Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/c8996528-ce2f-3793-8413-9687a74c4987.roa
File:                     c8996528-ce2f-3793-8413-9687a74c4987.roa (raw, json)
Hash identifier:          wHmx/MXdqQzm/0Ove5Fcrzi/nURVSsTg+b7cB3A5aT8=
Subject key identifier:   3B:E9:5C:9F:8C:1C:E3:95:A9:F0:DC:D0:FB:DC:D4:48:71:40:60:85
Certificate issuer:       /CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
Certificate serial:       010D0C9F4328583D506FED7CCAC7BA6460246CA8
Authority key identifier: 8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/c8996528-ce2f-3793-8413-9687a74c4987.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Sun 21 Mar 2032 04:00:00 +0000
asID:                     60438
IP address blocks:        2602:fba1::/40 maxlen: 48
                          2602:fba1:100::/40 maxlen: 48
                          2602:fba1:200::/40 maxlen: 48
                          2602:fba1:a00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:50:6f:ed:7c:ca:c7:ba:64:60:24:6c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5054a223-c485-46b0-b02c-2fdc3bfe26bc
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2032 GMT
        Subject: CN=d04527e5-b8f7-4f24-973c-04d5735372f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:63:85:ff:01:22:9e:f1:f7:28:46:2d:0d:
                    2b:e1:29:93:7e:c2:16:29:51:d6:ae:b2:dd:25:4f:
                    13:71:72:51:fa:cc:4c:03:6f:74:74:ff:ca:4c:53:
                    ab:47:66:f5:82:1a:11:66:0d:52:ba:27:ad:0e:bf:
                    10:5f:79:5f:4e:ea:76:c8:73:a6:7f:44:c9:4c:70:
                    b8:3c:ff:77:48:11:89:aa:3d:9b:ef:9a:2d:ca:31:
                    e1:82:99:9d:58:38:f3:f0:90:ef:c2:6f:a4:56:39:
                    3e:e1:7b:bf:ce:9e:32:26:55:2e:fa:d4:ff:99:d9:
                    01:83:03:c8:e8:5b:ef:c4:3d:c4:b4:8a:ba:cc:20:
                    08:14:92:80:5b:25:20:87:8d:15:d9:f9:d8:4f:30:
                    59:fe:09:3f:4e:4a:97:c3:cf:98:01:24:6d:21:0c:
                    2a:bb:95:52:fc:63:51:f7:3c:87:de:2e:79:5d:e5:
                    d9:58:af:5c:67:5d:62:6e:2c:e3:33:41:f1:6f:78:
                    ba:d3:de:5b:3e:c2:46:cb:9a:1d:ba:39:61:44:4f:
                    0d:55:b6:ff:02:09:b3:38:32:2e:17:4c:5c:3c:1c:
                    82:17:ff:ae:77:c7:24:33:3a:df:f5:2f:61:dc:63:
                    f9:30:69:30:38:91:4d:75:6a:9d:f3:c1:26:b4:68:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E9:5C:9F:8C:1C:E3:95:A9:F0:DC:D0:FB:DC:D4:48:71:40:60:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/c8996528-ce2f-3793-8413-9687a74c4987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc/5054a223-c485-46b0-b02c-2fdc3bfe26bc.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F7:51:E2:E3:D2:43:13:56:DE:2E:5A:0B:B4:F8:A0:BA:4D:40:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5054a223-c485-46b0-b02c-2fdc3bfe26bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1::-2602:fba1:2ff:ffff:ffff:ffff:ffff:ffff
                  2602:fba1:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:8e:90:81:06:5b:48:05:4b:11:f1:91:a7:0b:18:41:df:
         70:55:49:48:cb:4c:25:fe:a8:e1:80:ec:e2:1c:82:f6:9f:1b:
         d9:85:b0:3b:49:91:ce:a3:4f:53:0a:ba:79:cf:96:f3:4a:3a:
         64:f2:c1:3b:60:81:0a:c6:bf:b9:10:70:09:72:bc:f0:92:49:
         29:7c:75:df:fd:f8:5e:1d:8b:87:1b:bd:d1:de:07:0b:80:c8:
         52:d8:3a:54:b5:ac:d7:5d:4b:de:12:5e:79:37:d3:15:c1:1a:
         75:57:28:c6:17:21:4b:ce:f9:95:d7:87:2f:d1:82:ce:ef:b0:
         3e:b7:a9:a4:ba:87:e0:3b:da:fd:ba:64:63:91:3c:79:58:5c:
         4c:ba:4d:9f:ef:cd:69:1f:f4:a4:af:fd:e6:28:23:00:3e:e3:
         ca:8d:51:6c:95:f6:c4:48:4b:b6:a5:b2:5d:a7:14:36:01:dc:
         11:44:f0:a5:21:97:92:c0:c3:3d:12:43:57:3d:57:5c:bc:83:
         09:51:8e:00:5f:b5:97:4c:38:e9:65:37:f0:2c:e4:a6:c6:54:
         ac:df:53:a6:69:36:65:14:e5:d2:d6:16:82:48:4f:b5:19:44:
         a0:d9:61:74:b0:56:a2:a5:ae:cf:cf:9f:d5:ff:ba:2e:bb:70:
         cb:62:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----