Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/6666250a-0001-3332-b111-9f276a4f1810.roa
File:                     6666250a-0001-3332-b111-9f276a4f1810.roa (raw, json)
Hash identifier:          rswpaMXntpIV3Bg0cQZcyUzmCvIsdDRBeHL5W/hs5HU=
Subject key identifier:   04:F5:4C:D1:4C:A9:D2:0D:9B:2E:BB:40:A3:26:F7:75:5E:F4:9B:BE
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583DD002EDAE8D5729C92D4DE500
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/6666250a-0001-3332-b111-9f276a4f1810.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:02:ed:ae:8d:57:29:c9:2d:4d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=34aafb5d-6737-411b-be9b-a051e1a8386b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:71:0e:07:87:0d:a3:a7:27:a1:5e:2b:35:
                    ec:82:3a:ea:ae:ad:fb:45:5f:fc:1c:59:2d:03:49:
                    b7:21:cd:62:88:36:65:83:f6:94:87:60:61:c8:fd:
                    5d:22:e0:d4:6d:dd:91:bf:79:c9:56:63:87:c8:33:
                    b6:f1:d8:83:b0:a8:ad:6c:01:d1:9d:81:a7:11:63:
                    34:e3:72:0d:f7:f6:b3:fb:b5:9f:53:5c:70:00:fe:
                    36:0c:a6:0c:13:da:4e:4e:70:13:7f:1a:c8:00:6d:
                    6f:65:20:d9:b9:e5:e6:a9:20:d6:76:3b:01:da:03:
                    76:73:97:aa:c0:6b:57:f1:be:09:ca:ad:35:1f:94:
                    07:46:a7:8d:f6:15:cb:cf:f1:15:20:fc:bb:b0:e9:
                    76:86:4b:dc:f2:0a:dc:50:3a:87:77:06:c5:a5:3b:
                    16:87:2e:6d:2b:d1:84:88:53:dc:75:8c:ba:a9:63:
                    f5:bf:c0:4c:a9:4b:09:4e:1c:b4:27:f6:c4:9e:f0:
                    0f:12:e6:1c:9a:46:aa:12:c4:88:43:a8:8b:9e:8f:
                    6a:28:3e:cd:52:41:80:3e:37:b9:91:b3:62:19:2c:
                    67:b3:98:0c:2e:90:13:bf:8b:75:9c:c2:04:25:00:
                    00:c3:03:f3:bc:12:46:ac:c8:83:e8:27:d3:b3:1c:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:4C:D1:4C:A9:D2:0D:9B:2E:BB:40:A3:26:F7:75:5E:F4:9B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/6666250a-0001-3332-b111-9f276a4f1810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:df:b3:3e:8f:64:d0:85:37:41:35:9a:2a:c8:94:6b:04:
         9d:8e:6e:3e:72:b1:1c:84:3b:f3:c4:ae:c7:c9:35:1c:33:d3:
         50:91:76:6f:02:f3:35:5a:a1:01:a5:61:8f:76:39:1d:bf:f8:
         2d:bd:90:30:44:33:5a:e9:a7:f2:68:d2:80:fe:07:f4:af:ae:
         88:cc:19:64:c3:67:2e:8c:46:d8:da:a5:39:60:a7:f8:2a:cd:
         0b:00:50:83:c0:c0:49:e6:56:a2:cb:77:0e:14:d6:f5:e4:2f:
         f8:4a:4b:30:0b:b8:75:99:26:29:72:eb:eb:19:23:28:2a:a2:
         ab:25:38:31:3d:a5:4a:25:26:7a:d8:bd:5c:39:e5:20:e7:df:
         38:9e:db:84:38:df:41:ea:0e:c3:36:cb:c1:d5:a4:ec:1d:7c:
         33:19:2a:3d:ee:40:e0:3c:8d:55:e2:38:75:8c:3d:a1:f5:70:
         c2:02:d9:22:11:5e:d6:51:7e:d1:65:6c:23:ff:c9:78:fd:fc:
         b8:bc:a0:60:1a:f6:f9:38:25:aa:37:2e:4d:dd:a5:8b:bb:ca:
         03:3f:86:dc:4e:a7:95:1b:7e:24:7b:b7:2c:16:74:f4:c6:2a:
         a9:fb:36:22:a6:63:83:5a:05:ad:01:30:51:33:b7:02:24:52:
         f1:7b:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----