Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/d2009bb3-82bc-369d-aa34-ce5aa4a72047.roa
File:                     d2009bb3-82bc-369d-aa34-ce5aa4a72047.roa (raw, json)
Hash identifier:          7EC5L9HT52AaCUYRVYp8VeX+tCdlfXZYQgwCxP0LCeU=
Subject key identifier:   CD:4B:45:35:E8:4B:70:66:12:A5:3C:B1:76:7B:5D:2B:9E:DF:DD:96
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583CDD0338F2CACA72D525CDD940
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/d2009bb3-82bc-369d-aa34-ce5aa4a72047.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Mon 13 May 2024 04:00:00 +0000
asID:                     13586
IP address blocks:        2602:fc23:100::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dd:03:38:f2:ca:ca:72:d5:25:cd:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : May 13 04:00:00 2024 GMT
        Subject: CN=cb19a74b-a114-4584-ac4a-e1224f9942e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:0a:39:d0:1d:52:37:e5:da:fa:ba:e1:b0:
                    56:cb:cf:87:45:85:e3:ca:e8:f0:8f:2e:78:ee:bb:
                    be:2f:a6:fb:62:b2:47:44:5e:c6:c6:3e:74:6e:03:
                    bd:96:16:35:d8:3d:c6:9d:24:f9:3d:42:a1:26:79:
                    fc:3d:d4:63:f2:56:dc:fd:a8:44:22:b1:2b:6c:d6:
                    47:63:16:1c:7f:29:73:23:ad:eb:8f:6f:50:42:a2:
                    60:b4:37:be:ff:82:19:96:fc:bd:6c:26:78:47:b0:
                    70:97:af:98:90:65:5b:d3:f8:24:92:47:24:4d:d2:
                    73:f3:eb:e7:b2:1b:22:d9:d3:c4:bb:b9:41:c7:81:
                    b1:ef:8e:a1:78:f1:44:9b:2f:a4:52:cb:49:41:d0:
                    58:60:e0:83:43:b9:9a:65:3a:98:13:b3:c2:92:92:
                    24:d9:42:0c:f2:4a:14:58:b4:33:18:dd:ce:98:14:
                    fb:49:e7:dc:64:da:4c:2f:d0:1d:62:00:13:26:ce:
                    fb:89:9f:ef:20:7f:07:13:ee:8a:cb:5c:3d:02:84:
                    5b:4e:bc:48:f6:63:ea:07:81:b7:1c:22:2d:78:32:
                    4b:01:e9:88:e2:7f:ba:9d:80:69:34:85:8b:ea:a6:
                    11:a6:37:2d:58:d4:89:c0:12:c8:48:69:bd:86:fd:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4B:45:35:E8:4B:70:66:12:A5:3C:B1:76:7B:5D:2B:9E:DF:DD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/d2009bb3-82bc-369d-aa34-ce5aa4a72047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:78:f6:45:9f:7d:f1:4f:73:86:d5:77:d3:8b:7c:54:45:84:
         85:7c:cb:68:0b:05:9a:61:49:d3:34:95:7b:10:6d:dc:93:14:
         38:28:43:09:21:54:d4:b3:27:a3:d2:db:d8:ee:2c:55:80:cb:
         5b:a9:7c:42:cf:f9:72:da:a7:e8:ca:40:45:64:0a:44:da:07:
         aa:93:cf:e9:b8:7f:75:43:b4:ee:b0:93:33:71:0e:27:4a:b3:
         56:cb:3f:89:8d:54:8b:9c:33:c6:2c:99:00:de:50:90:49:1a:
         80:20:7d:d7:94:38:3c:d6:84:d1:11:6e:bc:37:95:2a:c2:5f:
         b0:11:2a:47:a5:2b:eb:5c:ad:df:44:5a:5a:b5:d5:ef:4b:65:
         2e:63:e4:a4:14:4b:11:96:52:51:a1:87:4e:ce:ff:c3:8f:b9:
         07:77:ce:b9:39:a1:4d:e4:83:ba:ba:41:9d:65:d5:0d:73:1b:
         1c:6d:9a:da:69:bb:35:4b:f4:7a:5d:b6:d4:34:a8:72:bd:0a:
         77:f1:75:98:9e:f4:01:fa:64:49:54:aa:17:ba:10:8f:35:a7:
         b6:24:25:d9:2b:85:b3:dd:f9:50:06:02:05:ce:79:32:c2:17:
         0f:04:52:5f:e8:3c:07:a0:61:6c:2f:0a:eb:87:fc:2e:09:9c:
         9d:33:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----