Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bc7cf0e7-afee-37be-b8e2-fb26c09bc054.roa
File:                     bc7cf0e7-afee-37be-b8e2-fb26c09bc054.roa (raw, json)
Hash identifier:          7fiikOaoBNKOXqCKQsnhE1qluqss1fcSn4D4CDRpPX0=
Subject key identifier:   5B:9C:4D:8B:53:6E:1F:5C:8B:54:AC:78:1E:28:D4:AC:89:55:8F:7C
Certificate issuer:       /CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
Certificate serial:       010D0C9F432858412057F1630867F243820D03C0
Authority key identifier: 08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bc7cf0e7-afee-37be-b8e2-fb26c09bc054.roa
Signing time:             Tue 28 Feb 2023 18:57:57 +0000
ROA not before:           Tue 28 Feb 2023 18:57:57 +0000
ROA not after:            Mon 02 Jun 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:20:57:f1:63:08:67:f2:43:82:0d:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b71e1b2-5595-44cf-aa4d-6b5d35ad380e
        Validity
            Not Before: Feb 28 18:57:57 2023 GMT
            Not After : Jun  2 04:00:00 2025 GMT
        Subject: CN=ab2cb921-654b-411c-b1dc-ac1d4412b44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:b3:09:e5:37:34:dc:4c:3e:e7:a1:a1:fc:
                    5c:96:42:97:56:b0:a7:28:30:e4:2d:5c:9e:89:39:
                    30:0f:3f:a6:11:15:95:7b:86:61:aa:c2:1d:f6:23:
                    41:2f:13:df:04:6a:bc:cd:73:d3:0b:b9:8c:91:e1:
                    07:e7:1a:f1:f7:71:b9:1e:84:c2:d1:b9:5d:b5:68:
                    18:c9:72:44:d7:7b:d9:f8:66:fd:1a:6b:6f:1a:77:
                    c6:f2:0b:69:22:3f:3e:cb:cc:d6:06:97:9f:3f:7d:
                    30:52:25:8d:35:aa:de:3c:bd:8a:b8:5c:b1:0a:00:
                    10:c4:72:6a:e9:9e:0d:f9:07:7f:c9:d1:11:3d:03:
                    39:48:20:3f:14:70:db:d4:2e:ef:8a:d6:75:96:81:
                    58:f4:7b:c4:0b:10:bf:bd:1c:63:6b:1e:f4:01:df:
                    25:27:9c:86:96:b9:41:07:c4:ae:76:3e:a4:6c:b7:
                    d0:a5:19:25:45:fb:54:1e:e3:eb:82:6c:f6:e6:4d:
                    f8:e9:fb:66:e2:83:cc:51:16:7d:a9:e0:63:01:76:
                    dc:16:34:41:24:e5:c7:f6:55:da:60:ef:56:1b:24:
                    42:57:02:34:cd:8c:8b:69:fd:42:b3:2d:7c:e6:e9:
                    23:9b:cd:59:0b:05:a2:65:94:be:3f:ce:75:5f:de:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9C:4D:8B:53:6E:1F:5C:8B:54:AC:78:1E:28:D4:AC:89:55:8F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/bc7cf0e7-afee-37be-b8e2-fb26c09bc054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.crl

            X509v3 Authority Key Identifier:
                keyid:08:F6:D4:68:F1:09:F2:E8:3E:A1:E9:A5:0B:29:2E:88:DB:B8:F0:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0b71e1b2-5595-44cf-aa4d-6b5d35ad380e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5f:54:6e:0d:df:7f:28:02:84:53:99:d7:3b:91:87:96:f6:
         79:0b:b9:0e:7b:fb:71:2f:28:e2:76:38:24:4e:d9:87:62:19:
         d8:09:8f:c3:e3:4a:62:41:ee:f8:57:4d:67:12:ad:ce:6a:db:
         02:64:eb:da:3f:5b:6c:ce:64:81:db:47:f6:52:a1:6a:6f:db:
         f1:4a:c3:30:29:e2:e0:ff:66:6d:ff:d9:52:af:92:cd:66:64:
         ac:a2:29:15:f9:91:e8:24:3f:a0:df:20:1e:6e:36:7d:dc:bd:
         2e:a4:c1:7c:6a:27:2c:78:e3:76:7d:9a:6f:f3:c3:b3:ab:17:
         69:44:21:37:0a:02:29:6c:5a:92:76:4a:2c:d2:00:6d:f1:aa:
         45:3b:e4:13:d5:bb:b4:b1:d7:41:16:bd:bb:6a:e9:05:e3:e3:
         28:72:1b:eb:eb:08:b5:4d:4e:8c:d3:71:70:55:ca:25:ac:50:
         76:2f:cd:7f:e1:e0:2e:59:11:9a:07:00:f9:33:00:1a:c7:3c:
         9a:df:b8:d6:34:55:1b:65:6d:8a:de:13:e4:79:38:02:d1:78:
         8f:ad:43:b0:b4:d3:67:9c:97:b5:c3:1b:95:98:ea:09:02:f2:
         cf:9d:3e:d5:c9:c7:5c:65:74:97:42:79:54:dc:1d:59:53:82:
         29:12:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----