Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/b3ed4753-2636-309e-8398-20567fbd992b.roa
File:                     b3ed4753-2636-309e-8398-20567fbd992b.roa (raw, json)
Hash identifier:          d75aTfZKdmHjhHblmZl9wxLhzURIvXGc8yi7fBYt+ZU=
Subject key identifier:   04:58:7F:24:D9:D9:17:1F:B8:97:77:40:F6:BC:0A:D8:46:4C:50:CA
Certificate issuer:       /CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
Certificate serial:       010D0C9F4328583FA52B5804BCAB52609260DBC0
Authority key identifier: 6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/b3ed4753-2636-309e-8398-20567fbd992b.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2620:108:7000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:2b:58:04:bc:ab:52:60:92:60:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0ee3bc-c4ca-4a36-99eb-140734b14a02
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=42d5e2fb-5526-476a-91e8-c5147f638031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:78:d4:2d:78:f8:26:72:fc:a5:20:a7:63:
                    e0:1e:1f:c4:d8:53:c2:14:e9:fb:ee:93:10:0c:da:
                    ab:c6:eb:d1:b6:43:b2:3c:8f:44:4b:e9:d4:0b:09:
                    f5:c5:cb:1b:fe:46:86:7b:bf:ae:db:ea:28:d7:24:
                    35:4c:aa:d2:34:94:6a:95:f6:fb:d6:ce:b8:82:39:
                    58:84:c7:d5:f8:8e:be:88:6d:65:26:c0:e1:7a:1f:
                    da:a9:76:f5:67:a0:cd:f3:7b:4b:58:c9:44:6c:06:
                    32:57:05:7b:73:3e:67:48:93:9d:ee:6b:86:98:63:
                    c8:95:64:e4:30:b3:2b:c8:96:f2:5f:7f:a1:3f:b2:
                    14:d1:f5:a2:4f:32:3b:4c:7b:58:cd:e6:17:99:f0:
                    38:f1:e5:a1:81:82:e5:72:5a:a0:3d:40:8e:df:11:
                    f6:c0:96:2f:61:04:33:0a:07:1e:c6:2e:0e:16:0e:
                    f4:1b:a5:92:0c:0b:3f:2a:7b:a0:b9:2a:08:b6:b9:
                    76:2a:ea:fd:4c:9a:25:fc:d6:d8:d7:8e:cd:cb:a3:
                    f3:b6:e3:60:02:72:6d:36:b9:a9:83:61:6b:e9:d1:
                    53:b8:a6:c5:a0:fd:d6:65:ed:d4:8d:23:68:1a:f4:
                    2a:24:e3:67:f1:6e:6a:58:9e:e2:38:88:eb:54:95:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:7F:24:D9:D9:17:1F:B8:97:77:40:F6:BC:0A:D8:46:4C:50:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/b3ed4753-2636-309e-8398-20567fbd992b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.crl

            X509v3 Authority Key Identifier:
                keyid:6C:78:B6:19:6D:43:07:84:1B:9F:5B:7A:E2:EF:E4:BB:56:6E:7D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c0ee3bc-c4ca-4a36-99eb-140734b14a02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ea:76:7b:3c:ab:c7:b9:2d:dd:7d:ac:5d:d3:d3:4f:4f:b3:
         f7:38:25:b3:9d:3b:c8:5e:73:06:e3:53:fb:f7:5a:94:63:69:
         07:1f:96:08:4b:00:c1:93:4d:0c:9a:ae:5c:9d:90:81:86:f4:
         5e:82:44:51:48:c0:db:2e:4c:87:67:54:c6:45:d2:28:83:54:
         ec:ec:c3:4e:d1:80:1e:8c:fb:59:21:46:87:aa:99:e1:85:81:
         8c:c4:49:04:35:6a:4d:14:5a:2d:da:5f:70:9c:79:e0:51:71:
         67:07:bc:8b:26:90:30:d9:41:d2:5a:c0:6f:82:a9:85:c8:12:
         1c:eb:d9:82:ef:71:85:9a:e0:37:cc:79:bf:51:be:a2:6d:4b:
         e0:6f:23:c9:83:1a:3d:2d:2d:ca:ed:9f:c3:53:22:29:8f:c6:
         41:5e:59:10:59:4e:92:52:89:bb:4e:f2:74:e3:9f:25:95:33:
         66:f9:2d:96:2e:61:ff:17:9b:f2:02:cc:8e:f9:85:89:03:28:
         c3:43:8c:bf:98:94:04:e9:d2:ff:f0:5f:15:f5:c3:25:71:6d:
         d0:1a:28:f4:86:90:fb:cb:8c:ae:6f:7a:d4:23:25:79:6b:1f:
         58:68:a0:0f:f4:3a:dd:c4:e2:d4:33:39:27:87:8d:dc:9f:33:
         0f:ea:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----