Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/0a340a86-05d9-37cb-99cf-d32c3bdb88e0.roa
File:                     0a340a86-05d9-37cb-99cf-d32c3bdb88e0.roa (raw, json)
Hash identifier:          SUxIM91QJJMTj/4spoqXOoI/Ou6rmpzumoRg24jodjc=
Subject key identifier:   77:DA:5C:41:BD:EB:47:D2:A1:67:77:55:D6:E4:05:BA:4B:73:8D:00
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CBE385C7DC362B28ADA576E00
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/0a340a86-05d9-37cb-99cf-d32c3bdb88e0.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:38:5c:7d:c3:62:b2:8a:da:57:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=32024ec0-c32c-4a1b-ad64-9796c77a6a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:d2:9e:db:6d:76:3e:28:56:28:71:2b:dd:
                    c0:c2:71:c9:1a:bb:77:63:3c:10:e0:82:6b:63:fa:
                    a3:03:0b:55:5d:29:ce:98:c4:ca:56:f9:c8:79:d8:
                    fe:71:90:83:fa:08:32:0d:c1:93:93:94:69:c0:7c:
                    2c:48:b0:96:e6:e4:cf:01:6e:d2:f7:b1:7c:9e:55:
                    95:09:dc:09:df:d2:93:e7:b9:4d:61:5c:f2:7b:25:
                    5a:b1:a6:46:f0:f8:ab:52:db:c0:aa:6e:f6:3d:bf:
                    74:9a:6e:35:4a:12:23:6b:ad:26:3c:a8:2b:cc:08:
                    2c:5f:6b:e9:c4:bd:2f:49:de:fe:54:23:1c:1c:5c:
                    24:14:d5:ef:3a:1f:3f:3e:b4:4a:57:fa:50:b2:c5:
                    fa:bd:a2:2d:6d:75:9b:5c:cc:17:30:25:d0:52:8d:
                    7a:d7:b2:c6:6d:a6:49:b5:08:96:b8:49:2a:8d:cf:
                    1d:c9:eb:c5:15:7b:64:39:d4:0e:54:1c:94:3a:f1:
                    f3:2f:d0:de:29:6a:f8:b4:ad:a7:34:e4:4e:ac:50:
                    24:96:37:12:34:e0:d1:4a:fe:9b:5b:ec:38:50:65:
                    c8:27:4c:3f:45:9d:51:4d:e1:44:c5:3c:52:fc:c9:
                    43:52:51:54:da:81:84:ab:c5:41:1e:16:25:63:ac:
                    c6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:5C:41:BD:EB:47:D2:A1:67:77:55:D6:E4:05:BA:4B:73:8D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/0a340a86-05d9-37cb-99cf-d32c3bdb88e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:08:8e:1d:c6:6a:5a:90:2f:cf:9b:d5:5f:01:53:f3:07:c6:
         dc:8a:34:6a:0c:30:ae:d3:b7:c4:44:11:8d:0c:e9:aa:59:6e:
         c1:07:dd:06:e0:79:b5:ba:74:ec:5b:54:a3:52:f5:58:23:47:
         19:e2:50:de:e0:2d:b4:c6:ea:22:bb:18:02:53:4b:1a:e5:b8:
         7c:31:24:54:87:c6:73:86:79:43:41:c6:e1:1e:37:02:f1:b8:
         e4:6e:52:4e:40:bd:95:93:00:6f:e3:64:8d:23:11:9a:d7:a6:
         9b:bf:cf:44:db:0a:9a:05:f1:47:44:6b:da:49:7a:b8:17:a4:
         f3:1b:1d:ca:d2:07:05:5b:37:a7:de:71:2b:85:5e:e9:21:b9:
         1c:80:a0:8b:24:e4:6d:f3:da:09:d0:d1:e3:ae:52:d8:9e:56:
         7c:93:68:43:a8:18:f8:98:af:e5:9b:2c:c1:24:61:17:95:ab:
         62:6e:5c:c1:25:95:66:f7:f6:21:3e:11:c0:18:30:f5:53:bb:
         38:e0:5f:ae:16:59:a9:bd:83:d2:65:1b:93:15:43:6b:c7:90:
         07:80:fe:7a:4e:ca:2b:07:8f:c7:58:9c:db:cc:87:4d:74:ca:
         5e:e2:4c:35:92:c7:67:72:a6:03:61:ce:39:8b:9f:b7:70:23:
         0a:4f:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----