Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/173e4ce9-40d7-3bee-a22f-7331b4e58362.roa
File:                     173e4ce9-40d7-3bee-a22f-7331b4e58362.roa (raw, json)
Hash identifier:          0BUDtcQGCpB42WozMu0aC2e+OrACCnuNHJhene9QAyc=
Subject key identifier:   03:43:AD:C8:59:5F:DE:95:A9:F7:E4:28:53:BC:78:58:A8:91:3A:69
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583C971AFB2B689B1A687CEA01C0
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/173e4ce9-40d7-3bee-a22f-7331b4e58362.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:1a:fb:2b:68:9b:1a:68:7c:ea:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=7a5508b6-666c-4c34-9eb3-5f1dda72f50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:75:da:8f:c8:99:dd:40:25:4d:7b:79:19:
                    8e:43:ac:d9:d6:2f:c3:4b:46:a7:9b:7e:e3:d2:85:
                    f2:b9:89:1e:44:e7:f7:63:84:d7:42:52:4f:18:d1:
                    79:2a:d1:c8:6b:1f:32:95:7d:ed:70:b3:6f:f0:ca:
                    67:08:cb:47:b9:48:30:10:14:22:34:15:bb:b8:04:
                    b8:cf:f3:09:21:2c:d6:2c:ce:a5:14:60:84:60:c6:
                    2f:2f:50:ae:32:24:7d:4d:e8:f9:90:27:a7:2c:ee:
                    e1:d3:a6:fa:cf:d2:98:02:61:20:25:a5:a3:77:67:
                    a4:8a:8f:72:a1:f4:5f:e4:24:49:3e:7c:16:43:d7:
                    9b:51:65:af:c0:56:f8:1c:04:2c:8f:3e:80:a1:a5:
                    24:f1:02:6d:88:8a:0f:fe:f5:0b:62:a8:d0:06:2d:
                    58:96:86:82:8b:a0:82:46:62:02:03:c9:e8:b2:91:
                    96:ea:a1:47:1d:c9:30:6a:3c:e9:13:e3:c1:9d:b8:
                    c8:1b:01:f5:e1:4f:82:70:2c:e4:92:2b:59:52:42:
                    d9:18:30:0f:bd:b8:1b:80:10:52:e4:c9:2f:9d:89:
                    2f:8f:4b:03:33:62:c0:b5:15:1c:42:9b:ce:b4:7c:
                    23:5c:37:2f:f4:c7:f5:26:9c:ec:5f:78:c7:f0:3e:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:43:AD:C8:59:5F:DE:95:A9:F7:E4:28:53:BC:78:58:A8:91:3A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/173e4ce9-40d7-3bee-a22f-7331b4e58362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:db:0c:75:d1:67:ff:77:86:a9:f7:4f:b9:4b:93:9a:05:
         e9:22:84:fe:53:4c:8c:89:6c:f3:b0:9f:8d:6f:c8:33:10:8e:
         f7:9c:ea:d5:e5:80:ad:1c:bb:11:f3:70:ac:d2:d4:b1:d8:20:
         fc:a3:51:64:73:71:aa:9e:4e:22:30:48:fa:09:70:41:17:60:
         bf:57:a4:e7:bd:8c:c1:1a:86:2a:52:1b:26:5e:ed:29:ca:a6:
         e4:25:2e:a7:81:88:8c:c6:5a:95:38:1e:2d:44:7c:f4:b1:d9:
         7f:12:3d:66:28:cb:73:65:77:05:a7:73:a5:cb:56:56:06:c7:
         87:19:d3:e0:67:5e:71:d6:c8:98:85:94:84:4b:63:54:88:9a:
         80:13:1d:57:c2:8e:f3:a9:e0:f7:9f:ce:92:38:a8:50:0b:ca:
         c8:bd:f5:2c:a1:4d:df:1e:56:8b:e2:cf:78:ca:25:a0:ea:47:
         48:7c:9a:5e:41:b9:8f:02:1d:44:65:01:45:fb:b7:1f:92:14:
         92:9e:83:32:29:4b:db:f1:ef:29:9c:a8:76:a1:cc:a5:64:75:
         07:29:e9:61:2b:ed:d5:c5:bd:b7:e6:b2:fa:98:4a:d7:81:c3:
         c5:f6:ff:fe:9f:8a:29:73:da:af:2b:ec:80:96:b2:b2:05:1d:
         75:a4:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----