Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/81c378d2-c527-307f-85b4-1ecb74a3d09c.roa
File:                     81c378d2-c527-307f-85b4-1ecb74a3d09c.roa (raw, json)
Hash identifier:          aWNWaKAf7UU7NNSV2LGwzVF7WFIf7RKs/fCr0CuPSdU=
Subject key identifier:   C9:E2:40:0B:0D:1C:9E:DA:55:AC:DF:4B:6A:72:D0:53:6B:8C:42:6E
Certificate issuer:       /CN=42aca8b6-0ff7-407e-9500-82d24bdabad2
Certificate serial:       010D0C9F4328583B06091E8BE7D52A520F7E4E40
Authority key identifier: A5:36:19:F6:83:DA:9A:E7:1F:AA:9F:6A:9F:E8:6A:81:4E:71:B0:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/81c378d2-c527-307f-85b4-1ecb74a3d09c.roa
Signing time:             Mon 23 Aug 2021 04:00:00 +0000
ROA not before:           Mon 23 Aug 2021 04:00:00 +0000
ROA not after:            Sun 26 Nov 2023 05:00:00 +0000
asID:                     11448
IP address blocks:        2606:41c0::/32 maxlen: 48
                          2620:b6:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:06:09:1e:8b:e7:d5:2a:52:0f:7e:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42aca8b6-0ff7-407e-9500-82d24bdabad2
        Validity
            Not Before: Aug 23 04:00:00 2021 GMT
            Not After : Nov 26 05:00:00 2023 GMT
        Subject: CN=31635cf2-03b6-463d-818e-a93489225d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:68:2e:15:08:b5:27:5d:50:81:dc:d3:28:
                    f2:19:53:7a:d8:3b:c5:bb:66:ff:ec:19:dc:ca:a5:
                    53:56:bf:be:5e:33:a7:dc:62:6f:2f:f4:6a:27:91:
                    47:17:fc:be:64:e1:60:58:68:04:8f:ab:ab:4a:ef:
                    d1:d6:47:89:23:b3:d2:52:48:02:a1:49:77:19:e0:
                    7e:18:51:d8:e0:cd:e7:66:cc:75:3b:27:5e:c6:30:
                    5c:3c:ce:db:84:4d:4b:fe:4e:14:c5:a6:92:02:98:
                    1b:85:f9:86:32:ca:2a:1c:bd:5d:49:27:7e:64:ef:
                    6c:3c:21:c6:fe:20:b1:f1:dc:27:82:ac:e1:c1:f2:
                    eb:81:ca:69:c2:6f:bc:81:5b:63:1f:5b:49:96:6d:
                    98:dc:5a:29:1c:5e:ad:e7:0a:8c:94:87:d2:4b:a1:
                    ea:58:ba:28:86:78:3c:33:30:0a:03:c8:d4:e7:2f:
                    45:55:c9:41:a7:96:26:dd:f6:9d:5c:a8:89:42:bb:
                    17:08:4a:40:7c:bb:a4:57:e6:b2:ec:9d:2d:8b:b3:
                    50:21:a4:43:88:b5:b5:42:3c:de:4b:33:49:17:a9:
                    ee:78:0e:5b:f2:21:12:5f:6b:6a:36:39:94:89:b6:
                    e2:a9:9e:af:cb:11:88:0e:e2:c3:6f:df:81:4a:cf:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E2:40:0B:0D:1C:9E:DA:55:AC:DF:4B:6A:72:D0:53:6B:8C:42:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/81c378d2-c527-307f-85b4-1ecb74a3d09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2/42aca8b6-0ff7-407e-9500-82d24bdabad2.crl

            X509v3 Authority Key Identifier:
                keyid:A5:36:19:F6:83:DA:9A:E7:1F:AA:9F:6A:9F:E8:6A:81:4E:71:B0:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42aca8b6-0ff7-407e-9500-82d24bdabad2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:41c0::/32
                  2620:b6:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:9e:72:ec:bd:d5:65:5f:bf:f4:bb:53:b9:0e:d8:b2:cb:
         9f:0d:7d:e0:d1:2a:73:e0:ff:2d:9b:24:c0:aa:68:12:c9:95:
         45:dd:5a:c6:86:a1:7f:67:f5:d6:65:00:1f:17:c6:f3:e5:b2:
         f8:50:91:40:73:80:e6:cd:6c:63:4f:ff:b6:9b:73:ce:dd:df:
         df:e7:98:5c:a4:0a:bc:69:31:ec:a9:d5:df:08:d8:ad:9b:52:
         c2:12:f1:a7:fd:8e:9e:04:1f:4e:b1:3b:5c:07:79:4b:ba:f4:
         5f:cb:96:0d:fc:8b:64:c9:c4:75:e9:e4:85:c0:38:f7:ef:cb:
         63:7c:af:dd:d5:00:3e:b4:11:5b:dd:7e:d7:ef:87:3f:d9:1a:
         39:f4:a2:71:c9:81:b5:6d:56:2c:5e:71:78:67:2e:71:32:b6:
         1d:38:e7:6e:9a:81:67:a5:3a:a5:90:0c:ff:7d:bb:f9:bf:ab:
         bf:b0:91:11:44:4c:28:c4:f0:79:c2:d2:d0:c9:fd:58:e0:31:
         59:5f:ec:2d:cc:6b:db:2a:17:bc:4e:d9:ee:e3:50:23:19:07:
         53:12:48:05:ea:0d:6b:b2:ad:30:e3:6f:dd:0b:d0:37:1e:cf:
         71:c8:d7:11:57:60:c1:58:1f:9f:be:44:7f:1e:fd:60:56:9b:
         83:b1:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----