Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/8c17024d-a908-3092-918f-1aae6cd74674.roa
File:                     8c17024d-a908-3092-918f-1aae6cd74674.roa (raw, json)
Hash identifier:          WvslfhyFIpIHO3EpxaywTPN8qtEKjMxU0FTM3n/80qM=
Subject key identifier:   8B:8B:E9:EA:46:75:B7:DE:E8:82:0B:6A:ED:8D:AE:91:EE:45:4E:22
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8CF274BCA1EA4E317B00
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/8c17024d-a908-3092-918f-1aae6cd74674.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8c:f2:74:bc:a1:ea:4e:31:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=ce9eec89-f083-40db-ad2d-f5a1c3c9df9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:77:14:c5:41:d1:bb:0c:96:4a:49:3f:3c:
                    23:4e:08:cc:37:40:d3:e7:52:bd:1e:c5:2a:71:2c:
                    1b:07:83:76:85:02:a8:7a:85:88:2f:89:b1:6e:4a:
                    94:88:f8:af:a0:3b:b9:8e:58:35:ee:a5:9b:0b:88:
                    c8:35:ef:34:94:21:43:a9:0e:b4:54:0c:98:e4:2d:
                    1d:48:da:8a:14:38:cd:13:fe:9d:cd:55:93:55:f1:
                    bc:3d:8f:0b:2c:c8:14:54:2a:76:56:35:55:e1:9e:
                    2c:a4:47:82:5c:91:80:3d:f1:1f:3a:70:8b:06:27:
                    5d:d0:67:5c:ca:ca:ea:5f:5f:90:87:f7:b4:2a:f7:
                    15:fb:22:8c:9d:dc:f4:d4:1a:3d:ea:81:08:54:0b:
                    5f:bf:14:73:f1:c0:2f:39:53:64:a0:4d:59:d5:11:
                    ec:7e:65:b6:0f:d8:8b:7d:5f:1a:12:ae:b0:53:15:
                    8b:96:9d:95:7f:9f:92:d9:91:df:68:ef:a9:3f:0c:
                    5a:31:01:25:2d:64:ad:8a:3d:7b:4a:e0:ee:35:e4:
                    b1:8a:75:ac:0a:93:21:94:f3:ad:43:88:8c:f8:81:
                    9a:cd:22:0b:cf:48:46:9a:e2:14:c7:71:f5:ed:9e:
                    ef:47:90:06:3d:76:b8:f5:b4:c4:57:39:11:17:4a:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8B:E9:EA:46:75:B7:DE:E8:82:0B:6A:ED:8D:AE:91:EE:45:4E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/8c17024d-a908-3092-918f-1aae6cd74674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:61:ff:08:86:bd:1d:8d:f9:20:cd:81:f4:60:81:f6:b8:
         36:88:20:74:ba:78:59:51:0b:f1:22:20:68:85:78:6e:67:bd:
         4d:39:47:07:7d:7d:ce:69:ed:b2:4c:52:c9:ce:22:34:21:fb:
         6d:8f:68:6a:57:17:09:3a:7b:9c:aa:f6:f0:93:48:69:57:78:
         77:11:df:f3:d5:2a:d6:41:d4:2a:4a:70:52:b7:3d:18:ca:d4:
         d6:0a:d1:07:92:2f:b5:09:16:e8:3f:8a:11:32:6f:cf:12:83:
         1d:be:93:d5:4a:20:56:5f:24:b9:13:b3:90:1b:da:35:64:cf:
         9f:a2:92:70:30:12:6f:d6:9a:0a:91:3b:1f:3e:94:3c:43:df:
         71:76:ef:6d:cc:39:87:f4:d7:c4:38:36:17:45:ac:05:2b:e4:
         26:e3:af:b6:14:a7:a5:c9:8e:6f:96:86:99:21:75:11:12:e2:
         36:58:37:af:7c:0b:cd:de:97:51:91:9d:b5:c2:e2:6d:ba:1c:
         fa:a7:d2:ec:da:12:dc:ad:6a:f4:71:25:4e:7f:37:fb:f9:36:
         d9:59:cf:f1:f4:2f:ae:0c:7b:b9:02:82:fc:fc:f3:91:7e:e8:
         7a:80:ef:68:54:3a:e3:72:6d:fc:53:f4:84:c5:d6:42:c7:3a:
         c3:17:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----