Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/5b4beed4-5275-3bb9-9128-f308575d5b46.roa
File:                     5b4beed4-5275-3bb9-9128-f308575d5b46.roa (raw, json)
Hash identifier:          rtrfknxUcB5k3LVMpt8AXIrXVW8m2i+zXtg+ZNmOapI=
Subject key identifier:   33:AA:2C:21:49:8E:AF:0F:8B:77:27:BC:55:59:F4:7D:03:FC:2F:24
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583C87996F8A3B018C1058865CC0
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/5b4beed4-5275-3bb9-9128-f308575d5b46.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Fri 12 Apr 2024 04:00:00 +0000
asID:                     149424
IP address blocks:        2602:fc23:160::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:87:99:6f:8a:3b:01:8c:10:58:86:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Apr 12 04:00:00 2024 GMT
        Subject: CN=dd09678b-6ba5-48b2-b3dc-30ce46a1bdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:18:68:8d:ea:94:a0:f2:a4:ad:de:13:0c:
                    75:7b:ea:be:a0:47:ab:71:a1:be:37:ad:a1:8b:86:
                    fb:ae:26:d6:89:8d:47:ff:1d:68:c9:ab:16:0f:7b:
                    a5:58:d4:64:ee:d8:af:d2:70:05:88:78:af:1f:47:
                    70:6a:68:cd:55:6d:87:43:ed:49:ab:63:7f:f7:32:
                    c2:13:f8:65:0d:5e:cb:8c:36:6d:d8:09:94:cc:5b:
                    9c:20:93:22:83:d2:51:ed:c6:b0:80:da:21:2d:69:
                    ed:0a:82:56:90:bf:f7:6e:f3:bf:54:04:bf:d0:24:
                    15:db:73:fd:2d:ed:96:83:2a:81:51:57:3f:5e:05:
                    e9:03:c4:2a:e5:ab:69:90:b9:26:e4:11:04:0d:33:
                    f1:2e:d9:46:82:86:cd:fb:8f:9d:15:e4:16:c7:68:
                    15:ec:5b:6d:de:0e:0a:96:d0:c5:3a:a8:cc:48:90:
                    9b:f1:d4:07:61:77:c9:fd:bd:ec:3a:c2:40:de:e6:
                    a7:9f:16:40:d3:5d:4b:64:92:2f:b0:f9:04:75:bb:
                    ed:63:9e:dc:d5:e3:1f:f3:56:d6:56:ec:a1:b7:58:
                    73:40:50:bc:b4:06:89:a1:3f:61:49:ed:4c:1c:8f:
                    e5:17:2d:24:ed:36:15:e0:8b:a7:ac:49:be:2d:18:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AA:2C:21:49:8E:AF:0F:8B:77:27:BC:55:59:F4:7D:03:FC:2F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/5b4beed4-5275-3bb9-9128-f308575d5b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:03:ad:1d:67:35:04:56:a7:26:19:b8:f9:96:e6:bb:16:47:
         33:5c:9e:7d:3c:8f:8b:d6:f0:68:e9:ed:cc:ef:8f:ef:9e:0e:
         ea:c9:33:de:68:28:c8:8a:02:7a:c4:ec:86:cd:16:9c:6e:fd:
         91:57:ac:e7:8f:f1:f0:29:a6:12:8a:d6:e7:c7:7c:4d:fa:f4:
         76:22:08:05:3e:d6:4a:46:d1:13:bc:c9:be:b5:27:a7:8b:53:
         a6:63:27:fc:aa:f0:fe:20:77:7e:7d:64:bb:f8:72:46:62:fa:
         11:5c:0f:c5:7d:80:78:73:a0:16:33:d5:8c:0a:13:26:73:5d:
         bc:69:36:bc:07:69:b6:41:ba:f4:b5:9b:97:bf:3c:f0:af:5b:
         91:2d:58:8e:a4:d4:24:1c:25:16:e5:a8:d3:f5:d2:de:23:bd:
         60:11:49:eb:f7:98:ad:1f:7f:15:45:fb:f7:38:73:76:19:dc:
         a8:e0:46:1e:da:da:ed:e7:0f:a9:2a:f5:28:42:7d:38:3f:71:
         59:45:0a:28:78:95:4c:5b:61:80:0a:f6:92:87:ac:eb:aa:be:
         7c:9f:66:70:ea:40:47:3e:32:ef:29:58:a3:6f:31:37:c8:9b:
         36:fe:18:7c:8f:7c:c0:a3:db:f7:26:91:a0:19:bb:e6:d8:57:
         39:ce:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----