Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/59de99e6-b0c0-32ae-a5e8-eb99344c43cf.roa
File:                     59de99e6-b0c0-32ae-a5e8-eb99344c43cf.roa (raw, json)
Hash identifier:          IyB76Xe5wLRdLZIbqzD/stbrsVKMibjJrLx8FjFJGkI=
Subject key identifier:   5C:64:56:1A:8C:56:12:D4:62:5A:CD:54:7F:DC:6E:D5:45:C6:20:D5
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583D338F84596CF540189CA66400
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/59de99e6-b0c0-32ae-a5e8-eb99344c43cf.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:8f:84:59:6c:f5:40:18:9c:a6:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=5fee2fc6-9451-4792-96e7-1721e3036acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:90:95:11:d0:2f:3e:30:fe:68:d7:c8:48:
                    20:99:34:e9:48:58:a1:c0:bc:c0:1e:51:b6:e8:49:
                    9f:e6:28:87:6b:e2:c3:12:99:7e:81:6a:3d:f9:aa:
                    6a:8b:29:4f:39:96:bb:f4:cf:66:98:f2:f3:7a:96:
                    69:46:55:9b:4e:18:1c:4a:92:a5:98:ce:a0:f8:ee:
                    10:41:06:b8:53:23:69:af:ed:da:bf:2e:71:ba:04:
                    2e:37:23:32:9b:e0:f8:9d:b0:8f:32:88:e2:75:3b:
                    a2:86:2b:e0:e1:c2:d9:a2:cd:94:93:aa:a2:57:38:
                    2b:ff:42:93:f3:31:4a:44:aa:1c:f9:03:ff:3d:2c:
                    49:9b:7a:1b:c7:de:a1:50:af:f5:c3:86:e5:9d:5c:
                    9e:97:16:d4:46:b4:2f:57:29:85:f9:49:09:ac:21:
                    86:29:40:2e:3a:94:c9:86:61:10:2f:a5:5b:92:67:
                    13:b2:2a:e3:48:3f:0e:dd:20:8f:a3:4b:07:70:de:
                    f7:4a:ce:77:fb:8b:d6:db:a6:79:97:40:44:1f:b3:
                    4b:ca:a5:67:56:3a:6a:fe:59:74:6b:48:dd:94:7c:
                    1a:4d:17:18:9b:de:bb:fa:3f:fb:8c:4e:91:60:93:
                    eb:23:c6:25:18:cd:87:bf:99:9b:f4:9a:9a:ea:34:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:56:1A:8C:56:12:D4:62:5A:CD:54:7F:DC:6E:D5:45:C6:20:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/59de99e6-b0c0-32ae-a5e8-eb99344c43cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:88:cb:75:e9:da:c5:55:65:ed:2d:f4:2f:39:7f:77:76:be:
         60:85:02:12:23:c4:f1:d9:c2:32:2e:a8:9c:82:c9:bc:6e:59:
         aa:e9:11:1f:09:e4:9d:5d:10:59:7a:dc:50:ec:1b:95:36:f2:
         55:7c:40:af:55:bb:60:e3:29:62:1a:dc:42:49:02:a3:59:dd:
         5d:f2:02:c0:82:72:b2:0b:0a:cb:7d:10:99:73:40:2c:5f:d7:
         56:3d:65:d0:c3:1f:c6:55:80:76:5f:40:2c:77:1b:f6:19:4d:
         b0:fa:3b:08:be:c3:ab:cd:53:9e:f1:27:42:61:db:19:6c:40:
         d8:6e:4a:5f:29:b7:74:7f:a9:1d:ca:a7:aa:df:ce:a8:6a:71:
         9a:96:ee:a7:04:7d:33:8d:ac:3e:ba:19:bc:62:3a:94:dd:b9:
         66:7a:f2:bf:4a:4f:15:f2:cb:f2:44:c9:b8:65:47:1b:0d:90:
         9e:3b:85:29:6e:e3:89:e3:0b:f1:dc:ea:76:fb:dc:f1:56:94:
         bb:d6:fc:90:76:39:0c:ef:49:1d:79:6b:18:c2:df:06:a9:06:
         75:e0:03:05:be:ce:8d:e7:e5:ec:d3:8f:24:5c:db:96:57:c8:
         62:e5:c3:86:61:4b:9a:5d:0a:aa:90:ca:50:c5:77:2c:7d:4c:
         6f:39:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----