Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/76695de5-993d-3839-8346-38f25a3b8be9.roa
File:                     76695de5-993d-3839-8346-38f25a3b8be9.roa (raw, json)
Hash identifier:          NOiu3T78/e/7ozOl2w4qOqzbAdqHnri5cs7ApcdJMRk=
Subject key identifier:   90:E5:0F:2E:74:99:1A:81:47:BF:DE:0D:E4:3D:C7:B5:34:E7:FC:86
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583CE55565AF6C977064C10361CC
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/76695de5-993d-3839-8346-38f25a3b8be9.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:55:65:af:6c:97:70:64:c1:03:61:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=246195d9-cc93-47d8-964b-cf40ee9429dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:82:a8:18:8a:b6:5b:84:8a:48:80:62:d8:
                    d8:51:d8:1e:0b:0e:21:a3:62:a1:b9:73:fb:43:82:
                    70:72:12:1c:10:ff:0a:70:9c:9f:ae:2d:17:a0:67:
                    f8:42:e0:ed:68:67:5c:36:6d:b2:01:ec:bb:34:87:
                    e8:e3:ff:9d:37:49:f3:a9:05:3d:22:d2:a4:e3:cc:
                    4a:92:53:07:9c:62:80:5d:44:b2:7e:cc:2b:5b:38:
                    a8:7b:1d:d9:46:a3:eb:65:f9:63:41:0f:a2:b3:69:
                    a6:40:9e:25:e4:5a:92:65:20:18:4c:62:ec:98:06:
                    c8:00:9f:6b:ef:1e:4a:b4:cc:5b:3d:89:17:72:12:
                    f2:c1:df:c0:1d:57:f6:b0:4e:31:6a:0b:96:f5:d6:
                    46:d3:47:35:d4:2d:c5:27:87:5d:39:0f:8c:40:52:
                    73:dd:15:ef:a7:f1:e9:5a:08:e0:5b:46:e0:02:d1:
                    36:04:5d:13:0f:d5:3a:7d:17:69:ef:99:76:16:51:
                    b9:19:b7:1d:d1:21:26:19:41:99:c3:22:d0:44:92:
                    c4:f6:06:93:51:4a:64:dc:da:8e:00:fb:4c:a3:d5:
                    02:e6:16:82:51:68:a2:96:3e:36:d4:d1:a2:d9:39:
                    9a:87:14:0a:ad:67:ad:8a:55:72:59:e8:8f:54:17:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:0F:2E:74:99:1A:81:47:BF:DE:0D:E4:3D:C7:B5:34:E7:FC:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/76695de5-993d-3839-8346-38f25a3b8be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6b:97:29:44:cd:42:7f:ac:4f:72:73:02:34:c9:e2:c4:bf:
         bc:c1:56:b1:d6:84:f6:59:5a:27:ce:41:89:d9:2d:00:8e:33:
         24:c6:10:05:17:61:66:5f:72:c4:2b:7d:0a:fa:13:06:57:bb:
         e1:2e:7d:70:f8:07:85:35:a1:d5:b2:2d:fa:86:8a:fb:55:f8:
         2c:d9:e8:6d:9d:36:4e:3f:09:c0:79:ac:f0:83:fb:68:e2:1a:
         9d:7e:f2:f8:9d:bd:e7:85:e7:02:b9:2c:62:d1:9f:2c:86:ba:
         16:cf:16:d0:16:b1:24:10:eb:cc:48:53:8a:61:87:9d:73:4b:
         27:8e:d8:1f:28:23:8b:68:bc:dd:8b:1a:e9:03:64:41:7a:ef:
         6a:e8:92:03:1d:67:3a:86:06:e2:5a:20:00:98:f3:1d:10:32:
         77:71:5a:e2:5e:3d:b4:04:e9:2b:3d:78:f8:11:78:18:e4:04:
         6f:19:c2:d3:cb:ca:53:81:c3:64:de:ff:2b:c8:6e:7a:d2:49:
         a5:f0:d7:59:9d:02:8a:fa:0d:c0:1a:37:f1:51:37:74:8c:71:
         29:ca:b5:41:8e:76:d6:30:12:27:c1:2a:bb:13:79:17:a5:d1:
         41:b5:26:59:cc:72:0c:76:8d:bf:d6:49:9c:a4:b0:e4:65:49:
         8b:27:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----