Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/e977831d-9224-34a9-b772-c2e584a59003.roa
File:                     e977831d-9224-34a9-b772-c2e584a59003.roa (raw, json)
Hash identifier:          S5JDO0LePOK5xL9mhxQo00bg0JzdW9qmd9ApDgF9rB8=
Subject key identifier:   C7:C1:AE:D9:02:43:6E:F2:98:B5:3B:B4:F7:CC:53:A4:F1:2E:DE:F4
Certificate issuer:       /CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
Certificate serial:       010D0C9F43285841E4719994FEE5461815D8EE46
Authority key identifier: 5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/e977831d-9224-34a9-b772-c2e584a59003.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Sat 05 Aug 2023 19:55:11 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:99:94:fe:e5:46:18:15:d8:ee:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfe6ca2-0d77-412e-903f-e021fa67bf97
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Aug  5 19:55:11 2023 GMT
        Subject: CN=faef6a80-cedd-45b3-b891-f6e04ebbc0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:35:85:d5:7c:b9:9d:69:79:c6:c6:a0:78:
                    ae:54:47:cf:e9:05:02:0b:88:c7:74:a0:d5:47:36:
                    94:70:52:60:4a:9f:c0:83:e5:45:d3:68:c1:c1:32:
                    f5:55:e3:d5:74:aa:ae:51:01:4d:4f:f9:f1:8b:2b:
                    0c:cd:40:6f:33:8d:3b:6f:15:25:33:f7:72:ab:43:
                    58:ab:4f:b8:c5:87:8d:c5:3b:01:44:4a:70:9e:ff:
                    16:24:f5:fe:e8:5a:6d:8a:03:12:47:cc:55:94:6c:
                    d6:1e:6f:43:bd:07:e3:a9:75:bc:ca:6b:da:7e:ee:
                    ae:4a:64:1d:6c:61:f1:f4:d9:d9:6c:3a:71:8a:3f:
                    fd:a6:aa:0a:46:79:fa:d9:fb:ce:b4:df:3b:2c:60:
                    f2:99:9a:c3:56:ad:1a:44:2c:41:9a:e9:87:1d:f7:
                    66:01:72:33:7b:08:7b:0f:59:23:09:c3:0d:fa:4b:
                    fd:bc:09:ea:36:1f:82:a1:71:8f:87:4d:1e:da:a8:
                    28:fb:72:82:ed:e5:10:8b:99:af:cd:30:66:43:2e:
                    f3:ba:ae:c3:7a:0e:30:62:97:ca:8c:54:0c:b1:bd:
                    24:75:e1:3c:63:4b:46:1a:34:3a:9b:aa:e4:d6:18:
                    af:97:c6:7c:ef:4e:bc:5b:a0:eb:9f:81:f7:29:7c:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C1:AE:D9:02:43:6E:F2:98:B5:3B:B4:F7:CC:53:A4:F1:2E:DE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/e977831d-9224-34a9-b772-c2e584a59003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97/fdfe6ca2-0d77-412e-903f-e021fa67bf97.crl

            X509v3 Authority Key Identifier:
                keyid:5C:C8:57:6C:36:D0:68:2D:19:19:71:F8:DB:D8:38:83:0E:DA:16:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fdfe6ca2-0d77-412e-903f-e021fa67bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:e1:7c:c1:20:33:c6:2a:3f:19:c0:52:1f:1c:5f:55:4f:
         63:a4:78:4f:a6:4c:5d:eb:8f:62:5c:0c:b7:f9:99:08:7f:70:
         53:85:38:18:a0:4c:73:be:b3:e0:53:ba:57:d9:0a:2d:19:8a:
         7e:3f:8b:a5:1b:78:21:77:c6:09:58:a0:2d:37:b7:c2:f0:1a:
         cd:ef:ac:43:ec:a5:6e:91:4a:c5:91:16:22:7c:76:c0:81:1f:
         4f:11:dc:83:37:96:ec:b9:cc:56:68:a0:2c:57:7a:14:b4:a9:
         f5:5e:cd:77:92:0c:9a:d2:66:ad:0f:f2:00:99:d2:b6:dc:b9:
         25:30:26:4e:0d:c7:74:d2:7a:45:1d:b8:35:6b:7a:cb:fa:3a:
         09:29:95:96:7c:92:c2:d8:bd:9c:c5:94:e5:aa:72:d7:a5:04:
         6d:16:f0:6c:46:e3:86:4a:ba:b1:3e:8f:15:c1:e3:10:46:19:
         73:f1:dc:4b:77:c8:b5:53:68:0b:78:92:07:a1:2b:e9:c5:75:
         c6:68:5c:1a:b8:03:04:66:df:e7:d0:68:5f:86:b1:ad:36:0b:
         11:86:e4:9b:fc:8c:19:d9:1a:12:58:af:cf:ba:cd:ba:12:78:
         63:58:a1:26:9a:d0:e2:67:e4:0f:0b:4c:42:7d:67:6d:48:0f:
         0f:15:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----