Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418/b75cb439-8675-3d09-a429-9d516eb1c96f.roa
File:                     b75cb439-8675-3d09-a429-9d516eb1c96f.roa (raw, json)
Hash identifier:          DjNTM1XA3EM7l5IRhrWi+9FZuD58y5LF8gyAIENWIPo=
Subject key identifier:   CF:20:DD:81:9B:92:91:D4:AC:BE:C6:99:1C:54:DD:72:F2:C2:43:21
Certificate issuer:       /CN=0f51013a-8040-4ce8-a08d-36b1b0a87418
Certificate serial:       C423188771A71D6A16682937C471D80589830A
Authority key identifier: DD:B5:42:B1:FC:DE:A7:6D:37:A9:95:D4:A0:AC:60:45:CD:BA:C8:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418/b75cb439-8675-3d09-a429-9d516eb1c96f.roa
Signing time:             Tue 18 Sep 2012 14:34:17 +0000
ROA not before:           Tue 18 Sep 2012 04:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     11925
IP address blocks:        2620:7:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c4:23:18:87:71:a7:1d:6a:16:68:29:37:c4:71:d8:05:89:83:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f51013a-8040-4ce8-a08d-36b1b0a87418
        Validity
            Not Before: Sep 18 04:00:00 2012 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=9dd3b3ab-28d0-4b7d-8cea-446002d4ac8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:6d:28:10:f8:a0:71:a7:b0:d4:6d:04:a5:
                    16:84:64:c9:da:3c:82:32:78:0f:86:b3:9d:72:2a:
                    db:0f:9b:3d:51:18:d1:56:cf:d5:b2:74:f0:cf:34:
                    19:b8:4b:e4:83:f3:0e:64:fd:ee:6c:5e:8d:68:c8:
                    28:cc:bd:e9:a6:3a:a8:b7:70:3b:af:fc:2a:1e:fe:
                    6e:4a:ba:ce:d0:18:3f:16:c6:6b:c1:8c:ab:a3:c9:
                    57:a9:f0:1e:7f:23:3f:b5:a2:be:83:48:7b:c1:40:
                    b2:60:8c:8e:6e:01:d0:11:b0:ff:8a:35:83:70:23:
                    e5:b7:12:3b:5e:ca:3e:39:33:49:c9:35:bf:ef:62:
                    40:fd:23:42:50:4e:f8:36:34:e7:3d:8d:10:cb:97:
                    69:ec:dc:14:fe:d9:3d:6b:df:a6:46:b2:49:05:90:
                    a8:2d:03:60:1a:21:ee:90:e2:72:ee:df:fe:45:52:
                    8b:05:e3:27:a7:32:af:e3:e4:83:84:44:a9:85:31:
                    c7:5c:43:fd:24:a4:a8:4d:55:bc:c8:c9:8c:46:85:
                    64:52:c5:ac:58:64:3a:e3:7c:78:32:d6:6b:0b:30:
                    15:6e:41:f6:e8:50:64:04:1c:9c:39:57:b1:6e:1f:
                    8e:78:1d:6e:0b:7a:a6:be:ac:74:bc:ac:00:ee:51:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:DD:81:9B:92:91:D4:AC:BE:C6:99:1C:54:DD:72:F2:C2:43:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418/b75cb439-8675-3d09-a429-9d516eb1c96f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418/0f51013a-8040-4ce8-a08d-36b1b0a87418.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:42:B1:FC:DE:A7:6D:37:A9:95:D4:A0:AC:60:45:CD:BA:C8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f51013a-8040-4ce8-a08d-36b1b0a87418.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:02:08:16:15:23:00:85:03:cd:fd:7c:ed:73:ce:14:6d:
         95:af:95:76:de:52:c4:71:26:8b:d3:82:d1:c7:5a:ab:51:d9:
         51:b3:63:5d:78:7a:73:72:11:72:41:8d:ec:5b:5e:ae:1b:86:
         27:b7:65:da:b2:40:0b:6d:36:9a:19:4a:36:a5:6e:7e:98:6e:
         fe:5f:92:1c:29:b3:d6:9d:93:94:c6:f8:d8:a4:53:c6:b3:7b:
         ca:53:0b:99:cb:0a:63:d4:e4:94:3c:96:81:0c:8b:c6:0f:f9:
         63:25:6b:8a:e2:42:9c:e9:ee:d1:de:00:02:9f:96:de:7b:8c:
         61:f0:58:c8:55:00:ed:fd:d7:ae:f9:52:49:57:73:5b:52:8c:
         6d:10:8d:99:f6:47:20:26:d3:36:3f:b0:51:b6:07:6f:3f:2d:
         7b:c7:5c:98:7f:2d:25:c0:51:18:a6:e8:86:91:1c:ef:83:f2:
         11:f4:3a:96:c9:63:2c:59:65:11:8c:75:bd:86:d6:a2:61:08:
         db:96:bf:a2:12:c8:a8:50:fe:26:9e:e6:aa:19:76:76:57:cd:
         71:22:de:a5:9a:5b:4a:e7:03:a8:fa:42:d9:65:3c:cf:f0:36:
         d7:75:c0:1f:1c:a5:75:ef:19:fa:50:ef:69:00:e0:d1:1e:a8:
         25:cd:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----