Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/695b0149-7a86-3ed7-abb9-78ec08466983.roa
File:                     695b0149-7a86-3ed7-abb9-78ec08466983.roa (raw, json)
Hash identifier:          DGJXe5f8ZCB8+Wp50Vpn1Zp02HvNskDa6KJSonnecdE=
Subject key identifier:   34:23:30:E4:13:7C:CD:6A:C5:4F:75:0E:90:90:94:73:8C:60:11:59
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583DD003272C9599FF4BEFB8A280
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/695b0149-7a86-3ed7-abb9-78ec08466983.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:03:27:2c:95:99:ff:4b:ef:b8:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=a300a5b4-9545-432c-92b6-9c919343475b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:f2:7d:75:57:29:70:c8:29:71:cd:65:1a:
                    64:02:a6:0b:c1:3f:be:96:d5:5f:8c:30:df:7b:e5:
                    7d:f9:71:de:61:be:03:13:04:2d:45:15:eb:62:aa:
                    2d:6b:98:4f:04:82:19:20:07:48:d8:0a:14:5c:cb:
                    05:2c:15:b8:9c:7a:f7:e0:db:d7:78:8c:87:a0:ef:
                    50:7a:a6:3b:ba:8d:43:61:be:0d:da:82:e6:a9:ee:
                    0c:c5:b1:f1:5e:8f:db:80:01:22:16:5d:05:9e:8d:
                    cf:fe:1f:1d:d5:9a:f0:db:cd:d2:b0:e8:b9:cb:1c:
                    4c:c9:20:c2:87:fb:09:54:c3:d3:a8:96:dc:f0:31:
                    c3:56:b9:b7:19:f0:58:41:81:12:8e:5d:68:ce:17:
                    d1:5b:8a:23:ac:b5:af:be:4f:98:2f:f1:c4:6e:7e:
                    ad:48:c1:48:52:7c:76:b0:17:ee:f1:b2:b5:ef:a1:
                    f3:bb:7a:0b:56:61:33:1c:d4:e0:6a:df:21:ee:98:
                    06:59:4a:5d:72:f8:3e:ed:a8:45:4a:8c:3c:85:9a:
                    bf:89:37:d2:bd:d3:40:4c:fd:91:9c:60:fa:69:ab:
                    f3:db:24:ad:fd:3d:6e:c4:98:37:d0:32:20:9d:26:
                    09:94:c5:7d:ae:09:50:c4:fb:96:68:57:70:fb:92:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:30:E4:13:7C:CD:6A:C5:4F:75:0E:90:90:94:73:8C:60:11:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/695b0149-7a86-3ed7-abb9-78ec08466983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:cb:cb:31:ec:bc:8c:eb:b7:53:37:a6:ea:a0:55:fc:c6:
         95:0d:61:86:cc:78:6a:36:aa:5c:38:d5:27:09:7d:8f:2e:64:
         77:4b:32:10:4d:0b:30:d4:6a:cd:75:83:11:90:c0:fc:cd:ac:
         99:ac:49:0f:5a:88:31:c2:0c:c5:6f:da:c4:ed:2c:98:99:c7:
         1e:d4:ae:af:8c:ce:41:ba:19:7e:8b:61:86:b3:51:8a:ff:d7:
         84:f2:04:0e:0d:55:54:df:30:46:53:39:21:03:2b:2b:23:a6:
         84:35:9b:49:c7:6c:36:d1:b1:34:4a:db:d9:ea:4e:87:19:30:
         de:c6:2d:3e:03:6a:e8:00:82:ff:04:46:58:d9:1b:f8:43:a6:
         da:7d:13:e2:fa:87:d7:70:96:9f:39:ab:66:93:04:1b:7c:6f:
         23:80:09:5a:7d:c9:e4:85:d4:f2:92:44:c8:ae:dd:71:17:ff:
         d8:42:f4:01:93:68:71:22:fd:3a:0b:34:d0:60:6b:01:30:72:
         98:24:b9:9b:23:88:33:33:c2:89:19:e5:cb:3a:6c:13:b9:3e:
         12:32:10:1c:64:79:6b:c5:22:ab:df:f8:2e:b1:4c:d7:79:c4:
         57:6d:35:8a:b6:16:33:f6:43:b1:a1:e1:a1:57:f3:f3:f9:de:
         c9:10:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----