Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/415ec65b-5a1c-3dbf-b815-00b384bce965.roa
File:                     415ec65b-5a1c-3dbf-b815-00b384bce965.roa (raw, json)
Hash identifier:          1TCjO8wMOp6nu01Dxs4Dr36ON0Fp1YqhEZupTZ2j9EE=
Subject key identifier:   81:6C:E0:31:A3:35:EC:64:1A:89:C1:69:F2:B0:27:5C:7D:89:75:E2
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8C790A310C2BCD09F580
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/415ec65b-5a1c-3dbf-b815-00b384bce965.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:79:0a:31:0c:2b:cd:09:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=d14031de-c73e-4f4c-89e7-8f9053ee8153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:a9:1e:92:28:eb:7a:b1:b1:db:4b:2f:ff:
                    73:4b:18:a2:3f:d6:a9:55:b6:03:34:b7:69:06:ef:
                    7a:bf:f3:ad:59:96:51:e4:1f:b5:f9:0c:eb:e3:a8:
                    a3:d3:fd:93:56:88:1e:f8:39:34:14:2a:79:71:97:
                    cb:62:46:cb:fe:ff:ea:f8:f4:b7:99:b5:4a:8a:87:
                    c7:8d:c7:7f:24:2e:83:ae:bb:2b:8c:e5:18:0b:22:
                    67:4d:90:62:f9:dc:ac:7a:dc:a1:6c:8e:e4:2a:dc:
                    fa:19:4f:7d:3d:89:f3:ee:6f:b1:a5:90:de:c4:22:
                    a6:17:f3:6c:df:51:f6:0c:21:5f:cb:a1:d4:7c:f4:
                    a4:f7:5a:5b:24:4a:49:46:d7:82:22:39:ce:b2:16:
                    22:54:38:95:72:ed:4f:6c:ea:2e:4d:b6:17:95:62:
                    a3:b5:71:82:8c:31:af:c3:81:37:f4:32:46:06:3d:
                    f0:de:d6:66:f5:e5:26:fb:41:ee:43:3e:c0:15:de:
                    21:80:36:84:91:ef:96:89:97:82:41:63:b5:1e:a2:
                    44:17:54:be:8d:4c:67:9d:00:50:41:92:ad:85:84:
                    07:79:bb:55:25:e3:2a:3e:72:1f:16:2d:a3:04:19:
                    ad:46:eb:e8:f5:d2:cd:bf:ec:45:06:e1:97:6e:d6:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6C:E0:31:A3:35:EC:64:1A:89:C1:69:F2:B0:27:5C:7D:89:75:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/415ec65b-5a1c-3dbf-b815-00b384bce965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:4d:82:24:0d:b5:56:62:60:10:a5:02:b0:fe:0e:c5:c5:
         fd:f6:35:ed:36:a8:57:0f:2d:44:43:3e:7e:69:b8:0d:e5:9c:
         99:20:94:af:a1:c8:e9:5b:e8:91:13:b4:b6:fe:5d:6f:55:49:
         68:e8:ef:59:04:cd:8d:f2:14:c2:1a:be:20:af:5b:a9:da:75:
         73:63:19:56:3a:50:e9:68:a6:a1:7f:84:e3:d3:a5:2f:42:53:
         90:71:c5:d9:e6:9c:db:cf:fc:0f:2e:cf:10:be:06:8a:65:b2:
         93:1e:06:0f:d1:a0:9c:76:89:2c:e4:63:65:66:f8:33:c9:07:
         d6:ad:bb:b1:cd:67:4c:37:98:ae:bf:f6:08:cb:e9:f0:45:cb:
         f5:36:b4:1b:02:c3:a7:3c:08:a5:56:3d:44:a4:40:e6:79:94:
         f3:fa:69:15:3f:90:e7:67:ca:ea:4d:19:e3:4d:c1:02:3e:49:
         17:81:a4:11:26:84:d2:86:82:5a:18:10:15:59:1d:89:95:fa:
         b5:4a:bb:07:10:25:cf:b0:80:23:97:01:f6:f0:e0:3e:23:c2:
         de:5c:9a:9b:55:1e:2c:16:fe:c1:37:e8:80:c1:ea:b7:db:e6:
         b1:ac:fa:ba:24:45:d9:c5:90:cb:2f:d5:da:91:9c:2f:81:81:
         d7:0b:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----