Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/a898daf6-f3bf-33b5-b856-c72d779db9fe.roa
File:                     a898daf6-f3bf-33b5-b856-c72d779db9fe.roa (raw, json)
Hash identifier:          iDvJiTupZIU1mAhVMH0+dbbFWJNLXpxls7mcrKRrJ50=
Subject key identifier:   F4:5A:44:B2:5F:4A:68:D4:B9:8D:EC:E4:90:D1:A7:BA:CB:FC:88:E2
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA8CDAEF8F8F29865166380
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/a898daf6-f3bf-33b5-b856-c72d779db9fe.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a8:cd:ae:f8:f8:f2:98:65:16:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=74fb28ff-263e-45aa-830b-1935dd1fd55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:66:e4:19:d1:a1:09:28:21:c8:0b:5a:5f:
                    63:78:2e:e6:d0:64:be:8f:53:22:9a:05:05:23:d7:
                    d6:f7:30:68:82:7b:38:a3:39:0a:68:ff:21:d4:c0:
                    51:50:18:19:0a:40:44:a7:1b:72:7a:a5:02:0f:18:
                    09:19:d4:e7:89:8e:7f:63:1d:02:be:99:f6:17:9d:
                    62:50:c2:28:cf:cc:a8:cf:25:55:01:f0:03:21:23:
                    0f:01:c3:6c:44:90:70:36:4a:f3:81:a1:20:97:88:
                    20:3a:0e:7f:59:de:dc:57:14:5e:77:c8:52:d9:fb:
                    9a:62:bb:43:fb:a1:64:b4:2b:f5:25:93:ca:35:d3:
                    4c:65:3b:a8:a3:9d:c6:f7:03:6e:1c:10:11:bb:f3:
                    ad:21:be:e0:d1:9e:95:73:ee:6d:42:fb:bc:7d:40:
                    27:d9:25:8b:39:d3:e9:f5:57:53:6b:05:e7:7e:9b:
                    0b:22:72:7c:a2:57:57:3d:e8:80:84:41:71:43:55:
                    48:a5:77:f3:a3:3f:27:6b:ab:38:0d:0c:10:42:fc:
                    d9:c9:8a:ff:8b:93:60:32:e7:64:17:a4:48:05:af:
                    29:c4:7d:44:08:40:31:36:09:c1:3f:83:a5:1d:25:
                    48:17:72:74:fe:4b:87:03:9c:1d:0b:f1:6c:be:eb:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:44:B2:5F:4A:68:D4:B9:8D:EC:E4:90:D1:A7:BA:CB:FC:88:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/a898daf6-f3bf-33b5-b856-c72d779db9fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f8:c0:99:cc:77:05:c9:e6:6d:05:6e:b9:f6:d5:99:0c:87:
         43:a6:ce:a1:e2:45:3c:7f:a0:3d:40:2b:6a:2d:75:69:1d:75:
         bd:f1:99:1d:19:30:79:21:68:ad:75:36:cf:dd:e4:d3:9d:3b:
         11:24:40:cb:c7:87:96:65:cc:b1:32:f8:7e:18:8b:c8:d5:91:
         d3:f5:4a:d6:08:0b:e8:f1:20:a3:89:5d:1f:00:dd:e1:e6:16:
         5c:72:81:83:8f:7c:d1:9a:68:8a:db:d9:b9:f1:15:3a:ed:9c:
         96:bf:b4:62:b2:12:34:d9:b5:59:82:a8:c1:62:8e:e7:35:dd:
         62:0d:fd:46:c6:47:41:97:bc:c7:f8:07:f2:05:d5:e7:7f:90:
         ee:b3:67:06:7d:ab:06:9e:f7:1a:b1:50:3b:41:19:3d:fc:d1:
         07:98:9f:3a:9d:4a:58:9c:2b:53:fa:4d:e9:e1:3f:3d:fa:2e:
         ea:58:4e:dd:ee:e6:6f:65:cd:79:86:87:3e:15:0b:11:59:81:
         6c:a4:54:38:f0:93:38:41:cb:28:86:43:d4:97:74:ef:76:50:
         05:7c:2b:26:2c:ce:3f:e1:2a:70:fc:0d:48:94:9b:08:6b:c6:
         8a:66:ac:d3:7a:f2:75:86:3e:10:a7:bd:7f:45:ef:39:36:14:
         70:38:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----