Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/5f2378b3-4259-35a7-870c-dc938457b7e7.roa
File:                     5f2378b3-4259-35a7-870c-dc938457b7e7.roa (raw, json)
Hash identifier:          A+BQ65CiB9u4o0j5Hw8ItuXdJ7pRZ6dg1dHihHV7AN8=
Subject key identifier:   CB:58:90:B2:93:4E:75:7A:06:C9:6C:35:CB:0B:12:36:23:13:24:86
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8C53A206156D306ECF80
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/5f2378b3-4259-35a7-870c-dc938457b7e7.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:53:a2:06:15:6d:30:6e:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=f89fcfbf-79b2-41d1-b1f6-dd210b471ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:32:11:6f:31:57:98:b3:20:b2:c8:8f:89:
                    28:55:5c:7a:1f:fc:8a:17:df:cc:df:05:d7:33:da:
                    f4:03:9f:bb:40:6f:7b:ef:4a:4e:ae:b6:06:da:bd:
                    08:73:a1:63:31:de:3a:1e:6d:4c:c4:d2:07:56:01:
                    99:0b:12:1b:ea:ec:fb:50:4f:b1:7a:c4:42:df:b2:
                    ba:32:4e:06:e0:dd:d7:88:8e:82:ee:53:f8:f5:23:
                    7f:46:26:bc:40:b0:e3:83:89:47:39:7f:44:de:6c:
                    d8:f3:75:ef:77:26:ee:30:5c:ee:fb:34:00:f0:1d:
                    3a:05:94:c5:5a:0d:b1:41:63:0c:7f:8b:51:58:39:
                    38:f7:c8:9a:34:5d:25:88:e1:b4:f5:54:12:a8:fb:
                    6b:64:ef:84:5b:0a:c0:4f:a7:3a:8d:25:90:89:1f:
                    16:b4:c6:e7:7a:a1:58:61:87:d9:c4:85:46:2a:8b:
                    a6:79:26:0a:9d:f4:95:61:04:8d:25:39:00:f7:18:
                    25:14:b2:ab:0a:ed:17:5e:7f:05:bd:66:78:35:62:
                    eb:f0:63:bf:48:95:9f:10:cf:44:98:a0:eb:ef:c7:
                    d8:49:87:d3:e6:90:26:5a:6d:81:77:e6:ff:4f:fe:
                    f4:9b:29:89:b4:b4:5c:fe:5a:1f:6c:67:dd:27:ef:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:90:B2:93:4E:75:7A:06:C9:6C:35:CB:0B:12:36:23:13:24:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/5f2378b3-4259-35a7-870c-dc938457b7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:58:06:55:6e:ce:51:70:5f:95:a1:15:42:7e:29:b1:c8:
         f5:32:db:25:03:74:d3:da:32:03:73:b5:da:7f:07:91:9c:e4:
         70:3c:3d:22:33:e6:43:39:c8:8a:2b:1b:0b:e7:f8:2a:9a:14:
         38:2f:7f:53:8b:27:87:e9:a9:80:e9:b8:ba:4e:3f:22:d2:91:
         f5:d3:5f:72:c3:a7:e5:c7:16:6c:e3:6a:64:f3:7a:e7:cd:34:
         53:db:b8:72:15:35:0c:91:36:61:39:5d:55:c6:92:14:2b:47:
         45:fe:ee:fb:6b:a1:c8:32:69:c6:69:5a:da:7d:3d:7a:48:ce:
         7c:c3:34:60:88:ef:48:33:b2:03:e5:e8:e9:86:41:3b:0e:5f:
         d7:c2:ef:e6:5c:52:37:46:03:4d:fc:e3:2a:88:77:9f:0d:bb:
         b0:b6:4e:e5:44:75:5b:4b:79:3a:bd:09:47:e2:d2:ca:66:2e:
         76:51:80:c4:c9:03:c2:cb:ee:35:21:60:94:a1:0c:4d:2d:55:
         4c:68:1a:8a:a3:65:9e:06:4c:c7:0b:bf:23:b0:33:cb:ec:1f:
         54:3a:0f:d4:d7:b5:11:42:77:70:0c:81:e7:fa:99:aa:c2:d2:
         88:3a:f7:31:97:a6:59:c7:98:f4:22:77:1e:8b:f2:91:bb:3e:
         44:23:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----