Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/dddea682-cbed-3850-bd07-064b06efd109.roa
File:                     dddea682-cbed-3850-bd07-064b06efd109.roa (raw, json)
Hash identifier:          GobxS0cpmijr0PXI+wqtgrQMnYFUHjB8M7JN/94Kbf4=
Subject key identifier:   04:EE:64:2B:7F:94:27:6F:47:62:A1:C1:10:B3:65:46:A5:04:4C:70
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF8AED1D8F176232485A5B380
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/dddea682-cbed-3850-bd07-064b06efd109.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:ae:d1:d8:f1:76:23:24:85:a5:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=8408a494-efa2-470e-a894-53ec65844af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:14:54:09:97:af:42:94:3c:88:c2:4c:ea:
                    73:f8:39:12:fb:f2:72:16:20:7e:76:18:34:39:d3:
                    87:1c:35:e0:86:be:ec:1e:22:a5:c7:33:c8:a3:2a:
                    c2:66:b3:fe:0f:c9:51:f9:3c:27:6d:24:62:fd:e8:
                    56:bf:9e:18:24:f7:23:1a:9f:0b:46:3a:69:13:ae:
                    9a:47:5d:cc:af:34:5c:d4:b1:e7:46:a1:12:77:29:
                    f7:0f:b0:bc:b0:3c:b7:a2:bc:57:09:78:91:47:db:
                    a4:6b:94:da:23:94:2a:43:ef:38:f4:9c:49:6a:2a:
                    12:7b:61:ae:f7:3e:d2:71:54:b6:f2:bb:3f:a1:d5:
                    bc:4d:12:d3:78:69:db:3f:69:5f:ce:3b:6e:b8:5b:
                    9e:99:e3:ee:a1:da:47:1c:34:8b:51:02:a2:19:bb:
                    af:ea:38:f6:81:8d:3a:5a:c4:f8:bb:fc:cc:27:fe:
                    78:98:7c:38:8c:16:16:43:50:e0:61:16:f5:2e:70:
                    de:f6:08:68:1b:f3:35:3d:d5:33:a5:11:6d:ec:84:
                    0d:7f:af:51:38:e4:0e:18:98:95:fc:ad:94:2e:38:
                    61:0c:57:77:3c:f5:74:5d:1e:f6:01:49:fa:d0:41:
                    d4:80:ff:83:f1:5c:0f:cd:61:c9:e3:ba:30:f8:7a:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:64:2B:7F:94:27:6F:47:62:A1:C1:10:B3:65:46:A5:04:4C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/dddea682-cbed-3850-bd07-064b06efd109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:d2:d4:03:35:8d:40:10:1b:3c:56:d4:3d:dc:25:fa:b4:
         1f:0f:e2:ff:c3:ff:11:1b:11:d4:f0:c7:83:9a:b5:f5:a6:bb:
         61:d7:cf:7e:3f:ef:e6:22:b4:da:53:03:72:b5:0c:c4:35:42:
         ca:89:71:7d:8b:d3:f9:84:8a:68:50:c8:0d:63:0f:eb:4d:c5:
         2a:e3:e6:e4:42:d1:0f:ee:73:6d:24:ca:3f:27:3d:36:72:c9:
         a6:1c:a1:f6:c6:ad:c2:13:a4:ff:48:f3:02:f9:e6:69:d5:ba:
         3e:4c:ff:b7:9e:6c:48:0a:00:38:a0:f2:b3:9a:c4:ef:cf:2a:
         08:b4:aa:1b:56:72:74:60:c8:df:13:e1:74:da:97:d1:1b:72:
         35:aa:b0:90:ba:43:dc:9a:cf:ba:e2:ea:dc:c7:2f:4f:ee:b9:
         ee:70:eb:ab:dd:22:4b:f7:61:ba:d9:b1:7e:74:3c:36:47:dd:
         56:2c:0f:73:86:16:43:cc:a5:dc:a3:48:76:3f:cf:db:f3:78:
         69:06:99:61:3b:6e:82:54:8a:86:08:da:97:20:63:df:fe:ed:
         4a:6a:10:c3:bc:69:52:56:31:f0:74:39:56:e1:de:d8:03:9c:
         69:e1:fe:16:c5:f9:fc:96:2d:5f:bd:c6:2a:9f:42:d5:73:c5:
         47:79:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----