Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/6d05e9ff-013e-31e6-bc0c-8809521fb309.roa
File:                     6d05e9ff-013e-31e6-bc0c-8809521fb309.roa (raw, json)
Hash identifier:          F+12pOtyuA+Pr/rTEvzvd4r4eGv+EPiGzroJTUA1cKQ=
Subject key identifier:   07:31:E3:8A:10:04:79:2F:4A:FD:27:AA:E0:A5:DE:48:DE:40:6B:7B
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA5BF5C8FB12CD22DBB3DA0
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/6d05e9ff-013e-31e6-bc0c-8809521fb309.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a5:bf:5c:8f:b1:2c:d2:2d:bb:3d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=8265ed5e-5890-45ed-9237-e36c92442893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:41:90:87:c6:b2:0d:4a:03:18:0d:e9:c7:
                    7b:23:82:1d:e3:7d:bc:06:65:87:0d:01:17:01:24:
                    1a:ad:84:a7:b6:64:e6:8c:9e:15:4b:a6:ce:bc:ab:
                    21:1a:a6:c9:f6:12:eb:5b:a2:65:a7:57:1c:03:53:
                    60:05:cc:77:33:75:95:8d:61:ba:9a:2b:3f:f6:75:
                    42:be:23:7e:5a:cf:07:4b:a6:89:cb:1a:13:d7:ee:
                    35:3a:9b:6f:a4:2c:ee:2c:a0:09:3a:51:13:4e:ef:
                    d1:89:c5:68:13:14:b7:2f:04:cb:09:2e:69:24:df:
                    f9:c3:12:83:67:7c:6c:e7:63:f9:b0:2d:7d:da:e4:
                    5f:23:73:14:49:ce:41:0e:c8:a1:00:e3:46:a2:79:
                    80:9b:3c:71:e9:40:5a:52:04:b7:64:82:dc:dd:80:
                    26:d5:83:1e:97:3c:f1:22:17:29:2b:f9:ec:26:90:
                    ce:b5:15:53:5b:0c:09:1e:42:49:76:2e:94:be:97:
                    85:36:d7:00:ef:77:97:c3:aa:2b:6e:7a:df:3e:40:
                    aa:02:2f:35:55:be:1e:ea:05:af:29:ba:88:7f:83:
                    9a:93:29:43:60:a9:ee:1d:74:f0:33:a9:5b:16:fc:
                    02:ab:cc:a8:fb:12:25:19:1b:9c:48:74:db:24:67:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:31:E3:8A:10:04:79:2F:4A:FD:27:AA:E0:A5:DE:48:DE:40:6B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/6d05e9ff-013e-31e6-bc0c-8809521fb309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:fc:77:de:a9:e9:c4:eb:db:21:e2:37:5b:38:2d:d5:8a:c7:
         fe:ca:dc:2d:90:dd:4f:13:6e:09:3f:84:18:b5:cd:94:8d:70:
         f1:4d:a2:0d:94:ba:21:3b:0a:76:fa:78:f7:29:b4:16:37:17:
         ce:9f:3c:c9:38:3c:a6:c4:36:e0:7a:2a:eb:3d:6b:2c:93:62:
         56:ab:50:7a:3d:1c:c1:3d:fd:4d:04:e7:d9:85:ea:17:5d:a7:
         e0:83:ec:ea:e3:2a:de:1f:0e:70:8b:0e:f3:87:4c:50:00:95:
         36:3b:0c:e7:02:08:5e:31:2a:ec:ea:48:1f:05:e0:69:6b:eb:
         f9:9c:6e:a9:78:e3:06:93:76:4e:9d:f3:f8:86:a2:b0:8e:0d:
         8b:16:67:68:a8:87:4f:c5:eb:f3:15:22:7a:7f:aa:7e:d8:dc:
         16:ed:ed:b9:c0:a1:b9:0b:7c:49:a7:11:a2:6c:ed:59:e1:fe:
         2b:eb:f7:d1:bb:7c:25:46:a6:2e:94:61:ce:fb:0f:f6:47:a0:
         6f:04:73:cd:c6:d4:11:07:f1:7d:2e:d2:c1:10:f0:be:6a:39:
         bb:d0:dd:a8:46:53:76:78:5b:99:d5:b5:9f:c3:82:af:84:97:
         05:c1:ec:46:27:e7:d7:2d:9d:f3:38:77:c7:09:ff:46:6a:29:
         a7:34:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----