Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/16827f54-847f-3dc6-b081-89a37df186fe.roa
File:                     16827f54-847f-3dc6-b081-89a37df186fe.roa (raw, json)
Hash identifier:          xElOG1GFtO9Rva9Pwy69wjBGDJp1zNnCHZI3pdU2iTw=
Subject key identifier:   0E:4D:21:93:12:A6:11:1E:F8:C6:39:B7:3B:4E:F8:03:59:2D:97:31
Certificate issuer:       /CN=7593e70d-1998-40d1-b884-f7f29a045c12
Certificate serial:       010D0C9F4328583CD20716C24460EDDF27CFE710
Authority key identifier: 48:FC:16:B9:09:ED:89:61:00:E3:2C:84:30:CA:DB:A8:D6:C7:83:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/16827f54-847f-3dc6-b081-89a37df186fe.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Wed 04 Feb 2032 05:00:00 +0000
asID:                     16509
IP address blocks:        2602:fbd0:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d2:07:16:c2:44:60:ed:df:27:cf:e7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7593e70d-1998-40d1-b884-f7f29a045c12
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2032 GMT
        Subject: CN=ec1d1f2c-74e3-4c16-8f4b-4ffc1c9353aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:27:f2:03:10:bb:bf:30:4c:e1:e7:97:c1:
                    0e:cb:a5:d4:2e:ce:48:85:d2:49:b5:ff:87:17:0c:
                    28:65:e5:0d:b4:77:bc:de:40:d0:84:9f:09:c8:6e:
                    20:42:db:79:ee:47:e3:60:8e:9c:56:82:f4:8a:df:
                    33:90:da:4e:79:b4:56:a6:1f:f0:13:a2:31:f3:75:
                    41:41:80:12:5c:5f:03:1e:db:95:0a:00:db:ca:12:
                    43:7e:5b:24:b7:9a:6d:17:60:09:29:47:fa:f7:eb:
                    6a:2e:80:ea:f1:9e:12:bf:ec:a1:9a:39:10:cf:67:
                    2c:5f:ab:c8:eb:be:57:1e:ac:f8:a8:d5:3d:cd:8c:
                    df:9c:c1:3d:be:0d:3b:1f:a4:14:b8:96:27:54:b8:
                    1d:12:b2:bf:8e:9f:5e:d6:ed:23:ce:6d:4b:33:61:
                    ae:e7:a7:7b:d4:01:cc:ec:7b:23:7e:c5:ef:d6:fe:
                    71:05:f0:ca:63:72:c7:62:58:c7:42:4f:41:e0:bb:
                    5b:e6:ab:93:a9:7f:c6:40:e4:87:86:2c:7f:e1:8f:
                    59:77:19:48:09:ee:57:0d:d3:17:ce:91:7c:24:6f:
                    2f:20:69:44:43:1d:b8:67:de:70:4c:3c:e8:1e:6b:
                    a6:91:43:42:96:17:2f:27:b4:c8:d5:72:86:1f:f8:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4D:21:93:12:A6:11:1E:F8:C6:39:B7:3B:4E:F8:03:59:2D:97:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/16827f54-847f-3dc6-b081-89a37df186fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/7593e70d-1998-40d1-b884-f7f29a045c12.crl

            X509v3 Authority Key Identifier:
                keyid:48:FC:16:B9:09:ED:89:61:00:E3:2C:84:30:CA:DB:A8:D6:C7:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd0:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:25:ef:0d:17:13:2d:85:3e:ae:6b:75:5c:8a:c8:a9:ba:
         bf:02:32:4c:32:ab:41:bd:0a:7c:62:35:41:03:c7:f8:e1:a6:
         53:0e:38:4f:a0:82:2c:6d:c7:07:81:e9:ba:92:2a:69:8b:75:
         38:32:f2:97:cc:82:d3:1c:24:4e:e7:67:69:2f:1f:fc:1a:af:
         8a:de:6e:56:b5:70:49:fd:7c:99:df:d4:0c:42:4d:9a:37:7c:
         ee:78:a8:a0:fd:50:de:41:72:b7:fa:0e:b0:9d:b1:6b:61:d6:
         a1:0f:41:2c:1a:d3:7a:60:af:39:be:76:55:07:2b:0b:26:d8:
         e6:3e:dd:51:85:68:00:e2:d3:80:7b:6f:21:ed:50:32:71:b3:
         b8:3d:98:a0:00:89:f1:a9:c6:fe:59:2c:d0:e0:8b:0a:2e:2d:
         3e:41:74:c7:12:36:51:56:e1:ea:88:3f:e9:fb:92:b6:db:71:
         7a:a5:15:87:7d:e1:b3:a5:79:0e:2a:3a:f2:b8:be:26:59:0b:
         d3:d1:4b:13:52:54:cf:4e:b3:d6:81:48:c6:ed:fc:21:28:54:
         be:67:aa:60:b4:7c:8b:94:c5:d3:b8:77:03:8a:8a:1e:f9:3e:
         d6:38:32:68:57:c2:4a:bf:45:ee:97:12:1f:d0:58:58:a9:50:
         09:0d:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----