Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/ae70ec10-2ea1-3c4e-b92c-10a4f3821325.roa
File:                     ae70ec10-2ea1-3c4e-b92c-10a4f3821325.roa (raw, json)
Hash identifier:          INchwcIXZcYpg4Si+9pjP2NO9qNjS/qk6CGi/iDtQzE=
Subject key identifier:   46:73:F9:91:E2:42:41:A1:B8:BD:84:ED:72:04:8E:25:D7:36:7B:E8
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583F57253DABF560D9C14265F660
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/ae70ec10-2ea1-3c4e-b92c-10a4f3821325.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:25:3d:ab:f5:60:d9:c1:42:65:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=ccbedd3b-524c-423e-b239-8fca1ba75b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:ab:58:89:db:29:7f:87:5f:2a:a2:91:9a:
                    a2:fa:9c:e8:77:7a:22:30:e7:e5:53:e3:f7:f1:90:
                    24:48:b6:ec:ae:ae:b3:be:97:10:3b:e9:2b:65:b3:
                    cb:bf:52:97:00:4f:d8:b0:f1:7a:db:63:b3:74:0e:
                    39:12:fa:08:27:61:ce:62:4e:73:9f:1d:96:6d:50:
                    72:46:40:43:0a:e5:de:7b:27:57:aa:0c:c9:ca:0d:
                    f1:bd:13:f3:6c:95:e4:9a:79:7b:e6:5b:3d:a0:f6:
                    3d:1d:6f:61:3d:ea:2c:2d:9a:f0:e3:04:ce:5f:38:
                    c1:03:2b:62:01:b4:45:8b:5b:cf:02:f8:65:99:50:
                    eb:ca:18:e8:40:3b:f3:aa:b7:7c:a6:9d:75:6f:dd:
                    7e:17:12:18:13:af:ff:89:94:04:d2:ce:51:2c:06:
                    23:6e:9e:e3:cf:0b:bf:c7:66:48:40:26:da:24:59:
                    ae:a2:40:e2:6f:d2:88:ca:31:8c:f1:fe:88:97:59:
                    96:e1:c0:7c:4a:61:a9:c3:d3:62:c2:af:b4:b3:95:
                    e5:a2:cc:b1:4e:1a:70:a0:23:8a:a5:0e:fe:c4:b3:
                    38:4c:b5:a8:c6:73:81:36:b7:0e:d6:df:55:35:bf:
                    57:25:fc:7c:c9:a2:4c:f1:7d:31:85:19:ea:47:b9:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:F9:91:E2:42:41:A1:B8:BD:84:ED:72:04:8E:25:D7:36:7B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/ae70ec10-2ea1-3c4e-b92c-10a4f3821325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:b5:77:b9:d4:63:dd:18:51:23:89:b6:50:85:95:07:1d:
         4e:fb:e0:3e:d4:d2:81:59:ce:2f:00:47:f8:05:0e:c2:cc:8a:
         d9:43:a4:d6:09:ad:3c:c8:f6:87:10:1e:a6:a4:0d:02:5b:da:
         d1:95:90:98:fe:3a:cf:42:9a:31:bc:d7:4b:01:3e:38:be:9f:
         85:4b:af:d0:3f:d5:ed:4b:7c:76:0e:88:eb:f5:48:6c:f0:d0:
         e7:ad:d9:bf:8d:60:4c:48:3b:09:25:1e:ad:f6:85:fa:e5:85:
         d6:d8:3b:61:c9:3a:2f:c1:12:e6:4d:d9:b5:bc:4d:38:00:68:
         20:06:6f:da:b4:77:f3:06:c3:35:cc:e5:15:87:75:a6:b1:52:
         01:73:75:aa:6e:78:ae:66:4b:d2:f7:a4:00:d4:7e:d0:09:19:
         51:4c:cb:49:f7:00:37:a9:fa:db:45:b8:8e:d6:e7:0a:00:ab:
         25:0a:3d:26:1d:11:29:1c:78:0e:65:62:2f:e6:2a:24:13:4d:
         7d:c8:4e:c9:b3:89:fe:8f:ce:13:2a:82:75:ac:c0:2c:ae:6b:
         15:b6:70:ad:6e:70:40:b8:d0:7d:a6:d7:92:d6:5d:d2:6a:4e:
         53:17:11:f0:b6:0f:be:e3:4e:65:b2:19:85:7b:6e:45:bd:a2:
         e3:64:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----