Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/5a59b2ee-2586-325f-89b7-d4aeb5ee9d13.roa
File:                     5a59b2ee-2586-325f-89b7-d4aeb5ee9d13.roa (raw, json)
Hash identifier:          vrKbfLf3pVSLinRONm7EUkn57bxqf//Us3j7Ifw+I9A=
Subject key identifier:   BF:57:47:EC:86:14:1A:D8:A6:1C:5D:9E:2C:64:D9:48:A0:01:26:7D
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA87215CFBEC5B0EB94BDC0
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/5a59b2ee-2586-325f-89b7-d4aeb5ee9d13.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a8:72:15:cf:be:c5:b0:eb:94:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=c888d6a9-5894-4125-b829-abae9bdb52c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:e0:0b:3e:b1:94:44:81:cd:74:76:b5:ad:
                    b5:65:0d:11:34:22:9c:a5:72:82:6b:0f:b3:ca:39:
                    14:26:70:6a:e4:44:f7:0e:05:d1:07:e4:c9:f0:60:
                    64:02:c3:49:37:e8:16:aa:f2:82:8a:c8:35:18:78:
                    21:9d:2e:ba:90:a9:07:37:dc:18:eb:84:3b:5e:34:
                    b7:56:59:4c:c2:eb:96:fb:53:17:4d:5a:1e:8c:fd:
                    79:ab:e1:89:1a:7b:b5:60:1a:50:df:a2:d8:d9:db:
                    2e:51:a2:83:34:53:6c:ad:18:16:d1:88:21:b5:e1:
                    f4:84:cb:5a:8b:ef:cb:92:92:6d:76:8a:cf:27:ce:
                    04:b2:d3:86:74:be:06:a4:58:75:fa:25:5a:6a:22:
                    a0:e1:bb:ff:e1:46:0e:36:06:7d:d8:77:41:9f:02:
                    42:b0:19:9d:71:8d:96:cd:60:26:fc:36:6b:37:08:
                    8a:c4:96:13:90:2e:40:9b:a4:b7:79:3b:95:68:34:
                    a8:21:b5:db:58:55:37:0a:01:1f:4a:0e:a0:7a:59:
                    c3:da:46:a8:24:c3:df:ae:5a:02:94:fa:bd:e0:72:
                    fb:48:6a:d2:dc:f5:1f:9c:95:36:a8:27:25:39:88:
                    5b:87:8a:0b:ad:b3:4a:e3:ae:f4:d5:a9:ac:cb:0e:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:57:47:EC:86:14:1A:D8:A6:1C:5D:9E:2C:64:D9:48:A0:01:26:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/5a59b2ee-2586-325f-89b7-d4aeb5ee9d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e5:ce:03:b5:d1:3e:24:7d:e0:f5:d6:fc:03:97:65:af:89:
         a5:e2:e5:aa:ec:72:21:df:11:6f:e6:74:fb:52:93:e3:cf:72:
         41:b7:5d:47:76:c0:cf:30:98:1c:ec:e3:13:7e:61:35:17:08:
         81:ab:8f:cd:2f:a1:1d:0b:ae:d7:ac:a5:a7:d3:be:7f:f3:38:
         04:2d:4e:13:fb:c6:3e:3a:db:17:90:9a:85:62:73:55:ce:78:
         86:ef:c5:7e:79:28:4b:ce:99:72:7b:19:9d:a8:86:39:89:c9:
         0f:70:52:d9:d5:8d:97:6b:fc:ff:11:79:88:5d:47:f3:90:a8:
         50:d5:81:fb:90:2f:5c:dd:66:d3:fe:18:69:b7:3c:d7:df:3b:
         10:69:ff:26:88:de:f3:f4:e7:95:93:ca:38:a1:e8:82:14:3f:
         71:08:c9:c0:66:c5:a6:11:ff:43:49:4b:0e:83:fb:b4:41:9c:
         e5:64:01:e3:12:ec:ec:0e:3b:56:f1:2b:a0:2c:0b:25:f4:a7:
         8f:69:e2:38:c1:e3:f3:0e:17:ce:a3:46:d2:3d:27:85:ea:d9:
         ef:16:54:fd:a8:01:e9:6e:f1:bd:cf:b5:3f:02:e9:96:e1:8a:
         19:36:df:43:7c:f5:2d:01:21:93:49:bd:23:9c:a4:ea:c1:e1:
         d4:97:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----