Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de/64fecf81-eaf3-3950-8402-28ea872474e1.roa
File:                     64fecf81-eaf3-3950-8402-28ea872474e1.roa (raw, json)
Hash identifier:          FSGHpVjsVvUke29QGm6x362EtgaXsrJkIe4P8/TnkIQ=
Subject key identifier:   49:61:C3:BD:26:59:E8:6F:3C:90:4C:43:3C:5C:CD:A9:55:F8:7F:ED
Certificate issuer:       /CN=44d91ff0-567f-4042-88fe-490ae6e238de
Certificate serial:       010D0C9F4328583A3BFA3612BA55987B11409640
Authority key identifier: 22:A9:F4:49:7B:DF:11:E3:1F:16:90:A4:00:55:A6:A1:EC:10:AC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de/64fecf81-eaf3-3950-8402-28ea872474e1.roa
Signing time:             Thu 08 Apr 2021 04:00:00 +0000
ROA not before:           Thu 08 Apr 2021 04:00:00 +0000
ROA not after:            Fri 15 Sep 2023 04:00:00 +0000
asID:                     3280
IP address blocks:        2602:fc68:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:3b:fa:36:12:ba:55:98:7b:11:40:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d91ff0-567f-4042-88fe-490ae6e238de
        Validity
            Not Before: Apr  8 04:00:00 2021 GMT
            Not After : Sep 15 04:00:00 2023 GMT
        Subject: CN=c8e0fedb-68ae-407a-949c-0f6476286960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:08:92:3a:28:19:cc:9f:55:11:1b:f4:9c:60:
                    70:4c:24:a7:ce:85:6f:68:1c:89:b5:fc:23:ba:f3:
                    6e:8c:55:be:6b:7b:fd:7c:fd:7c:3c:12:4c:fe:64:
                    2c:e4:03:bb:00:ee:2f:c6:88:03:b4:cc:f7:85:e4:
                    89:94:11:33:46:1f:b1:6a:e0:ea:1c:53:8c:87:e3:
                    04:2d:ad:a5:05:3a:d2:16:0c:1d:c6:a9:00:8b:fc:
                    79:4d:d2:bd:c2:6b:e1:90:97:5a:36:ef:04:2e:ad:
                    1b:89:7f:1c:ef:b2:66:2c:84:35:1e:c8:cc:90:a1:
                    d0:8d:2a:f2:b8:0a:12:b4:5e:a5:2a:94:1b:80:0c:
                    06:77:f4:d6:66:30:00:29:bc:b2:39:8a:58:a1:ef:
                    99:8d:ad:79:96:cd:9a:8a:c8:e5:3c:4d:ec:c5:0e:
                    b6:e9:21:6c:f2:17:8f:1e:e3:18:f9:09:10:3f:01:
                    cc:93:09:4e:2e:f9:63:a4:e2:25:b0:95:bc:85:ee:
                    bc:d4:cf:94:3a:1b:30:0f:a1:4a:c1:71:13:01:ab:
                    32:51:8a:3e:bf:bb:fb:47:f6:0a:a6:98:bf:24:4e:
                    bd:36:e6:39:d0:f4:23:6d:bb:16:07:44:7e:47:df:
                    31:f1:6a:f9:d2:1a:d1:39:3b:bc:da:97:71:b9:17:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:C3:BD:26:59:E8:6F:3C:90:4C:43:3C:5C:CD:A9:55:F8:7F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de/64fecf81-eaf3-3950-8402-28ea872474e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de/44d91ff0-567f-4042-88fe-490ae6e238de.crl

            X509v3 Authority Key Identifier:
                keyid:22:A9:F4:49:7B:DF:11:E3:1F:16:90:A4:00:55:A6:A1:EC:10:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44d91ff0-567f-4042-88fe-490ae6e238de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:87:c8:0e:46:87:2c:44:09:64:07:7a:fb:a8:83:af:94:
         7d:8d:ed:47:f1:57:3f:53:fc:12:ce:18:65:6c:e3:b9:e7:3d:
         33:60:a1:f3:38:70:28:4f:32:fc:63:2a:ff:c6:4d:c0:47:3c:
         dd:3f:4f:67:23:d6:ec:3a:c0:df:7f:0f:1d:86:80:af:b8:bb:
         06:47:0e:21:83:d0:84:f3:60:0e:e1:eb:d7:6b:e2:b2:b9:d6:
         8a:3c:52:0e:44:36:85:99:ec:9a:f6:8f:18:ae:c5:ce:39:0e:
         39:8a:3e:f1:cc:01:00:a3:a1:b5:d1:c9:c3:88:6c:63:be:73:
         8e:b5:55:ab:b5:fb:8b:84:8a:d2:d4:4f:ab:50:89:99:45:a9:
         20:23:2d:05:29:16:83:59:96:f6:96:11:1c:6a:46:ba:2a:e2:
         d2:0d:1f:50:41:4c:aa:88:13:63:f1:d3:63:24:1d:4c:a6:a7:
         5d:d3:83:41:e4:46:e1:bc:76:4e:89:44:87:a7:fe:1e:70:c4:
         2c:b7:65:7b:69:51:79:0e:19:09:d1:2a:25:b1:de:49:0e:a2:
         cd:ba:a7:d6:9e:e5:4c:a2:a2:3f:50:cf:69:7c:89:0b:69:21:
         02:0e:e3:1a:05:8b:18:31:c1:24:23:5e:68:b3:50:e5:ef:ec:
         0f:70:38:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----