Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3d476dfe-735b-394d-8cb7-fe2db8971d19.roa
File:                     3d476dfe-735b-394d-8cb7-fe2db8971d19.roa (raw, json)
Hash identifier:          YzKB7f20GmyHeixPWsS0nZx5m9olNxu2JyJIPv/1NKI=
Subject key identifier:   DB:FC:CE:44:0B:0F:91:A3:1C:17:A2:E9:3C:53:2F:64:EB:E8:6A:AF
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8CAA5985C8F79FD86800
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3d476dfe-735b-394d-8cb7-fe2db8971d19.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:aa:59:85:c8:f7:9f:d8:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=bb32ff61-ce36-4ede-b64e-ec98489020fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:6a:81:ca:2a:6d:82:be:4b:7b:dc:f6:12:
                    ab:e0:ab:86:56:88:63:c9:93:0f:7c:2c:c4:1f:1f:
                    a2:4f:43:b4:43:6b:a2:9b:5f:89:76:ad:c2:fc:a2:
                    8a:69:e5:21:9e:74:4f:bd:88:bb:35:c8:c3:20:97:
                    23:7e:9a:8e:69:89:e1:c7:a1:23:11:52:81:b7:40:
                    31:81:8a:ea:42:19:52:36:0e:08:05:3d:a3:ce:60:
                    36:23:9e:b6:8c:7f:95:4e:fd:ee:d5:af:ef:55:45:
                    fc:c3:71:e9:59:4b:88:98:64:ee:ea:7b:ae:3e:1e:
                    d5:80:67:29:bb:8a:4d:28:79:41:d0:6a:a6:a5:9c:
                    3b:5c:39:12:72:44:57:8e:97:24:04:12:ba:19:86:
                    f5:64:82:1a:5f:e4:75:cc:0d:8f:9b:e5:77:64:37:
                    65:74:6b:a3:8c:83:3a:05:3b:1e:59:f7:75:f6:f9:
                    bc:6a:49:8b:26:3c:6d:ca:c4:1e:97:bb:76:ba:ad:
                    1b:70:18:3a:00:61:ef:83:48:46:84:9d:bb:21:cf:
                    aa:93:c2:b9:70:df:40:62:c3:6e:2f:04:6a:26:2a:
                    73:3e:0f:09:b4:e5:87:36:77:95:30:4e:97:9d:f9:
                    57:6e:45:9e:4b:aa:dc:79:1a:c5:e4:25:3e:e5:23:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FC:CE:44:0B:0F:91:A3:1C:17:A2:E9:3C:53:2F:64:EB:E8:6A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/3d476dfe-735b-394d-8cb7-fe2db8971d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:f7:18:90:e9:c8:f9:5b:dc:2e:66:db:e3:5c:fb:26:3b:
         a7:0c:33:fc:96:55:3b:54:9d:58:85:55:64:5a:e3:78:1d:ed:
         d8:67:f8:f3:72:ed:ea:cb:69:2c:9b:4e:10:68:9e:09:20:2b:
         99:89:bc:23:d8:67:3a:f7:3f:d8:94:2f:32:03:c0:98:fa:7d:
         5d:94:60:52:99:8b:7e:aa:08:e3:85:bf:f8:22:6a:70:fb:2f:
         5f:91:3d:c6:ec:ff:50:df:95:c3:f7:12:18:27:12:0d:90:3a:
         ec:d5:b8:b3:19:64:2e:0e:08:3c:37:d6:0b:b2:f9:fa:6b:3f:
         6c:c4:bd:f2:92:a3:8e:97:e8:09:09:a2:5e:66:f0:c6:86:1e:
         88:c6:7c:a7:97:00:15:96:67:95:ba:bb:18:6b:03:18:0c:c3:
         0d:72:ea:ae:8f:16:ef:ff:c1:05:4c:b0:8a:40:a1:9b:d3:34:
         59:e9:25:d5:a8:d7:5a:4c:a4:01:8c:07:80:36:5d:cd:d3:a7:
         6a:16:46:86:9b:53:a7:c9:a8:aa:83:18:6f:5a:9a:d1:91:e4:
         01:33:ed:83:2d:bd:77:c0:1c:ca:bb:f8:a7:36:42:1b:2a:a5:
         38:93:8b:b4:bb:f1:fb:70:a1:33:d7:69:c9:67:26:72:a1:de:
         a3:73:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----