Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/f511e56c-345b-3bce-af42-19c6da3b476c.roa
File:                     f511e56c-345b-3bce-af42-19c6da3b476c.roa (raw, json)
Hash identifier:          Gz9Bt7Ezbrq51oHu9Qx+AqF/mkjYy+63mjd7H4DDiaE=
Subject key identifier:   2B:C2:1D:2C:2C:B9:56:D7:42:31:50:2D:F6:74:D8:B3:C4:7A:F4:D6
Certificate issuer:       /CN=872ab566-07c0-4d6b-ab98-45aed75350ff
Certificate serial:       010D0C9F4328583F56639BC2932C696825F77780
Authority key identifier: BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/f511e56c-345b-3bce-af42-19c6da3b476c.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:107:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:63:9b:c2:93:2c:69:68:25:f7:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=ba8bd0b5-6e80-4f55-972d-55ea75987732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:8a:2a:fb:d4:7f:56:60:34:20:7d:5d:74:
                    27:5e:0e:44:f2:b8:fb:2a:7e:d3:87:06:36:87:be:
                    45:d4:69:b8:9b:15:b0:05:1c:91:c5:92:55:3a:50:
                    80:d7:ee:a2:f6:e8:bc:b5:6d:0a:c9:15:9a:be:0e:
                    05:81:32:62:d3:c0:0d:73:ab:5c:7e:4a:22:02:13:
                    c0:0c:8a:48:d0:d8:25:8b:fd:e3:cf:ad:6d:c1:15:
                    d4:91:dc:26:8b:ac:89:88:f4:a1:d9:c4:68:f4:a9:
                    be:92:63:7c:6d:74:42:05:c5:13:71:08:62:1a:48:
                    56:7c:60:f1:01:82:7d:ea:26:65:cd:97:60:e2:09:
                    ec:5b:c0:2e:e6:cc:d2:8d:fd:14:d9:87:fe:bf:35:
                    d9:79:bc:98:ee:73:25:a5:29:26:0b:e2:6f:a1:0e:
                    1a:33:8e:ee:57:81:79:81:a8:3a:66:8b:d6:ce:df:
                    2a:ea:53:27:3e:7a:94:4a:bc:ad:e2:bc:d9:39:a5:
                    f2:7f:16:03:60:8e:1f:54:96:9f:49:de:bc:be:4d:
                    12:2c:81:7d:d3:29:95:24:9e:d9:34:b9:11:8c:95:
                    8b:cf:8a:2e:60:ce:b9:84:4d:9c:b8:12:1e:0c:fd:
                    e4:f1:ea:74:74:ec:2b:c9:9e:aa:fe:9d:49:36:9b:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:1D:2C:2C:B9:56:D7:42:31:50:2D:F6:74:D8:B3:C4:7A:F4:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/f511e56c-345b-3bce-af42-19c6da3b476c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.crl

            X509v3 Authority Key Identifier:
                keyid:BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:ce:9d:38:25:53:04:51:4f:f6:07:d0:0f:fa:ae:4e:1b:
         af:91:0f:7d:13:0e:45:e0:19:8c:f6:13:13:d9:6a:a1:3e:54:
         cb:45:42:f2:10:84:89:ef:97:b4:b1:bf:d8:bf:d7:36:45:79:
         c9:32:61:ff:d8:86:21:0e:a8:cd:93:25:fe:92:28:8a:6e:d5:
         14:6a:15:0b:33:81:c9:1b:2f:02:ce:a9:a5:82:f6:99:a3:19:
         a9:d0:7a:f5:9d:80:3c:b9:d2:55:1a:56:f3:dd:88:2d:b8:6a:
         ee:aa:7b:76:12:8a:40:f4:ff:5a:83:75:5f:ad:18:68:e8:88:
         27:81:b5:91:fb:85:17:de:75:ed:07:23:45:37:4a:d6:1b:7e:
         1e:e5:b8:08:07:d7:61:14:e5:82:07:db:c4:8d:91:e0:28:95:
         98:69:db:39:52:cf:e9:dd:ec:0f:d1:bc:f0:24:49:8c:ab:fb:
         ec:7c:6f:e8:ef:88:72:8f:5f:da:ac:77:73:cb:ec:0b:e9:9a:
         02:92:0b:69:20:30:d9:ae:c6:8e:3b:49:78:b6:af:36:e5:10:
         57:d8:e0:68:ee:ed:ec:c9:5c:3b:01:fa:ec:af:3e:6b:b0:5d:
         e7:a2:cd:e7:d4:da:6c:12:e7:1a:bd:2b:83:2d:ea:34:0d:6a:
         3c:e9:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----