Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9afdda9e-105a-3c63-ad72-3e0c84619f5e.roa
File:                     9afdda9e-105a-3c63-ad72-3e0c84619f5e.roa (raw, json)
Hash identifier:          6pFfXWyYGjTg4JlkLjl7UjVym2IL15Z35yIWSN40zE4=
Subject key identifier:   0B:55:89:76:CC:7B:17:ED:AD:8C:51:6E:C6:92:1F:4E:7B:0C:76:CD
Certificate issuer:       /CN=18ccca26-f6c3-490d-aea1-56ccca162855
Certificate serial:       010D0C9F4328583C8DABEDBEB579459E39429CC0
Authority key identifier: F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9afdda9e-105a-3c63-ad72-3e0c84619f5e.roa
Signing time:             Mon 13 Sep 2021 04:00:00 +0000
ROA not before:           Mon 13 Sep 2021 04:00:00 +0000
ROA not after:            Sun 14 Apr 2024 04:00:00 +0000
asID:                     57401
IP address blocks:        2602:fc23:110::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:ab:ed:be:b5:79:45:9e:39:42:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ccca26-f6c3-490d-aea1-56ccca162855
        Validity
            Not Before: Sep 13 04:00:00 2021 GMT
            Not After : Apr 14 04:00:00 2024 GMT
        Subject: CN=b7d9845a-de60-4a8c-80dd-5f3f57970cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:8b:d9:1a:1d:37:f3:90:07:d7:52:32:2d:
                    43:e0:9c:d8:d8:9d:eb:f0:1e:29:e9:bb:2b:fc:8b:
                    d3:76:e3:a0:62:06:7f:94:e1:8d:27:92:97:df:aa:
                    a8:74:29:4c:0f:5c:e2:e2:52:b7:6f:6a:33:b6:97:
                    51:e4:f6:c1:f5:cd:f5:13:69:73:91:11:86:f8:7b:
                    85:1d:22:2f:44:d6:98:91:73:90:a9:d9:46:37:88:
                    e7:d8:b4:44:3a:f9:c5:10:95:b6:37:89:5a:f7:8f:
                    d2:7c:21:02:8e:b9:87:8f:04:78:29:75:68:81:12:
                    6c:85:c0:a7:32:59:ce:8f:55:24:42:53:85:0c:88:
                    78:b6:72:29:6a:fc:4f:4f:15:77:15:4c:c9:39:e5:
                    cc:25:ea:24:28:60:7e:85:aa:75:85:e7:aa:2d:09:
                    96:3e:2a:df:17:69:74:aa:27:f0:3f:5c:bd:d4:04:
                    43:ce:8c:c4:45:b7:24:e1:15:45:12:8f:b3:5c:bf:
                    d6:76:44:ce:7b:30:ca:6d:53:89:4d:24:c1:2d:ee:
                    de:64:4b:ae:a5:04:60:d9:0d:bb:d1:55:0d:f1:22:
                    4f:3a:a0:9d:26:cb:48:2f:56:53:8e:46:d2:fa:48:
                    25:ea:be:5d:e2:e2:a8:8c:02:e9:c2:d8:5a:e8:7f:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:89:76:CC:7B:17:ED:AD:8C:51:6E:C6:92:1F:4E:7B:0C:76:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/9afdda9e-105a-3c63-ad72-3e0c84619f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855/18ccca26-f6c3-490d-aea1-56ccca162855.crl

            X509v3 Authority Key Identifier:
                keyid:F7:AF:BB:DE:1B:20:72:2F:96:C0:4F:B3:92:FD:F4:88:C6:3E:EA:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/18ccca26-f6c3-490d-aea1-56ccca162855.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e2:bd:26:df:ad:6f:9c:a8:e6:50:62:23:35:16:30:62:62:
         15:b6:12:6f:69:00:d9:1c:49:e6:46:ac:1f:8f:1a:bc:9a:bc:
         bc:67:5d:7b:88:bb:2f:aa:eb:84:ec:da:26:0b:89:19:67:1e:
         1b:65:9f:2c:04:86:fa:3f:1e:1d:83:56:e4:18:86:54:a3:0e:
         36:22:d0:2e:29:02:93:2c:5b:e1:71:70:19:85:55:b5:80:10:
         70:d1:9c:90:2f:1d:56:33:a0:fc:a8:2f:c3:49:27:4f:aa:39:
         20:90:88:3e:7b:29:82:c7:c0:79:12:68:f6:75:98:4f:2b:65:
         46:09:57:75:cd:68:c2:d2:87:16:d7:b1:26:1d:7f:55:83:fd:
         09:5a:22:09:5a:39:49:36:e4:6c:a3:ca:ea:a2:f2:2a:a1:9d:
         ed:28:5b:f6:3d:cc:f3:e6:08:e9:a2:81:b8:b4:4d:d8:b6:1f:
         2f:01:59:03:13:42:9a:62:52:d1:7b:2a:6a:19:fc:de:93:f2:
         40:7b:8e:86:cc:b5:28:08:1c:ce:a3:ef:1a:5e:36:f4:f8:8e:
         dc:f7:d7:a4:e9:70:a0:44:de:15:ec:13:50:48:b9:dd:25:a9:
         ad:3c:79:27:b7:d8:ba:11:94:de:79:e4:ce:88:35:32:42:45:
         97:91:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----