Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/72630ec8-3661-33e0-aab5-9d442f944636.roa
File:                     72630ec8-3661-33e0-aab5-9d442f944636.roa (raw, json)
Hash identifier:          1hs2DYwH589MhkE0IJczCUPtI7ZVySSoht7FmMyhFg8=
Subject key identifier:   E4:88:13:22:92:D5:97:8D:DB:DD:86:D9:B1:3E:AC:05:D1:B2:7D:42
Certificate issuer:       /CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
Certificate serial:       010D0C9F43285843E598E96F56B689877DF047F1
Authority key identifier: B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/72630ec8-3661-33e0-aab5-9d442f944636.roa
Signing time:             Wed 15 Nov 2023 14:00:21 +0000
ROA not before:           Wed 15 Nov 2023 14:00:21 +0000
ROA not after:            Tue 13 Feb 2024 14:00:21 +0000
asID:                     47869
IP address blocks:        2604:bc0:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e5:98:e9:6f:56:b6:89:87:7d:f0:47:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e9b3a5-0873-46d2-b3db-1fe1d280a18c
        Validity
            Not Before: Nov 15 14:00:21 2023 GMT
            Not After : Feb 13 14:00:21 2024 GMT
        Subject: CN=eba4de78-3a0e-46eb-ae09-e19b8237b2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:6c:b4:99:20:72:50:38:f8:11:1e:8f:cd:
                    4c:56:e6:c2:e2:66:2b:49:cb:61:4b:ac:3b:d8:8b:
                    11:7d:d9:97:a8:d6:2d:3f:08:b9:ca:24:6a:63:c4:
                    6e:63:2c:7e:92:9d:7a:80:90:d1:a9:b2:f6:f6:c1:
                    87:fd:fb:b8:6e:d9:c9:0e:ed:26:57:6e:b1:95:fa:
                    79:59:b7:1a:26:6a:a9:3a:97:4f:29:68:9e:ee:81:
                    94:33:8d:1a:75:d2:2f:7c:45:4b:fe:ce:ea:ba:20:
                    60:e4:cf:33:4c:f3:b9:2e:1c:7c:99:8e:08:ca:26:
                    c8:bb:e1:f2:59:ef:38:6e:3c:ac:a9:57:b7:3a:79:
                    c6:e5:4f:2c:05:de:bc:eb:dd:e5:45:5d:34:90:91:
                    63:b6:5a:e4:9a:ae:42:98:11:55:d9:38:fd:a7:25:
                    c4:ad:1a:3c:15:a9:d2:17:8f:f3:ce:8e:00:fe:48:
                    06:6d:14:f3:ea:7b:4b:0f:23:45:cf:a8:55:3b:2e:
                    50:7a:66:d5:11:3a:2a:58:d6:b7:68:c0:48:dd:d9:
                    0a:57:ec:ba:16:63:6f:ad:c2:c2:b2:d4:45:09:6b:
                    bb:e5:ee:70:d9:d7:5c:e6:1d:61:8c:05:09:d9:4b:
                    2b:e5:04:5a:b5:6c:7f:02:50:66:2b:8b:d6:d2:a8:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:13:22:92:D5:97:8D:DB:DD:86:D9:B1:3E:AC:05:D1:B2:7D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/72630ec8-3661-33e0-aab5-9d442f944636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.crl

            X509v3 Authority Key Identifier:
                keyid:B9:93:7F:20:21:00:43:B7:2F:FF:77:B0:F3:4D:ED:DB:98:F4:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63e9b3a5-0873-46d2-b3db-1fe1d280a18c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:08:5f:d6:d8:f6:16:e8:7a:48:3b:81:6d:45:9e:b6:52:c2:
         4a:64:93:89:ac:82:2b:a0:58:c3:3e:89:bc:5a:ec:0e:78:e3:
         86:04:3e:67:b3:95:ca:48:15:6c:ee:d6:57:a1:ec:a9:16:92:
         23:36:04:2a:7d:3b:5b:5e:fd:df:24:f5:51:ab:a5:84:a0:de:
         9d:af:0b:76:4f:a3:fe:3e:0e:f9:94:74:52:24:57:e0:27:a5:
         fc:fc:b1:c9:d0:35:20:46:8d:60:bd:b5:a2:89:4f:c1:71:68:
         e6:f5:c8:24:21:00:81:1c:c2:25:ac:e0:cd:e9:1d:04:61:f0:
         b6:34:a0:d6:95:de:08:19:18:b2:d7:86:2b:4e:0f:50:f4:09:
         75:e3:e2:a5:5b:c0:42:06:23:24:fb:ff:4b:36:e6:1d:ff:85:
         b4:00:84:88:05:76:a3:92:ca:98:fb:87:19:46:75:c4:6e:9a:
         4a:8b:56:33:6b:91:06:c7:0a:28:ce:5c:c9:42:d3:58:00:93:
         50:bb:35:27:8b:bf:89:25:e2:fd:95:99:26:73:48:eb:98:42:
         32:e5:2b:4f:79:e6:6f:f8:f6:e5:4a:53:f2:71:08:bc:28:91:
         21:5c:12:00:c6:e8:19:66:86:3a:dc:75:e1:c5:fb:c3:76:f0:
         c6:ae:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----