Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/b9739ea0-e99a-3b5f-a053-5c6b000fab75.roa
File:                     b9739ea0-e99a-3b5f-a053-5c6b000fab75.roa (raw, json)
Hash identifier:          nEIFjTVQMy5sMv09WQLDcIdhc+P6y2ftaW+a1SuBCgs=
Subject key identifier:   F2:7D:8F:19:EB:8D:C8:7F:82:36:44:0F:B6:34:6C:D3:DE:7A:B5:55
Certificate issuer:       /CN=64f91b98-4962-41cc-b646-3985b83da365
Certificate serial:       010D0C9F4328584235ED8D25EECCB4FBD5BB7884
Authority key identifier: 4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/b9739ea0-e99a-3b5f-a053-5c6b000fab75.roa
Signing time:             Tue 13 Jun 2023 23:01:44 +0000
ROA not before:           Tue 13 Jun 2023 23:01:44 +0000
ROA not after:            Mon 11 Sep 2023 23:01:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:ed:8d:25:ee:cc:b4:fb:d5:bb:78:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f91b98-4962-41cc-b646-3985b83da365
        Validity
            Not Before: Jun 13 23:01:44 2023 GMT
            Not After : Sep 11 23:01:44 2023 GMT
        Subject: CN=3df62f81-ccfa-47c8-8686-014cbc75e323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:e6:2c:77:c8:b6:1f:d7:a8:8f:08:16:7c:
                    48:c3:65:e0:1f:34:cd:72:2e:aa:89:bc:f6:48:fb:
                    63:3c:3f:08:e7:89:f6:33:ce:a1:34:ac:87:ca:96:
                    4a:10:34:9a:13:ca:87:e5:89:90:72:65:05:fb:67:
                    1c:49:49:8e:82:c7:b7:90:4d:3b:c0:ae:e6:f6:80:
                    17:02:b2:cd:54:5c:f0:4a:d5:73:bd:de:71:98:09:
                    05:57:3b:6d:13:8f:81:4f:a5:e5:99:03:4e:3b:ad:
                    f9:7a:83:c5:96:21:59:a2:f4:e0:45:e8:89:f9:23:
                    0b:10:38:c7:83:25:09:e3:3d:7e:13:4f:0f:00:81:
                    37:9b:cd:28:64:5b:6b:a0:ab:41:95:d9:38:77:c7:
                    d5:bd:4d:bc:71:ba:1e:d2:57:d9:7b:a5:36:76:4c:
                    c9:90:3b:4b:f2:99:55:8f:e9:53:5c:1c:1f:d4:bf:
                    1e:7c:96:23:af:00:e9:14:19:2d:70:b1:14:a8:1a:
                    e4:d0:85:c8:12:ea:0c:80:c8:df:ea:8a:4e:89:6d:
                    43:b9:65:59:6f:e8:fc:e8:fd:3b:bd:eb:e5:68:7c:
                    99:45:e9:69:0f:73:ee:54:f1:ec:6d:56:2e:b6:a3:
                    e8:0b:b9:94:8a:fc:7d:4f:a8:56:f3:83:9a:df:e1:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7D:8F:19:EB:8D:C8:7F:82:36:44:0F:B6:34:6C:D3:DE:7A:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/b9739ea0-e99a-3b5f-a053-5c6b000fab75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365/64f91b98-4962-41cc-b646-3985b83da365.crl

            X509v3 Authority Key Identifier:
                keyid:4A:EE:88:BF:5D:7C:6C:25:65:71:9E:AB:62:1C:AC:A1:84:26:07:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64f91b98-4962-41cc-b646-3985b83da365.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:92:db:e4:db:ea:95:c1:61:ed:d5:30:12:13:86:22:1f:
         dd:74:f3:bf:d5:f5:74:7d:f0:59:49:a1:d7:49:c6:ed:e6:11:
         00:88:e1:34:e2:b6:aa:78:37:12:77:42:73:55:aa:9c:b2:0c:
         17:bd:a7:1c:18:7f:b6:81:11:86:ad:5f:94:9d:48:f8:0a:73:
         5a:ef:bd:fe:19:b5:cf:2b:9d:d3:7a:33:dc:95:3c:76:5c:e1:
         b2:95:33:0c:4d:ee:16:6b:59:01:26:39:d0:8d:1e:31:27:a1:
         07:1f:ac:9f:26:3a:c8:d1:81:ed:7d:4c:22:b9:37:a2:5c:fa:
         41:e8:d3:5b:da:bb:7e:fc:53:99:b8:c3:3f:01:8e:37:c0:3c:
         0c:8a:36:f5:4d:01:7e:87:10:a5:99:e0:b6:1f:70:d3:73:4b:
         08:96:b5:67:bc:c5:9b:dd:d0:18:f5:75:31:88:17:78:b4:6d:
         fd:90:d4:64:9f:1e:ac:64:cc:00:83:93:4d:a1:64:17:f0:53:
         58:74:fd:be:ac:b1:b8:11:88:bb:21:cb:18:0d:ff:3a:4d:d4:
         da:1b:82:27:52:1a:52:ea:3d:c6:6b:c6:4b:fe:c9:bf:75:b9:
         d5:87:13:24:c8:34:38:60:4a:bc:b5:18:97:b7:1f:03:25:cf:
         6f:91:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----