Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/430bbf1a-d9c7-357f-93f3-28a778237497.roa
File:                     430bbf1a-d9c7-357f-93f3-28a778237497.roa (raw, json)
Hash identifier:          amwlg2nXcv/sHF8vY4fEzD7XcCdmy82skadYpQ/SJY4=
Subject key identifier:   F1:AD:63:88:48:9C:21:67:BE:48:B1:F1:08:71:E5:64:8F:5D:D8:89
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF87DFFBB818D972322135080
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/430bbf1a-d9c7-357f-93f3-28a778237497.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:7d:ff:bb:81:8d:97:23:22:13:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=1753e978-cb9f-4f49-8285-0486e4d60505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:66:6c:c4:e5:9f:16:45:23:03:d1:89:37:
                    16:26:f2:8d:2c:17:b8:4d:e5:53:40:89:4f:2d:6c:
                    d7:bc:3a:e1:22:78:42:c7:00:bf:4b:9c:07:6e:ae:
                    e9:85:00:5a:1f:44:e3:12:fb:dc:f8:da:8f:06:69:
                    22:35:60:55:c1:8b:35:84:10:21:25:48:16:38:40:
                    ae:a6:80:fd:e8:db:98:71:42:79:a1:8b:21:c0:70:
                    6e:33:23:7b:e6:ca:c1:1f:8a:25:ad:d3:2d:58:73:
                    59:a3:1a:44:6b:6e:57:33:a1:b9:7a:fe:4a:27:8a:
                    5b:ad:c8:65:35:ea:e8:fb:0d:31:db:70:bc:3a:e5:
                    17:8e:d5:41:60:d6:e5:83:ed:81:03:91:9a:3b:af:
                    b9:c9:bf:c8:dc:03:e5:84:5b:c9:c8:20:d3:95:7c:
                    47:be:fe:e8:dd:62:5c:ba:e8:ee:53:cb:fe:ed:04:
                    d9:cd:74:5f:06:38:28:58:a8:52:8b:e4:3d:ed:27:
                    1c:c0:22:7a:5b:89:10:98:6c:4e:b7:45:13:52:52:
                    af:ae:ba:80:e3:34:8b:22:3e:b4:0f:73:3a:e1:e7:
                    f8:ce:f6:92:01:f0:3f:45:9c:01:e5:be:90:bb:bd:
                    5a:7e:62:01:a2:81:85:7a:bb:1d:5d:c9:f4:6d:d1:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:63:88:48:9C:21:67:BE:48:B1:F1:08:71:E5:64:8F:5D:D8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/430bbf1a-d9c7-357f-93f3-28a778237497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:92:81:f1:41:97:36:13:96:54:97:c5:4a:3e:32:b1:a1:
         5f:b3:d2:23:68:be:51:db:bc:87:0b:ea:47:d7:b3:53:9b:73:
         4f:8d:e6:59:f2:e0:1a:0d:bf:31:5e:fe:0d:a3:19:83:e7:23:
         13:19:9d:b3:c2:0e:1c:81:7d:0d:38:af:4e:58:64:3d:ff:9e:
         22:d1:9d:60:72:01:30:a5:fa:c3:26:0e:12:fe:3f:8b:30:74:
         86:8e:f9:5c:68:43:2b:98:6c:8d:8e:aa:62:5d:94:9a:17:b5:
         17:99:af:f1:87:31:a5:b3:93:8d:2e:d1:91:0d:d2:ab:6c:66:
         67:6d:9c:06:aa:28:c7:19:49:13:ae:28:ad:45:00:e0:dc:c8:
         ed:fa:fd:85:a0:0b:43:a0:7d:12:66:7f:1a:82:8d:7a:22:5a:
         df:4d:6d:ae:c5:31:8d:21:70:eb:21:a6:ed:fb:c3:10:ad:2d:
         5d:9a:4a:37:e6:bb:bf:ad:61:97:fe:76:89:e5:63:10:a0:0c:
         32:f9:5c:a2:33:fd:21:3e:53:d6:25:84:4e:95:8e:40:28:ec:
         ec:90:47:da:39:f6:42:65:16:6d:06:62:6b:6b:94:45:d4:64:
         77:91:65:50:4b:8e:a4:15:b3:26:3f:15:dc:8e:41:03:39:7e:
         7e:77:7c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----