Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/a7dc58f4-c320-38c7-8f35-8710018f5ef7.roa
File:                     a7dc58f4-c320-38c7-8f35-8710018f5ef7.roa (raw, json)
Hash identifier:          BAMLMOI37aftGfGWDI8uUGV5qj8IeE70CRHMImoToDs=
Subject key identifier:   FD:5D:59:4C:59:9E:32:45:00:E6:1B:39:19:EB:4A:C7:8F:CF:7E:AF
Certificate issuer:       /CN=d2b14de7-2a92-44db-ae48-2e67350a9344
Certificate serial:       010D0C9F432858422AFDB192E586248150E91180
Authority key identifier: 9C:D0:E0:55:DE:27:7B:3C:43:20:05:03:F6:74:FF:9D:8C:66:CE:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/a7dc58f4-c320-38c7-8f35-8710018f5ef7.roa
Signing time:             Sat 10 Jun 2023 01:00:17 +0000
ROA not before:           Sat 10 Jun 2023 01:00:17 +0000
ROA not after:            Fri 08 Sep 2023 01:00:17 +0000
asID:                     55002
IP address blocks:        2604:e180::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:fd:b1:92:e5:86:24:81:50:e9:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b14de7-2a92-44db-ae48-2e67350a9344
        Validity
            Not Before: Jun 10 01:00:17 2023 GMT
            Not After : Sep  8 01:00:17 2023 GMT
        Subject: CN=223d7805-d37a-4fa6-81f7-c60e0575bf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:ee:26:dc:16:49:f3:68:c3:cb:f8:dc:dc:
                    fb:c5:2c:10:10:ef:4a:5a:cc:22:e4:d4:43:17:ce:
                    1a:22:d8:55:d4:f5:59:25:b8:b8:a0:da:90:cc:4b:
                    c7:72:e3:52:d1:ed:be:cf:ea:df:04:e9:16:e0:c8:
                    ee:92:3e:f0:11:6e:85:3d:97:21:d6:03:97:a5:14:
                    14:20:b8:29:ad:63:86:3a:c4:9d:1f:d1:ad:e2:1e:
                    e6:98:60:e0:5f:82:9a:f1:39:ff:54:a7:b5:64:ec:
                    0d:93:5a:2d:f8:3e:b8:e2:47:47:2a:12:c4:8e:7b:
                    6d:6e:c6:9a:19:a8:97:66:e8:dd:9b:e7:c8:08:d8:
                    cb:1e:24:03:83:03:c5:df:53:4e:d7:56:70:7a:67:
                    fe:dd:fd:91:ff:3a:f3:6c:5b:93:48:9c:79:59:e9:
                    58:2a:1f:c2:62:c8:df:c1:a1:87:c0:29:f3:c0:26:
                    30:fc:14:13:8d:17:54:cd:54:a0:dc:24:39:bc:49:
                    93:48:73:ee:e4:20:6a:e2:fe:11:21:4b:9c:1e:39:
                    a0:62:57:54:bc:1f:e8:7c:59:96:0d:02:91:84:b8:
                    6c:b7:9d:77:73:f1:96:0b:3a:b6:59:08:f9:8a:b7:
                    8b:b5:0d:83:b3:01:55:b0:03:f7:9b:2f:cc:31:89:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:59:4C:59:9E:32:45:00:E6:1B:39:19:EB:4A:C7:8F:CF:7E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/a7dc58f4-c320-38c7-8f35-8710018f5ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344/d2b14de7-2a92-44db-ae48-2e67350a9344.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D0:E0:55:DE:27:7B:3C:43:20:05:03:F6:74:FF:9D:8C:66:CE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d2b14de7-2a92-44db-ae48-2e67350a9344.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e180::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:24:b6:4b:ec:e9:72:06:45:35:67:59:78:09:33:82:3e:f4:
         d6:69:76:ea:74:61:46:0d:c5:99:2f:b9:6c:29:61:33:02:13:
         f2:cd:cb:c7:4d:2c:87:f9:7a:ca:23:94:ea:b4:af:b7:9c:29:
         ca:60:16:70:85:7a:07:3d:7a:e6:a9:03:44:58:63:53:60:83:
         75:6a:3b:fe:b8:e5:c8:d7:c2:80:f9:ad:8a:ed:ff:d5:69:3c:
         6d:46:d0:79:4e:69:e1:1e:76:54:82:17:46:c4:d0:c1:02:c8:
         cc:ea:10:53:2e:03:db:1a:c9:db:7c:a3:de:31:ea:9c:e2:bd:
         37:e2:a2:c8:ba:e6:a5:cf:b8:33:2a:83:48:e9:ae:eb:65:7a:
         55:76:cd:2a:18:0c:44:ee:23:b9:fe:28:ae:3e:61:03:5c:e2:
         9b:0a:8c:be:ba:b8:c5:bb:a9:c8:7d:b4:94:a8:18:32:89:14:
         a1:39:d8:ad:4b:bf:c8:f3:44:12:53:f8:68:7f:52:39:d8:c8:
         80:7a:40:0c:03:9d:e4:88:b0:37:fd:5d:95:41:f5:51:d1:c4:
         51:5d:0f:3a:85:4b:bf:16:29:af:2d:c0:0f:3c:b2:92:db:4c:
         d3:35:ee:74:df:cb:76:21:d1:78:b8:8f:2b:59:15:09:07:3e:
         fa:90:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----