Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/07b2a2e8-7931-39e8-af6c-0a89daf601a2.roa
File:                     07b2a2e8-7931-39e8-af6c-0a89daf601a2.roa (raw, json)
Hash identifier:          YHkhB0ZTNyEssg0ctEW97m2RZ2gqU9c5ycf7g291Jek=
Subject key identifier:   0C:B8:85:2D:B4:33:7A:F0:6E:3E:2A:AB:AB:F4:58:63:D1:BB:E8:CA
Certificate issuer:       /CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
Certificate serial:       010D0C9F43285841E4719984C26C57E5E2C1D880
Authority key identifier: 5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/07b2a2e8-7931-39e8-af6c-0a89daf601a2.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Mon 31 Jul 2023 16:37:45 +0000
asID:                     50224
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:99:84:c2:6c:57:e5:e2:c1:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 31 16:37:45 2023 GMT
        Subject: CN=0946f2a2-9bf1-45ae-a079-dfbd64d5b3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:3f:3c:0b:23:86:a8:0e:56:ca:5e:54:e6:
                    1b:3e:8a:e0:b8:9a:87:3d:25:b4:24:83:ca:2c:04:
                    64:95:1d:c1:9d:a9:19:26:ac:39:8c:53:13:57:8a:
                    1c:93:97:61:d3:b4:73:00:47:96:31:f9:ac:9f:cb:
                    00:76:9f:0d:43:ba:3a:a0:20:62:73:8f:17:6c:20:
                    55:70:14:b2:69:b8:c2:a8:ad:81:d3:a3:1f:0d:e7:
                    35:7c:e5:d7:a1:ee:0a:ff:54:76:96:78:bc:ed:4d:
                    c2:37:ce:74:25:bc:54:90:85:28:00:2c:a3:f4:69:
                    cd:52:e3:c0:92:de:84:d5:76:1c:ea:ec:2f:2e:3e:
                    86:96:ae:5d:c3:86:cd:90:88:32:25:8d:4d:96:83:
                    57:23:98:e3:4c:04:10:c9:25:2b:aa:2e:d9:11:cf:
                    48:82:d9:f6:54:3f:99:08:c2:22:96:87:2b:33:8a:
                    9f:e2:3b:2b:ca:f0:46:4a:13:64:fa:8b:66:fd:ca:
                    7e:a9:8f:c6:84:cd:82:ff:40:19:c6:87:b6:71:41:
                    97:43:51:26:45:b1:55:61:e5:2b:dc:b8:f7:a4:8d:
                    d9:83:85:ae:e1:0e:80:27:fb:21:34:6e:9f:18:f4:
                    da:e0:1c:aa:df:01:f2:ae:f9:ec:57:d0:2a:1e:f9:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B8:85:2D:B4:33:7A:F0:6E:3E:2A:AB:AB:F4:58:63:D1:BB:E8:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/07b2a2e8-7931-39e8-af6c-0a89daf601a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/fdfe6ca2-0d77-412e-903f-e021fa67bf97.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:d2:36:75:f6:68:31:96:28:dc:25:ba:be:a5:8c:ab:49:
         f9:a1:96:63:c3:f3:a7:ac:97:7d:e1:25:01:64:2d:e5:cf:74:
         16:49:ad:d1:5a:02:e4:fc:b1:59:10:47:7b:65:e2:05:ca:30:
         66:ea:d4:6f:6c:57:c2:75:d3:84:ec:2f:4b:76:db:91:49:35:
         44:2d:9c:70:36:ea:24:d5:7c:95:8a:d2:cc:d3:30:e8:a6:cb:
         ab:df:4e:f7:56:d0:e9:fd:4e:73:8c:21:58:b0:13:13:32:ef:
         84:16:c8:37:12:dc:b6:f4:ef:24:4f:b9:3b:cc:23:ed:77:91:
         88:d0:14:1c:fa:87:28:1e:1a:10:10:b2:c6:50:26:26:5c:a3:
         cf:90:49:d8:32:d6:34:2a:2b:35:6a:f1:14:a3:2f:d2:7e:a1:
         2c:71:4c:2a:40:5c:a6:e5:2b:d4:75:0e:c1:6b:be:67:fb:49:
         49:a4:bb:d8:4d:4c:e0:2f:e4:26:4e:73:7a:32:d0:5d:bb:7e:
         5a:64:28:3c:e6:e7:dc:d2:04:18:ea:a9:6e:ce:d5:70:08:a9:
         49:d6:74:ad:89:72:89:39:cd:06:5c:85:25:a0:8f:c5:18:34:
         82:13:c6:81:0e:1a:38:2f:8e:d1:dd:7a:a9:35:16:bc:fa:7c:
         69:77:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----