Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/ed0100c1-9085-3394-8abf-704f516220f0.roa
File:                     ed0100c1-9085-3394-8abf-704f516220f0.roa (raw, json)
Hash identifier:          hTgVfvy/yyS3+hAuqGMBEif72yQlTjBS3oZFmhsxV2g=
Subject key identifier:   A3:2D:AF:CC:A0:D4:74:BB:E0:A1:F3:AC:37:B4:9D:38:07:B7:4F:0A
Certificate issuer:       /CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
Certificate serial:       010D0C9F4328583D76AECB07C524FE0C50F4FD80
Authority key identifier: A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/ed0100c1-9085-3394-8abf-704f516220f0.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 07 Jul 2024 04:00:00 +0000
asID:                     397165
IP address blocks:        2603:f000::/20 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:ae:cb:07:c5:24:fe:0c:50:f4:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f0e919-8ed6-4b5f-bc05-1b833ab626da
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Jul  7 04:00:00 2024 GMT
        Subject: CN=75d8bc08-4d4e-4914-bd6b-a46b0d141fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:14:a3:21:26:31:ec:9e:8b:1c:7a:60:ba:
                    a8:b2:98:37:ae:d0:d7:5e:12:85:82:27:ec:06:07:
                    0a:5f:50:b7:ed:b7:ac:78:23:07:92:ca:6b:43:14:
                    b0:29:f7:c8:d5:b9:bb:47:97:95:3e:c0:98:b6:ef:
                    94:ce:81:ab:0b:9e:54:95:9b:8c:f8:7e:fc:c5:d4:
                    13:60:56:a2:6c:00:35:b0:d2:b7:46:11:60:a1:5a:
                    cc:cf:92:d1:63:3f:28:24:f6:0a:17:c0:6a:41:31:
                    b0:59:ea:ad:9a:c4:8c:b2:2a:ac:6f:db:a1:56:68:
                    99:09:51:15:0a:fd:2f:5e:63:5e:fa:1c:19:18:80:
                    d4:96:e4:5c:58:14:dd:c9:05:0c:ab:2c:8c:2b:e6:
                    ba:ea:9a:81:b1:3f:e1:25:22:2e:40:30:d2:92:e7:
                    34:45:5a:27:1f:48:c9:d8:91:47:27:f0:a1:ac:76:
                    87:67:45:cf:bb:f8:a3:27:ae:1c:18:a7:3d:11:56:
                    9b:7a:f7:73:7a:43:a2:3f:19:9d:cd:57:a3:3e:af:
                    69:78:1b:82:26:32:ff:f9:78:1c:7a:16:e4:fe:3f:
                    79:ff:ec:00:d2:aa:63:e6:dc:19:7f:b3:38:85:b9:
                    be:b2:cd:8e:0d:25:32:13:68:bf:f3:b5:86:6a:7d:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:AF:CC:A0:D4:74:BB:E0:A1:F3:AC:37:B4:9D:38:07:B7:4F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/ed0100c1-9085-3394-8abf-704f516220f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da/80f0e919-8ed6-4b5f-bc05-1b833ab626da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:98:3F:AE:FA:FE:7F:00:28:35:A9:4C:B2:34:5D:C9:C2:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80f0e919-8ed6-4b5f-bc05-1b833ab626da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:f000::/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:13:bc:74:cf:3e:b0:fa:f4:5b:d6:4e:33:fd:ff:68:1e:a4:
         29:4a:dc:4e:cf:31:32:55:ba:11:b5:49:53:99:7c:48:4d:75:
         b2:62:4c:d5:f2:88:18:63:10:4b:33:c6:29:ce:54:4c:e8:e9:
         9f:7b:5e:2a:2f:40:42:cd:01:e4:c3:59:77:14:62:03:2a:f1:
         0d:ae:30:ef:2b:99:25:80:9e:74:c4:53:60:0a:3c:48:b7:b4:
         52:df:7a:88:7a:ea:21:0d:b5:67:c5:d7:db:81:ad:55:65:7b:
         1b:5f:62:6c:f2:5f:72:de:42:41:19:88:fe:58:34:ae:81:b7:
         56:b1:a4:f7:8a:7d:a9:c3:55:0d:29:dd:31:de:28:48:7c:3c:
         c1:98:98:f4:0f:e2:a4:74:0d:b5:9a:a6:ed:1a:12:6a:e1:79:
         e8:51:bf:29:2f:39:d3:42:5c:ea:f2:19:83:35:61:74:3a:bf:
         1e:e2:ee:91:07:05:65:3f:40:61:10:72:5f:5b:13:a4:5f:b4:
         35:e6:a2:cf:10:1c:1a:ee:1c:bf:17:68:0e:3e:fb:0f:e1:bb:
         d7:68:33:eb:1a:70:15:8c:54:d8:32:7f:f1:1b:34:43:25:db:
         1a:b1:9f:3c:b8:12:a2:2a:4a:a5:5b:7d:cc:46:49:e1:9c:85:
         88:9c:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----