Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/032ec531-b5cb-387d-8aac-bb9f046e1fd7.roa
File:                     032ec531-b5cb-387d-8aac-bb9f046e1fd7.roa (raw, json)
Hash identifier:          Wee6T2Kaq7x2YEpD12dvFzM2uDaJh8GHN9oWQQyquAQ=
Subject key identifier:   CF:58:F9:BA:50:A3:E2:AF:94:D0:B2:A5:B5:A1:91:31:C2:BB:34:D3
Certificate issuer:       /CN=6847ce42-ffcb-47b8-8303-585be67ce116
Certificate serial:       010D0C9F4328584436CA698FB6B16901D5811000
Authority key identifier: 5C:34:10:A0:82:B7:44:C6:F6:EA:99:B6:4D:37:ED:39:CA:7C:FA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/032ec531-b5cb-387d-8aac-bb9f046e1fd7.roa
Signing time:             Thu 14 Dec 2023 16:00:37 +0000
ROA not before:           Thu 14 Dec 2023 16:00:37 +0000
ROA not after:            Wed 13 Mar 2024 15:00:37 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:36:ca:69:8f:b6:b1:69:01:d5:81:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6847ce42-ffcb-47b8-8303-585be67ce116
        Validity
            Not Before: Dec 14 16:00:37 2023 GMT
            Not After : Mar 13 15:00:37 2024 GMT
        Subject: CN=61074539-57fd-4653-976a-898f416e11c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:ae:13:e9:14:d9:eb:df:7b:f2:72:6a:56:
                    a9:5e:f4:be:06:b6:87:46:27:03:21:81:f3:aa:a1:
                    9a:4f:90:80:67:d1:27:d6:02:1e:93:c6:84:71:d0:
                    5d:38:19:4a:99:28:a1:64:43:8c:52:fa:32:52:58:
                    32:8d:78:e2:da:42:af:04:1d:04:d9:b3:46:f0:2b:
                    85:fd:6f:9a:7a:96:3f:61:5f:0c:43:f9:89:99:af:
                    ab:e0:88:c9:27:8f:e1:60:f9:21:28:0e:0d:e9:b3:
                    c0:88:f3:5a:92:6f:14:2b:fd:db:4e:87:25:47:ff:
                    ab:02:1e:d2:5d:f8:0c:7a:10:78:d8:38:c0:2d:5d:
                    7d:ff:aa:95:71:24:6a:01:93:30:5a:f0:f8:39:67:
                    3c:48:d9:c2:b6:da:8a:c7:63:6a:b4:d6:10:c4:ce:
                    13:b8:ed:7d:b1:91:ea:88:62:37:8f:72:1f:85:55:
                    80:59:43:e8:f2:ba:49:35:ce:89:b4:a5:5b:47:77:
                    10:fc:51:eb:96:3d:f4:ae:a9:c2:f7:1e:15:8a:26:
                    ee:44:c6:fa:41:b8:e0:c2:df:d1:56:16:ff:ed:ca:
                    bf:85:59:66:50:63:7b:a7:bc:be:5e:54:2c:cb:bc:
                    64:9a:2d:db:99:b0:d0:e6:a9:03:e1:ab:0c:c9:1d:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:F9:BA:50:A3:E2:AF:94:D0:B2:A5:B5:A1:91:31:C2:BB:34:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/032ec531-b5cb-387d-8aac-bb9f046e1fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116/6847ce42-ffcb-47b8-8303-585be67ce116.crl

            X509v3 Authority Key Identifier:
                keyid:5C:34:10:A0:82:B7:44:C6:F6:EA:99:B6:4D:37:ED:39:CA:7C:FA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6847ce42-ffcb-47b8-8303-585be67ce116.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:21:1b:65:e0:95:aa:6e:46:43:9e:c5:7c:51:d8:55:48:88:
         22:49:7f:f4:dc:5e:10:83:44:af:45:fd:6b:dc:21:87:a4:62:
         ef:ce:6b:bd:60:1e:3b:63:f7:77:a3:bd:d6:51:27:a7:03:7c:
         0e:d7:d0:69:d8:2a:45:4a:a6:c2:f5:29:c8:e9:1b:f0:fa:93:
         6a:9b:6c:e6:7a:28:95:ba:5c:b8:5f:b1:df:57:c0:0b:73:ad:
         46:20:cc:4a:a6:95:b4:1c:c1:0a:7c:4b:dd:ed:62:14:eb:b8:
         30:66:f6:b3:36:e0:3d:fa:d4:41:51:35:ef:9c:ea:88:26:0e:
         9d:8b:ad:2a:f9:d1:36:cf:18:65:01:8a:84:4c:1e:5b:83:91:
         c9:43:72:0f:c1:47:39:8b:ec:43:46:a2:e4:11:84:db:c7:41:
         cb:37:2c:1d:88:37:6a:98:c3:0a:28:a6:0d:98:f0:b7:20:38:
         bc:65:73:24:75:b7:45:f0:53:2a:cb:18:95:cd:d1:cb:ef:dc:
         6c:10:fd:77:07:37:6f:6b:e8:9c:25:79:1a:cc:e4:da:0f:08:
         6e:7c:10:95:40:c7:bd:8b:6c:15:9e:09:3a:34:bc:9e:c7:bb:
         b3:6d:f9:73:72:4e:26:86:a7:86:c6:f9:94:11:33:c9:07:58:
         32:a2:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----