Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/af83b0eb-e8a5-330b-8f5c-c6a58ae95ebe.roa
File:                     af83b0eb-e8a5-330b-8f5c-c6a58ae95ebe.roa (raw, json)
Hash identifier:          zcTFSxRo6e2EGxskpBUNLdUUkhj0GzQFZVEqu2DthPs=
Subject key identifier:   34:04:9C:53:66:BF:4A:3B:32:64:D4:38:57:A7:BE:A4:E4:61:E3:A8
Certificate issuer:       /CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
Certificate serial:       010D0C9F43285841E4719549A954201227055B80
Authority key identifier: 5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/af83b0eb-e8a5-330b-8f5c-c6a58ae95ebe.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Wed 19 Jul 2023 00:04:06 +0000
asID:                     211380
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:95:49:a9:54:20:12:27:05:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Jul 19 00:04:06 2023 GMT
        Subject: CN=fb42a869-e620-4ae6-a9b8-1a67aa1d1194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:09:d7:29:03:4d:c9:95:98:47:f3:66:bf:
                    33:65:cc:df:82:8b:97:fe:09:77:b2:7e:88:cf:26:
                    bd:3f:10:30:79:5d:55:be:7e:a8:92:77:9d:89:89:
                    53:ee:78:44:3c:a4:6e:48:a0:01:b3:ab:09:f5:f1:
                    d8:4b:cf:80:d7:5a:2b:ce:e0:63:d9:19:02:78:9d:
                    a2:88:92:d3:55:26:7f:c0:36:14:d9:19:5f:e9:1d:
                    40:7f:7d:a6:cf:b0:42:3a:51:6b:fa:79:fa:77:c4:
                    5a:f9:00:91:5c:42:1a:13:4a:cb:00:d4:72:96:c0:
                    3f:40:ef:b7:7c:39:bc:27:00:55:05:33:a0:d7:ea:
                    7d:e8:af:a5:5e:0b:dd:04:08:e2:2b:6d:57:73:3a:
                    a1:cb:92:aa:f7:d0:a6:b9:58:3e:6a:01:f7:6b:12:
                    7f:f9:19:39:4d:26:91:88:24:f8:04:80:6b:20:7c:
                    c7:31:2d:b7:93:88:49:a5:9f:82:54:fa:b3:3f:1e:
                    30:f9:87:3a:5d:4a:b1:47:67:fc:67:e8:fa:05:65:
                    82:00:cc:c6:d8:08:17:77:b1:e1:68:32:6d:2e:2a:
                    00:5b:e6:7c:44:b3:fb:82:bf:53:e9:18:9c:e7:b8:
                    04:63:01:1a:16:c3:14:ef:e2:f2:0b:9a:78:f0:ec:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:9C:53:66:BF:4A:3B:32:64:D4:38:57:A7:BE:A4:E4:61:E3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/af83b0eb-e8a5-330b-8f5c-c6a58ae95ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/fdfe6ca2-0d77-412e-903f-e021fa67bf97.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:62:05:7a:a0:50:7e:83:ec:60:ef:eb:f5:97:bf:a8:53:c2:
         07:c8:f8:13:8f:76:7e:6e:82:ba:ca:56:8d:73:97:cc:67:55:
         5b:cd:98:c7:7d:a9:1a:5b:c4:c9:3d:2d:19:b7:67:93:6a:97:
         8b:0f:be:ff:36:de:e8:39:d7:26:8e:32:fb:e3:94:e9:87:c4:
         f8:df:55:dd:88:ea:c1:70:18:f0:b9:37:26:c8:5c:e0:db:23:
         8a:59:f9:0c:7b:57:e8:5b:f3:4f:90:47:f3:4f:49:f2:6d:a9:
         98:7a:d9:7b:dd:3a:48:3c:f9:d1:9f:b7:7d:43:c9:6d:4f:d8:
         d1:17:5d:d0:a7:94:ba:00:75:03:01:52:00:a3:71:7b:34:f2:
         a7:9e:7b:18:94:cf:0f:84:05:13:63:3b:1d:e5:68:be:fe:ef:
         08:81:c9:33:92:5d:31:0f:82:77:74:5e:95:09:d8:a0:45:0f:
         45:f8:82:28:24:1a:03:de:4b:ca:22:7f:be:97:1c:b0:72:32:
         1c:51:10:07:19:d2:5a:b8:c7:a6:37:bd:2f:a1:53:e4:b2:e0:
         2d:2a:a1:9d:42:82:1d:37:6a:0b:2b:80:d1:4e:a2:8b:74:aa:
         4e:62:d8:fd:24:50:cb:45:06:48:64:24:6d:03:9e:59:30:cf:
         f0:98:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----