Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/17121582-8d9e-3da7-9c36-2c795b294c84.roa
File:                     17121582-8d9e-3da7-9c36-2c795b294c84.roa (raw, json)
Hash identifier:          pGfTl4Bt7yHDgAuYWlLh7OjldCYDlyKT7Cpvjfjp4dY=
Subject key identifier:   BF:22:87:5A:F8:69:DD:51:3E:40:87:1D:4D:C4:76:13:D1:DA:0A:74
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584250D60FF5705A4547D5EF7200
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/17121582-8d9e-3da7-9c36-2c795b294c84.roa
Signing time:             Fri 23 Jun 2023 14:21:14 +0000
ROA not before:           Fri 23 Jun 2023 14:21:14 +0000
ROA not after:            Thu 21 Sep 2023 14:21:14 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:d6:0f:f5:70:5a:45:47:d5:ef:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 23 14:21:14 2023 GMT
            Not After : Sep 21 14:21:14 2023 GMT
        Subject: CN=ce1a1d26-1a87-4ad2-a382-5184958613a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:33:46:1d:5d:62:f5:7f:5c:f2:e7:eb:da:
                    4d:d7:2c:0d:cc:b8:cf:bd:59:52:b0:75:e7:58:5e:
                    4a:c7:3d:eb:97:01:2b:52:0b:6f:e6:b0:9f:3f:b6:
                    3d:22:01:4d:35:38:be:8b:b2:57:6a:8b:d0:a1:75:
                    bf:0f:ef:63:9e:4d:3c:c8:31:aa:ac:97:6b:29:9c:
                    ad:0f:2d:35:7f:e8:01:51:89:a1:28:1a:0c:80:ca:
                    ba:c1:0d:cb:02:1e:81:5c:eb:c7:60:dd:f0:3c:06:
                    0f:67:8d:af:67:1a:66:57:48:d3:d9:e7:1e:2d:6a:
                    33:e1:04:5f:68:df:c2:3a:2b:13:ad:79:15:52:87:
                    e5:1c:86:af:af:24:8c:59:0e:da:32:c7:aa:fe:2a:
                    a8:cd:58:ce:00:e5:94:b1:e8:8c:7d:cc:34:c1:8f:
                    c0:70:5d:ae:7c:8a:8f:22:98:f5:2c:e9:f6:b8:16:
                    fe:44:5a:f6:02:2e:bf:18:fd:9b:99:05:f7:47:ba:
                    96:6b:55:85:80:88:03:70:30:a1:e8:ef:a6:1c:93:
                    b0:8f:63:fa:86:f0:56:7f:79:bf:4e:5b:d5:b9:16:
                    3d:f0:96:dd:4a:e8:0b:82:d8:e0:5b:39:cb:be:bc:
                    4c:5a:a0:1d:3a:85:1e:19:ef:0f:39:f8:18:a5:5e:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:87:5A:F8:69:DD:51:3E:40:87:1D:4D:C4:76:13:D1:DA:0A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/17121582-8d9e-3da7-9c36-2c795b294c84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:17:ae:e7:63:1c:86:3d:7e:77:86:af:c0:6a:f7:b1:b2:
         6e:37:30:00:e1:3c:17:fb:8d:e2:b0:22:eb:62:45:83:b0:76:
         4b:f8:b8:30:e4:09:b9:7f:fd:b2:44:1c:8f:af:d1:23:09:9d:
         4f:57:73:b6:dc:d9:0b:58:ce:5c:3b:cb:87:ae:cc:27:b3:97:
         20:a4:8c:3f:54:70:b4:c0:d8:58:dc:ac:c8:95:9b:70:63:62:
         5c:2c:08:c4:a0:53:2b:5d:cf:dd:5c:b7:11:d0:11:a9:98:ab:
         3b:6b:44:6d:0c:33:20:4d:3f:12:88:38:10:21:7f:86:3d:1f:
         da:d2:ab:02:06:ec:f3:03:79:a4:76:c1:8a:02:b7:0d:f7:1d:
         d3:99:84:57:ce:ed:dc:ba:24:e5:82:98:13:a3:79:ca:99:1e:
         b7:56:e5:63:b5:28:b2:7c:21:89:4b:f9:57:d3:e6:4b:19:73:
         aa:b4:e7:e2:c6:e5:89:e2:f5:e8:71:d8:f0:4f:ab:64:48:57:
         46:c6:00:33:7a:8f:c0:d8:8e:1f:20:4d:52:c0:fb:d9:4e:f7:
         fc:3e:7e:f3:7f:89:9d:a0:de:ed:9a:e0:9f:5e:59:5b:de:52:
         3f:c6:fe:60:4b:21:1a:bd:90:ad:58:27:26:56:f0:7a:39:11:
         ae:a0:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----