Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8a0d0fd4-b2cd-32c3-897a-05597ce81b17.roa
File:                     8a0d0fd4-b2cd-32c3-897a-05597ce81b17.roa (raw, json)
Hash identifier:          JtywZF1yB+ucrAQnbeHSy/D6zd6kupEHmgHIHA5kJ1o=
Subject key identifier:   0E:99:80:F9:A8:AE:A7:93:73:80:A7:2D:77:CB:92:BF:A8:9F:9F:DB
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583FA55053048C33147775968780
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8a0d0fd4-b2cd-32c3-897a-05597ce81b17.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:50:53:04:8c:33:14:77:75:96:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=1a9dd01d-e2ff-4b66-8b13-fbce77f0db93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:96:0c:19:ea:09:e9:e1:0c:c3:95:38:38:
                    73:68:9f:35:21:26:70:fe:97:1e:1c:ea:a5:d6:be:
                    f6:21:0d:d9:e4:b4:b4:a0:df:51:16:39:80:d4:4e:
                    10:2b:2a:ec:f2:7e:27:0d:32:6d:90:61:8a:54:be:
                    88:f1:fa:28:fe:63:48:e5:75:42:97:ef:1d:f1:2b:
                    99:c5:59:22:b3:ce:36:8f:5c:1c:98:0e:57:be:48:
                    cf:00:b3:7f:cb:38:44:72:ce:3c:1f:b5:cd:b1:81:
                    63:48:3c:5b:c1:cc:3d:62:76:a8:d6:87:55:46:d0:
                    87:11:b1:53:4e:33:b4:5b:2f:41:f2:16:5d:53:7a:
                    f4:2a:61:35:2f:0b:96:1b:8b:a0:0b:db:90:98:e1:
                    2c:00:12:6e:80:fa:1e:7e:ed:74:42:68:57:ce:9f:
                    89:06:23:16:23:f1:b9:63:2b:09:95:b7:d7:bb:e8:
                    fa:4b:f4:93:bc:54:36:4d:db:f8:e3:53:82:9f:9d:
                    0b:d5:63:72:63:ae:99:0d:07:14:5e:6c:8a:fc:64:
                    82:19:80:1d:e0:0e:95:1f:12:9f:cc:41:d2:cd:46:
                    bf:4a:0f:47:3c:70:7e:f6:31:0e:c9:f3:05:34:29:
                    c8:1d:9d:43:3a:97:6f:c9:cc:10:df:3f:6f:82:25:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:99:80:F9:A8:AE:A7:93:73:80:A7:2D:77:CB:92:BF:A8:9F:9F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8a0d0fd4-b2cd-32c3-897a-05597ce81b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:77:57:c4:bc:16:66:0e:cb:aa:e1:fc:d7:90:0e:3f:85:dd:
         33:b4:c3:28:a8:02:c5:23:df:10:b2:3d:05:3f:67:31:5a:d2:
         cb:64:db:0b:6d:45:79:66:0a:1e:c8:fa:5f:a5:8e:ff:83:cd:
         07:35:7d:fb:62:e6:62:75:52:e9:b4:8f:c6:c2:70:7b:ae:d6:
         18:d5:91:c3:aa:87:c0:70:7f:41:f6:f5:cb:d0:c4:9c:7b:57:
         e3:67:21:ba:72:24:82:7f:cd:ea:23:e6:a5:13:6b:77:d6:1e:
         9d:51:29:21:4d:43:fd:16:04:84:7b:a7:95:ba:52:87:54:f0:
         99:e5:d3:1a:ab:77:8b:6d:b8:f0:2c:f6:c6:2a:0e:8c:40:35:
         76:40:e1:95:bc:e5:ea:96:41:76:01:15:91:58:4b:5e:02:e2:
         53:21:c6:2a:6a:47:27:4f:3b:3b:92:35:bf:73:6d:0b:ad:e5:
         94:a8:ab:75:3d:ae:46:21:ac:d5:ac:eb:88:8a:6e:3c:e0:95:
         f3:25:3e:1e:55:f8:f6:74:5f:2f:38:31:33:be:f4:42:9e:28:
         bd:af:2f:b3:a1:79:a2:93:62:54:cb:07:79:af:20:a0:b7:6e:
         d3:ee:41:bc:19:bc:b9:0b:41:b1:27:b0:5e:62:97:79:3f:57:
         38:87:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----