Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/0235973f-d218-399d-b3ee-e131e8ac5e90.roa
File:                     0235973f-d218-399d-b3ee-e131e8ac5e90.roa (raw, json)
Hash identifier:          T4YCoLR6YgZDShpqQnxnwuEknOskrWPUE1RZIj2rKXA=
Subject key identifier:   10:08:65:F1:07:EC:81:E8:35:18:80:1A:03:F0:2E:45:65:D2:00:B8
Certificate issuer:       /CN=895260a6-420c-462e-82ed-4fe6e0e2da31
Certificate serial:       010D0C9F43285841DE963F6C3013281514C10100
Authority key identifier: 53:1E:01:00:AE:32:0F:85:8E:9C:14:A3:12:30:99:8F:25:F4:71:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/0235973f-d218-399d-b3ee-e131e8ac5e90.roa
Signing time:             Sat 13 May 2023 16:10:31 +0000
ROA not before:           Sat 13 May 2023 16:10:31 +0000
ROA not after:            Fri 11 Aug 2023 16:10:31 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:de:96:3f:6c:30:13:28:15:14:c1:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895260a6-420c-462e-82ed-4fe6e0e2da31
        Validity
            Not Before: May 13 16:10:31 2023 GMT
            Not After : Aug 11 16:10:31 2023 GMT
        Subject: CN=fd070443-4c67-433e-bfef-d11d0f564036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:f1:7e:69:7f:f7:5f:b9:79:5e:4d:34:79:
                    c2:de:38:9e:37:bf:b8:0c:fc:05:3f:62:10:e1:a1:
                    b6:0c:90:23:ec:ba:6f:81:f7:d4:0e:23:f7:a1:40:
                    f6:7d:a2:23:08:01:5b:6a:ad:c9:7b:68:42:b7:0f:
                    43:e7:a4:01:20:f6:95:c1:2f:87:0a:e8:12:a2:b6:
                    11:2c:e8:5f:28:d2:f2:9d:2c:f2:99:0e:25:bd:48:
                    fb:73:f4:a7:23:ed:38:21:f5:7b:5d:1e:5c:d8:6c:
                    fa:fc:34:73:00:0e:a7:80:3e:17:c7:d7:35:aa:fb:
                    86:07:4a:77:eb:9d:c2:95:22:50:17:89:b5:65:90:
                    58:49:39:59:bf:3b:e8:02:79:35:db:08:f6:02:a6:
                    61:6d:76:c0:b3:5a:9c:c4:10:a9:ca:42:19:93:2e:
                    e9:32:f3:ce:e4:cb:ee:1c:f5:57:e0:cb:fd:d8:47:
                    27:b1:3b:de:83:41:c4:eb:5f:61:49:20:38:97:0e:
                    7a:e0:ca:ea:c0:8c:30:d5:bd:34:d9:b7:15:5e:99:
                    f7:29:2b:51:9f:6e:11:93:25:8b:3b:15:cb:05:eb:
                    a2:27:75:57:c3:65:9a:2d:61:67:01:4c:f9:a3:cf:
                    a9:34:ef:02:c9:bc:2e:48:4d:2a:79:fe:bf:24:37:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:65:F1:07:EC:81:E8:35:18:80:1A:03:F0:2E:45:65:D2:00:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/0235973f-d218-399d-b3ee-e131e8ac5e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/895260a6-420c-462e-82ed-4fe6e0e2da31.crl

            X509v3 Authority Key Identifier:
                keyid:53:1E:01:00:AE:32:0F:85:8E:9C:14:A3:12:30:99:8F:25:F4:71:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:1c:c8:0e:d4:37:d2:be:36:32:e3:f8:29:96:cc:75:46:
         56:13:4e:6b:b6:8c:a5:d9:42:d6:10:00:05:6f:0b:b3:49:53:
         94:31:45:b8:4b:a3:09:44:78:82:19:20:ed:43:71:0c:41:64:
         cc:21:49:89:8e:84:c3:42:e9:75:b1:6e:5a:ca:e0:e3:49:86:
         a1:51:ba:0d:1d:f0:c3:df:18:3f:f6:4e:fd:7e:8e:55:1a:c9:
         e6:dd:e9:ea:71:59:ec:ca:60:2a:f3:43:44:2b:dc:c1:89:24:
         d7:8b:b5:d0:a5:c5:43:93:de:77:92:5a:ae:59:44:e4:c5:ce:
         5c:4d:1a:58:3c:39:6b:de:74:b1:66:82:ff:b9:09:c7:be:03:
         eb:f1:44:f6:f2:08:71:90:01:f5:20:61:4e:13:45:a0:9a:40:
         2e:b3:5f:99:2c:b3:ad:38:1d:3a:c3:6e:79:bf:2a:a9:fe:99:
         d6:86:50:34:d0:e8:31:f7:e7:12:c6:39:f3:4d:05:15:dc:31:
         ad:0e:d2:59:fe:ac:4c:69:76:30:a0:e9:3b:96:12:83:79:5e:
         a1:d7:3b:7d:09:51:e7:46:14:90:cc:f1:d2:51:38:f2:93:b3:
         c5:65:97:a2:b7:c2:e3:4f:42:0f:69:25:dc:0a:0a:63:cc:c3:
         2e:85:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----