Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/eccff763-6215-368e-b5a9-d2ed1a23e70c.roa
File:                     eccff763-6215-368e-b5a9-d2ed1a23e70c.roa (raw, json)
Hash identifier:          H+/RpBUMsersBmorJTPvIZGGpNZZdMaUsh/D0aaPkYE=
Subject key identifier:   CE:D1:51:7B:AE:DD:FF:E2:4F:A4:F7:43:D6:7B:AF:ED:81:25:23:47
Certificate issuer:       /CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
Certificate serial:       010D0C9F4328576D51CC73C042CFC1706B31F488
Authority key identifier: 6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/eccff763-6215-368e-b5a9-d2ed1a23e70c.roa
Signing time:             Sat 22 Feb 2020 04:40:00 +0000
ROA not before:           Wed 17 Oct 2018 04:00:00 +0000
ROA not after:            Thu 26 May 2022 04:00:00 +0000
asID:                     395403
IP address blocks:        2620:4d:402a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:6b:31:f4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
        Validity
            Not Before: Oct 17 04:00:00 2018 GMT
            Not After : May 26 04:00:00 2022 GMT
        Subject: CN=b14acd44-bc3d-490e-af80-979fd826a63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:90:3e:26:3c:33:67:8b:77:fd:0b:68:1c:
                    0d:dc:24:4f:ff:db:4b:83:ea:c9:d4:2b:49:66:07:
                    c2:17:02:7d:43:74:d6:f7:b1:03:6c:46:3a:36:99:
                    5d:6f:0e:86:9f:a7:1c:9e:dc:b5:7a:2f:ee:4d:e4:
                    dc:65:50:84:99:d0:8f:fa:ef:db:0a:4c:b8:d3:09:
                    67:29:ca:bc:5c:c7:73:aa:c5:4e:c9:b6:18:d5:29:
                    a4:be:33:b2:d3:eb:9f:96:b9:94:bd:e5:b0:d5:bd:
                    ca:c6:63:aa:d0:37:0b:f2:8b:cc:93:21:b8:b2:b1:
                    df:f1:52:5f:a7:f9:3a:b6:bb:a1:48:90:29:bd:aa:
                    38:41:3c:fd:52:08:d3:32:a9:d4:1e:84:50:40:c1:
                    ad:b7:48:41:c0:ff:31:f2:e3:83:b9:ae:71:62:8a:
                    ac:af:8c:79:b7:77:fd:3a:c9:9e:4f:ca:b9:75:f9:
                    4f:ca:f2:8d:39:48:ea:dd:24:94:94:f8:88:87:e1:
                    83:88:65:4f:70:85:6d:5d:a7:d0:0a:b4:da:d6:44:
                    c8:fc:ba:29:d1:57:3e:01:75:ce:16:69:28:c4:59:
                    76:d3:93:7d:dd:c2:28:ff:ec:65:aa:29:b4:ff:c6:
                    9b:e1:2e:75:3b:9b:fb:68:51:a1:52:1c:38:90:6e:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D1:51:7B:AE:DD:FF:E2:4F:A4:F7:43:D6:7B:AF:ED:81:25:23:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/eccff763-6215-368e-b5a9-d2ed1a23e70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/5deff0d1-a587-45dd-97cb-fded4c7866bd.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:402a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7f:e8:be:37:ca:17:5d:28:9a:46:81:49:ea:3b:31:34:0c:
         38:c6:b7:c9:77:e1:f3:96:e6:71:df:f6:9c:48:0f:34:87:ea:
         81:49:70:c2:3e:9b:b8:04:c4:20:43:84:e3:a5:c7:d4:ab:e6:
         7a:43:a3:68:5f:db:34:f4:45:5b:2d:37:7c:32:79:cf:e9:cc:
         2c:3e:00:4d:a4:f9:ad:34:0f:61:c5:9b:72:40:38:4d:e3:9e:
         be:73:46:f1:4c:5c:6e:27:31:07:94:73:48:da:ec:06:29:9a:
         e2:fd:e8:e6:8d:0b:c0:cb:d6:78:37:a9:3e:8c:1e:9e:98:90:
         54:49:ac:3e:2e:89:c0:bc:18:67:82:d8:20:ef:d9:51:f8:0b:
         b6:08:42:a1:72:64:0d:c6:ba:e7:dd:e0:00:01:7f:39:f9:12:
         c8:f4:39:5b:d9:66:dc:cb:48:0c:99:ec:41:aa:b3:8a:97:8a:
         5a:91:9a:29:17:a6:b9:4a:d9:24:d9:e5:e7:6a:7a:ea:1c:20:
         46:83:f1:d1:6a:e9:78:be:15:4b:2b:7d:e9:06:1e:25:a3:a7:
         e9:bc:c0:7e:f0:d6:35:a6:1b:a8:41:c5:64:0b:4a:03:31:2e:
         8c:ee:8b:14:0a:dd:3c:e3:37:e3:7e:25:c6:b4:4e:76:f7:56:
         3f:0e:5a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----