Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/69f2b728-5434-3186-872f-e6161991047f.roa
File:                     69f2b728-5434-3186-872f-e6161991047f.roa (raw, json)
Hash identifier:          Xgd4juhMk5GzUWWBmIgkA+HA+QGXGdT/ssZz4iiJSak=
Subject key identifier:   10:7F:DC:F6:65:A4:C6:76:79:13:9F:30:40:CE:CD:19:28:7B:93:33
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583D81C8EC286B81CB400EF7CE40
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/69f2b728-5434-3186-872f-e6161991047f.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:c8:ec:28:6b:81:cb:40:0e:f7:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=00e7ff2d-099b-4ae6-99ec-136d99749944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:4d:1f:49:67:71:13:bf:fc:94:15:a3:77:
                    fd:0f:09:0b:fd:97:00:9f:ba:cb:1d:51:ef:ea:08:
                    5a:d8:26:9a:8a:ea:f2:62:d7:ea:c8:5b:ab:6b:42:
                    07:38:e4:d3:e2:4c:06:19:73:cf:10:9a:3a:8d:63:
                    bc:ed:26:ff:6d:a3:68:fe:27:a1:02:f0:f5:c8:29:
                    ea:f5:5b:76:bf:5f:d8:32:fb:96:c9:51:a5:90:8b:
                    91:83:72:ff:8f:18:54:f3:3a:25:67:57:56:2c:54:
                    c8:f2:13:83:c3:78:0b:8c:ad:50:28:16:4f:c8:e8:
                    fd:53:85:6b:a0:ae:66:52:30:16:d1:c6:a3:f3:c3:
                    d7:f5:e8:3e:31:3e:c4:64:9b:ca:85:f9:83:91:69:
                    34:f5:11:f2:23:6d:93:a0:d9:09:c0:e7:a1:9e:52:
                    c6:10:c9:2f:80:9b:5f:70:9c:2a:b3:ed:b0:75:4f:
                    f4:a8:e2:6e:d1:eb:ec:b3:d1:f2:17:0b:71:a5:92:
                    7d:41:35:7b:19:b7:74:66:52:c8:85:bc:95:cd:70:
                    13:fc:a8:98:9b:35:f3:44:0a:e1:3c:24:ba:f0:94:
                    a8:cb:a5:a1:21:69:ad:9e:74:2b:0b:d8:86:2a:3c:
                    a9:89:e4:9a:fa:55:4f:e6:da:76:e0:49:01:fe:0d:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:DC:F6:65:A4:C6:76:79:13:9F:30:40:CE:CD:19:28:7B:93:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/69f2b728-5434-3186-872f-e6161991047f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:de:bc:dc:2a:af:8b:ec:8e:40:9c:76:93:fa:91:26:20:6b:
         ee:4d:e8:b9:c4:ed:6b:29:28:11:ce:f1:d4:96:49:56:75:45:
         34:0f:22:58:38:1d:fc:af:61:a8:f9:27:57:42:f3:58:5c:a8:
         f5:b0:9c:99:9b:45:a1:55:c2:5b:3d:4b:cc:62:40:c2:03:0b:
         78:a1:96:ae:a7:c2:08:2c:f8:dd:7f:c5:b9:3b:f7:43:20:41:
         47:2c:9b:09:69:e4:96:85:ed:4e:56:a1:0f:65:58:92:ee:1f:
         29:ba:aa:0b:d1:63:d5:62:e3:ce:36:5b:01:8a:b2:2a:9e:88:
         a2:0b:89:ea:0c:95:97:f9:2f:35:53:9a:fb:dd:e0:74:89:a8:
         09:d5:8d:e9:96:00:74:99:30:61:7d:80:51:3b:12:de:20:69:
         51:10:94:5c:ba:5e:07:9d:ae:d1:14:2c:61:ae:22:e1:02:97:
         c7:a4:47:13:9f:13:09:c2:01:ba:22:d6:c0:14:bc:6b:63:3d:
         a1:98:fe:19:99:d3:98:a2:dd:32:d5:1d:30:1c:a0:cc:7d:e6:
         e0:91:9d:99:a5:0b:19:9b:fd:f8:7e:05:02:e4:3d:82:38:cb:
         3c:a4:71:53:1d:d3:ba:03:fa:7d:4d:52:60:c8:9e:e2:10:f3:
         30:51:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----