:c4:b6:01:e0:fc:5f:5d:ff:4d:ab:
                    d3:c1:d6:a4:b8:28:2d:d5:5f:ed:7e:5b:81:01:f2:
                    01:ea:7a:77:81:84:fa:80:5e:ec:79:38:fd:7f:64:
                    49:f7:da:72:fb:12:49:f6:f0:a3:9a:64:e6:4d:18:
                    0a:66:14:8b:99:ab:3b:c1:7e:ac:27:83:16:6c:5d:
                    cd:81:86:96:be:a0:5a:74:93:7e:9d:cb:4b:41:ff:
                    49:f3:5e:3e:b4:ee:59:39:14:11:a1:c3:f1:92:2b:
                    21:4f:23:4d:f5:0f:9b:08:5b:b4:27:37:34:c2:ab:
                    5c:15:a2:1a:57:7f:40:3d:fe:d0:93:44:f4:c3:3e:
                    00:05:e5:b1:95:76:86:38:72:2c:f6:2c:5d:38:e3:
                    02:74:87:5b:69:3a:2c:99:8a:86:5d:63:72:ec:a9:
                    79:d1:6e:7d:d0:e3:1e:2f:48:33:8a:85:3f:13:f6:
                    ee:07:09:33:90:82:52:fd:36:49:5b:b7:78:08:d9:
                    77:8b:c0:22:28:72:24:f3:c7:a9:41:72:74:47:85:
                    90:e9:71:d8:58:1d:c5:34:f2:bb:78:56:a2:a8:c4:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:62:C7:B6:B6:0C:BD:C0:30:1D:2A:AF:DC:6A:09:B3:60:3F:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/af9fcc2a-a1d5-38b1-846d-2aa543e5b582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6/397e65b3-25ee-4351-afff-5f34fe35c2e6.crl

            X509v3 Authority Key Identifier:
                keyid:D9:EF:51:78:D6:4C:46:4B:F3:28:78:53:A2:D0:C5:BC:C1:87:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397e65b3-25ee-4351-afff-5f34fe35c2e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc49::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4a:93:cd:47:77:4f:30:53:da:da:94:2c:3a:a3:25:63:d8:
         50:1c:2b:80:d5:66:dd:15:34:41:5e:2d:46:54:47:a2:18:fc:
         70:e2:be:fc:87:f7:8a:aa:11:76:51:71:d0:bc:de:21:23:23:
         03:b3:dc:b3:76:a4:a4:e9:c3:e0:08:d2:37:80:10:e1:19:52:
         7d:2f:bf:64:93:d8:f0:5c:9a:54:8d:39:58:ce:b8:bf:a3:6d:
         e9:84:4a:de:e6:8c:63:0e:e7:22:6c:ea:3f:3d:c9:ca:41:aa:
         11:ad:3c:df:42:42:99:67:e8:e6:1e:67:10:20:f4:cf:86:d9:
         2c:5c:d8:e8:86:a1:8b:9a:a8:7f:af:3d:27:1e:7f:ed:2c:24:
         97:c5:5c:39:f2:21:26:16:1f:83:97:c6:36:ca:09:f1:73:6c:
         23:d7:b2:ae:16:10:09:84:7c:c3:36:e7:55:05:fa:be:8f:45:
         e0:08:22:54:dc:de:ce:05:39:23:8e:50:e5:6a:13:90:36:e4:
         86:53:70:09:71:b7:dc:32:a9:23:36:98:61:87:6d:8c:c3:f4:
         a8:50:3b:9c:cd:bd:13:9a:69:7d:06:e2:ae:6b:13:4b:ce:e5:
         c8:4b:3e:4a:b2:3e:25:3c:d2:ca:f5:11:07:02:fa:46:c5:80:
         9f:c5:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org