Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/5c837d93-1e6d-384a-bf12-48a12d0f8026.roa
File:                     5c837d93-1e6d-384a-bf12-48a12d0f8026.roa (raw, json)
Hash identifier:          XKgBXfKJyJRIbhSUMgHDVtO+CTiRjVp6TM7siYS16uw=
Subject key identifier:   8B:15:6E:3E:4D:DB:31:35:9E:02:21:3D:DA:B8:98:B5:42:13:C5:2C
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BFB0DF8C6B6BC46416216B80
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/5c837d93-1e6d-384a-bf12-48a12d0f8026.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:b0:df:8c:6b:6b:c4:64:16:21:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=11769068-ccc0-4aa5-b8e0-3ddf3c506392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:2e:21:6c:ee:b4:98:f5:d1:c1:0b:47:b5:
                    f2:1d:bc:29:4f:cc:df:08:73:b7:50:52:08:44:6f:
                    fa:04:fa:a0:55:37:5a:ae:0e:89:ce:a5:ae:a9:e1:
                    8e:8f:02:e4:e4:56:e7:84:5f:7f:9d:39:0f:73:dd:
                    d2:f2:e3:b5:96:f0:89:56:e2:da:7c:8e:40:cd:34:
                    e6:9f:3a:f9:e6:14:ea:46:87:87:09:28:14:d4:5b:
                    fb:d6:f5:0a:3f:38:ea:aa:c8:4d:50:da:94:dd:70:
                    f7:58:f7:d4:46:16:de:4a:7c:d3:e2:7c:81:a5:72:
                    13:c9:7a:3a:ad:95:a6:d2:40:db:a4:c5:7a:f2:68:
                    a9:fb:ce:07:de:45:6e:e9:66:43:90:ce:b0:3e:27:
                    4a:ec:c2:37:0a:fd:42:f3:6c:83:6c:30:51:55:ec:
                    8d:fa:22:ca:1f:be:98:6e:b9:85:3d:74:0e:4d:47:
                    4f:f0:35:92:4f:73:df:80:74:f4:f6:d3:1a:37:b1:
                    29:9f:24:93:83:6b:15:1a:1c:e1:57:7e:06:64:6f:
                    20:5e:10:10:89:ea:46:3f:9f:46:61:9e:12:1f:6d:
                    e5:2c:69:f2:b9:d2:e9:5a:ac:dd:59:9b:fc:ba:e9:
                    ae:7a:aa:92:ec:eb:fb:09:86:7d:08:55:25:80:ea:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:6E:3E:4D:DB:31:35:9E:02:21:3D:DA:B8:98:B5:42:13:C5:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/5c837d93-1e6d-384a-bf12-48a12d0f8026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:49:a7:51:a1:9e:ff:99:d2:b4:d3:fb:e6:31:92:b0:7d:cf:
         fe:b4:9b:68:37:fa:01:76:5e:ee:ae:90:93:12:6a:c4:8f:07:
         d2:47:7f:29:66:c2:f8:47:77:6d:12:19:de:91:71:41:f7:e3:
         d4:69:00:34:c9:aa:00:8f:0f:46:e3:ad:59:5a:de:a6:3e:a7:
         67:d0:63:56:02:46:13:09:b8:a4:7b:68:8e:f4:04:02:5d:58:
         86:6c:3d:02:3c:3c:db:a2:e1:f2:58:60:4c:84:c2:35:18:c0:
         26:21:a6:d6:14:2c:f0:19:d7:33:63:b2:c2:85:3e:79:7e:cd:
         0c:83:da:1a:27:a3:f4:0b:7d:6b:a0:03:25:48:31:96:2b:98:
         1a:3e:2f:c4:df:77:f7:81:d4:a1:9a:fd:a6:fb:0f:2d:51:e4:
         fd:7a:5a:26:aa:11:9d:00:04:c9:2a:c3:54:2c:fc:45:e8:25:
         b0:7c:70:94:63:7e:47:f4:b5:0a:a0:7a:bc:a0:8a:b2:52:c9:
         e8:ee:50:3f:d5:57:24:8a:96:65:17:e8:aa:77:a6:fb:e3:57:
         9a:8e:81:d9:0a:31:b4:7f:0f:62:23:bc:54:3e:eb:e1:be:12:
         4a:20:74:43:d1:f3:eb:8e:48:3f:d6:5e:81:4f:15:bc:24:e8:
         06:63:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----