Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08c8ead5-91bf-3d65-9f70-16182ad3d1ea.roa
File:                     08c8ead5-91bf-3d65-9f70-16182ad3d1ea.roa (raw, json)
Hash identifier:          inohzTO6Cc7VJHQi5TgmWEBbYnzog9+p6cegWQzwju8=
Subject key identifier:   68:D5:5B:7C:C6:CF:A2:F0:CF:90:B7:7D:C8:6B:E9:E4:74:65:DC:26
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583F7E15BC530FA5E2FCA619AA00
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08c8ead5-91bf-3d65-9f70-16182ad3d1ea.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:15:bc:53:0f:a5:e2:fc:a6:19:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=cfee78a1-64d0-43ab-881f-99b06132ba33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:e2:b0:59:e0:8c:f6:65:a6:dd:a8:65:b8:
                    8d:07:9f:aa:f5:ae:e9:21:22:e2:68:62:ba:b0:6f:
                    09:31:9c:75:72:29:dc:b5:da:70:91:1d:84:f6:66:
                    c4:40:72:c9:00:43:3b:52:d9:78:ef:fe:c8:20:9f:
                    0f:93:4d:92:71:d8:df:4e:af:bd:ad:d3:2c:ff:1b:
                    7f:29:1f:44:57:0b:49:b7:8f:20:50:69:cb:95:a5:
                    57:9f:d8:77:f4:ee:9a:db:cf:49:b9:14:77:9d:26:
                    be:f2:f4:3f:40:41:78:2b:06:29:cf:e9:8d:84:02:
                    4d:d1:b3:d2:75:1e:e4:ac:8d:a9:db:a9:ea:f9:a3:
                    aa:34:a9:41:11:f8:c7:7e:5e:96:82:05:b2:5f:af:
                    a8:00:b2:bc:87:87:04:15:d1:46:4c:27:95:a5:d9:
                    cf:5e:ae:f2:83:c7:09:9b:ce:9d:0f:49:95:28:eb:
                    7a:88:69:63:43:96:bf:c2:25:78:fd:39:2f:ff:e7:
                    9c:25:0d:1e:5c:db:89:2f:a3:93:8d:03:94:46:9f:
                    1b:a0:73:a8:fc:af:f1:29:6e:5f:fb:71:8e:4c:34:
                    f4:ba:42:ee:70:88:8b:fb:e0:25:45:57:82:c4:13:
                    26:14:36:14:98:bc:f9:35:c7:ab:9f:4a:5a:2a:79:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:5B:7C:C6:CF:A2:F0:CF:90:B7:7D:C8:6B:E9:E4:74:65:DC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/08c8ead5-91bf-3d65-9f70-16182ad3d1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:7b:5a:c0:f5:d2:59:a0:f3:99:23:56:40:45:c9:e4:d4:77:
         5a:ad:08:53:d5:fb:1c:b7:44:eb:a9:c5:68:20:d6:e7:27:26:
         22:2f:8b:c7:30:95:7d:a5:dd:90:1c:b7:bd:ec:5a:fe:e4:14:
         e8:81:d3:9f:74:d0:44:4f:48:1c:3e:8f:9c:93:ea:ba:29:49:
         fd:a3:e7:73:ad:b9:b9:1b:32:c0:fa:b2:14:6b:b8:55:ae:7c:
         e1:35:4a:31:65:55:78:ee:8f:c6:46:39:ff:09:c2:d3:a5:3d:
         3a:20:d9:22:b5:41:87:0b:d5:26:d2:dd:35:81:ed:d4:bc:55:
         a8:f1:d2:2e:76:fb:27:d2:ab:5a:c7:18:92:58:f4:30:fc:96:
         20:e7:5f:90:46:7a:19:86:0e:5d:23:0b:76:82:dd:bd:25:01:
         8b:eb:b6:9a:3a:78:e6:b7:c1:22:62:2f:40:49:8b:83:c7:11:
         05:d0:65:15:9a:71:a7:78:ee:02:55:31:31:d2:b7:e7:94:1d:
         7e:9b:2f:e5:fd:b8:6e:a7:fe:f1:e5:cd:29:76:4a:ca:f2:fb:
         99:15:63:1e:c2:4b:63:ca:7d:e4:db:28:ca:00:b6:43:43:c1:
         2d:e3:25:fd:dd:cd:b9:be:26:c9:7a:4c:eb:76:de:cf:57:0f:
         16:0b:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----