Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/9baf3009-f57b-34c4-8c6e-f021ec25699b.roa
File:                     9baf3009-f57b-34c4-8c6e-f021ec25699b.roa (raw, json)
Hash identifier:          KuX419wQt7ELqxoaF1SrBLRcXI/C8orgw8rrkyyVCa8=
Subject key identifier:   6A:59:0B:98:B7:30:18:B8:9A:25:40:00:C2:DB:62:42:BD:46:20:73
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF8A1CD11C2DA6010E28FDC00
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/9baf3009-f57b-34c4-8c6e-f021ec25699b.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:a1:cd:11:c2:da:60:10:e2:8f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=fac1f610-ac24-41ca-b916-cd4c2c06ad19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:42:5e:3d:99:d8:e5:30:2c:fa:0c:c9:5b:
                    61:d1:ff:9a:89:6b:11:65:a3:e0:6c:71:d4:67:f3:
                    3b:97:24:b7:ed:c6:d0:63:a5:0e:1a:32:22:e4:0e:
                    01:d5:16:12:78:07:1d:c7:27:d3:79:18:c1:fd:73:
                    94:73:f6:7d:08:0f:7e:e2:53:93:fe:a4:cc:c5:03:
                    64:5f:42:25:fe:4e:b9:05:f1:14:7c:28:04:6a:65:
                    a4:e3:0f:f0:3a:73:09:85:50:3e:56:d4:40:09:25:
                    e1:2e:5a:aa:d9:99:31:d9:6b:01:07:b0:d8:a3:ec:
                    62:4f:35:a9:68:72:55:1c:e2:af:8e:c9:c4:23:5b:
                    44:9e:a5:7d:54:40:35:8e:05:ce:d0:87:6f:1b:9f:
                    fb:29:dc:fe:c5:94:e1:fa:fa:82:d5:ce:36:5b:68:
                    b5:8c:c9:8e:9d:34:51:c9:83:1f:8e:8a:02:c9:be:
                    aa:8c:61:3b:d7:21:34:a3:95:6e:83:86:6e:5c:3a:
                    83:4c:20:31:22:27:83:3c:b6:e2:87:f3:c7:e5:fc:
                    73:9a:7f:66:bd:c5:c4:e1:8f:dc:a6:1d:a8:02:06:
                    3a:7c:25:df:23:60:bb:4f:64:6d:6f:50:df:67:a6:
                    07:88:33:8c:30:0b:e9:5a:67:f1:b3:96:50:2f:6b:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:0B:98:B7:30:18:B8:9A:25:40:00:C2:DB:62:42:BD:46:20:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/9baf3009-f57b-34c4-8c6e-f021ec25699b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:80:84:8d:0c:6c:cb:cc:64:6b:15:23:c9:0c:5a:2b:ed:ce:
         d5:00:1e:ba:a8:21:47:bf:99:b2:1a:74:fb:1f:53:6b:89:d8:
         cf:92:69:92:d0:df:d2:12:36:44:f0:18:8a:1b:9a:3a:7d:ce:
         f3:d5:fb:58:e9:49:14:27:37:0c:cd:ae:2c:96:e9:8f:6e:80:
         ed:87:dd:a3:6e:63:da:b9:35:f0:c3:12:f0:d4:7d:9b:ed:5c:
         a6:d2:a7:d7:0a:04:4a:62:8c:c2:f1:ed:05:93:ff:23:d1:83:
         69:ba:4b:45:c2:fd:52:e0:66:d4:a5:2d:ec:df:1c:34:f6:aa:
         ab:fe:87:fb:f0:7f:9c:91:41:8d:5d:c7:9f:ae:5c:ae:51:0f:
         e7:b4:29:19:b3:e6:7e:a6:33:f4:e6:19:0a:c2:d2:d2:7d:3e:
         db:32:af:34:28:8b:8a:58:c7:e2:e0:86:85:af:bc:5e:24:0a:
         c9:d3:70:4f:26:f4:19:de:fc:91:df:1a:a3:cd:22:90:a2:a2:
         a2:96:0d:95:b2:ce:10:d7:07:70:24:f0:53:ce:72:5e:5e:eb:
         6c:84:a7:0a:a8:f9:03:03:7d:ab:cd:2c:b0:2e:54:1b:06:36:
         c5:38:f9:5f:e6:77:34:92:25:40:f4:ff:55:ae:82:f0:23:99:
         07:cc:36:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----