Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/6a6f93d1-4bbd-3941-a4ba-05c3b0e9474c.roa
File:                     6a6f93d1-4bbd-3941-a4ba-05c3b0e9474c.roa (raw, json)
Hash identifier:          PiueYoutAW3HlXV7mxxCmvBwjtJTj7oF1cuReT7+yI0=
Subject key identifier:   A3:D4:6E:C7:3A:8D:5B:71:C0:6F:55:EC:E0:84:18:A5:DD:03:14:58
Certificate issuer:       /CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
Certificate serial:       010D0C9F43285841E4719523B01AC194CE8C9340
Authority key identifier: 5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/6a6f93d1-4bbd-3941-a4ba-05c3b0e9474c.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Tue 18 Jul 2023 22:44:07 +0000
asID:                     59678
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:95:23:b0:1a:c1:94:ce:8c:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 18 22:44:07 2023 GMT
        Subject: CN=23debc0a-ee59-4174-8f7c-06d4966a9617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:de:2e:cf:d9:fd:a4:be:47:c0:a5:43:4b:
                    3a:2c:c6:b2:8d:07:d1:65:af:55:02:46:34:58:97:
                    be:9d:29:ba:3f:2a:b8:7f:40:59:22:d5:05:42:4e:
                    fa:50:de:8d:26:a5:85:d4:ed:c4:6d:a7:69:c5:0a:
                    3c:ec:98:9a:ae:77:c3:cc:fb:8f:91:07:9f:59:f8:
                    ce:cc:33:76:5d:c8:b5:c9:2c:9b:bd:bc:f8:8e:e2:
                    d5:a3:48:29:14:e2:56:3d:88:75:3c:21:9a:d5:89:
                    7a:31:d0:2c:f4:6c:a6:68:5c:08:29:25:eb:b4:35:
                    ef:8f:c6:7f:b4:bb:14:ce:64:65:18:db:c2:b7:e5:
                    38:f8:50:28:11:0e:31:dc:74:bb:d8:4b:18:d5:c5:
                    5e:29:9d:99:83:1f:11:d1:44:99:7d:0c:5a:80:82:
                    10:0f:c9:68:b3:cb:0c:f2:6a:c1:8a:b0:c2:56:22:
                    65:d2:b0:83:5f:af:23:92:ed:ef:bd:36:a9:40:8b:
                    18:08:87:57:e3:6e:35:e0:1f:d5:99:46:3e:fc:f6:
                    76:3a:34:43:1d:55:db:04:3f:d6:d4:42:9c:c5:81:
                    60:da:7f:69:e5:c9:c1:fd:0a:a5:a2:bf:ed:e7:01:
                    69:89:24:e2:55:89:34:58:f2:ea:95:1e:89:1e:8c:
                    22:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:6E:C7:3A:8D:5B:71:C0:6F:55:EC:E0:84:18:A5:DD:03:14:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/6a6f93d1-4bbd-3941-a4ba-05c3b0e9474c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/fdfe6ca2-0d77-412e-903f-e021fa67bf97.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:7a:b7:ef:5b:f0:41:a0:df:6a:41:80:75:c4:be:84:4a:
         4e:a1:fa:49:ce:e8:f8:c7:5d:16:c7:e7:61:47:55:98:63:23:
         ac:76:53:a4:e5:f7:1f:0a:dc:84:87:10:1d:3d:c3:82:29:e0:
         88:45:e7:72:40:25:07:19:ce:6c:15:2a:53:d5:8a:67:a3:cf:
         8d:72:62:74:83:8f:a1:87:d2:8d:e8:d6:b7:dd:1d:fe:4c:63:
         27:b6:e1:db:2e:3d:3a:62:b4:a1:87:ab:41:12:59:a9:c7:fc:
         dc:48:9e:15:46:73:7d:2c:c6:55:6f:a0:14:a5:04:28:af:57:
         ef:5e:14:80:9a:e6:df:9c:ec:58:ed:a2:7b:05:68:8e:07:b7:
         75:7a:34:df:a0:de:3c:0e:67:7f:97:b4:c0:2c:6a:83:3b:49:
         c6:55:5f:92:f2:44:b3:6a:22:62:a1:51:11:5b:12:b5:97:2d:
         82:e0:f1:ef:73:83:a6:e9:5a:3b:e5:5a:e6:17:29:6d:55:7d:
         b5:8b:35:c6:b3:48:30:ca:bc:3b:42:7a:1e:e6:b1:fe:e6:d2:
         d1:f5:95:db:7f:5f:49:4e:61:b1:66:e5:74:04:94:ad:10:c5:
         1d:17:5b:8a:d0:1d:f4:a4:4e:e8:df:4c:a9:eb:07:89:be:58:
         83:d4:ec:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----