Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5c1536f1-e95d-3daa-a0f5-e5ceea1a23de.roa
File:                     5c1536f1-e95d-3daa-a0f5-e5ceea1a23de.roa (raw, json)
Hash identifier:          WgkWH6KhXOsKAlzu53+c/jJv8YCa6TxqE/9PhZhxVvs=
Subject key identifier:   A5:ED:B7:6D:EB:C9:09:CF:67:83:83:36:40:AA:E7:0D:4C:4F:B4:53
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CBE3862DA3AB2B81FDA40F000
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5c1536f1-e95d-3daa-a0f5-e5ceea1a23de.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:be:38:62:da:3a:b2:b8:1f:da:40:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=a14cb9b0-0023-4f93-8dab-f8a2382f58a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:f5:91:1b:26:57:66:7c:72:2d:3c:41:82:
                    eb:91:63:8d:0f:38:41:78:a8:bc:ff:bb:8a:93:e9:
                    c0:ba:9b:20:6b:03:31:fa:f3:31:bb:13:d8:f8:91:
                    9d:31:43:5a:0d:39:2e:60:6d:a4:a8:a8:f4:9f:9a:
                    30:63:8c:05:22:98:90:30:2c:e5:26:54:ce:75:0d:
                    07:da:e2:35:49:a8:62:af:6a:a6:86:f7:59:af:06:
                    0b:87:75:03:e9:27:5f:ac:f0:bc:f4:97:9a:1b:25:
                    49:87:5c:a9:51:dc:95:5f:dc:11:c3:42:26:e2:0a:
                    6f:6e:e0:99:de:b0:77:5f:7d:e9:aa:13:5f:c8:8e:
                    ea:12:d4:be:38:c2:98:71:48:dd:95:28:4b:17:96:
                    3c:62:22:71:26:78:e2:02:f4:81:0d:c8:a7:31:97:
                    43:da:06:73:c6:20:fa:2f:05:92:2f:48:5f:46:91:
                    b4:15:df:58:50:f5:29:81:7b:ef:46:6d:a3:43:1b:
                    20:c2:6a:a3:ed:ab:ac:5d:61:00:40:f6:51:1d:5d:
                    98:72:c3:66:a7:98:e9:53:47:1a:70:35:23:a7:85:
                    17:dc:6f:5c:4b:ee:4b:be:e0:a8:f2:c5:ab:9b:67:
                    76:90:64:7f:a5:f9:ca:7b:3d:ae:e4:dc:f3:a1:93:
                    f7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:B7:6D:EB:C9:09:CF:67:83:83:36:40:AA:E7:0D:4C:4F:B4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/5c1536f1-e95d-3daa-a0f5-e5ceea1a23de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:c4:53:25:86:b6:7c:9d:97:97:fb:63:64:f1:f9:20:0a:a9:
         26:ed:41:ab:f6:25:56:a3:38:fe:25:cb:aa:dd:39:0c:c7:9d:
         e4:4c:5b:98:20:a5:c0:32:5a:5a:60:2b:16:d1:c2:61:2a:d2:
         be:95:1f:92:bc:63:d4:fa:6e:14:be:2c:5b:4c:aa:52:eb:49:
         c2:0e:b7:9b:e5:4d:cb:e8:4e:7f:f7:60:bf:1a:6e:76:d3:da:
         a9:aa:3c:aa:72:23:44:f4:02:3a:f9:46:be:b1:83:d8:c9:83:
         9f:9d:41:37:bf:4b:70:17:19:9c:f9:6e:9b:54:c0:ad:5c:74:
         c5:89:ec:f6:60:07:cf:99:67:24:69:bb:26:10:fd:b0:f2:a5:
         b9:7e:e6:95:e3:ce:86:2e:8f:7a:e7:bd:fe:51:15:2c:24:af:
         25:71:29:22:67:2b:f5:b4:42:ab:1a:f1:71:da:4c:9f:bc:bc:
         53:f7:0e:71:ac:bc:c6:e5:e5:9d:ea:51:74:43:02:70:fa:80:
         bb:a2:84:80:33:4a:5b:e8:66:e3:3e:66:b0:9a:3d:cc:f9:82:
         f4:d6:a7:62:51:0f:51:b9:a6:d5:17:2d:c3:22:95:61:80:e9:
         d3:78:60:7b:10:22:67:14:d6:3a:33:e0:63:67:e2:a1:af:a4:
         c1:36:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----