Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/186c2da4-318e-3598-9abd-8ecb18cf366f.roa
File:                     186c2da4-318e-3598-9abd-8ecb18cf366f.roa (raw, json)
Hash identifier:          XpNhHnrztqx1YqCjvUpETs2QCPlYm/tJZQhgjaq8Qfo=
Subject key identifier:   24:8A:48:99:D8:88:DB:B6:FE:1A:0F:D5:EA:39:77:FE:CF:3C:60:8E
Certificate issuer:       /CN=7593e70d-1998-40d1-b884-f7f29a045c12
Certificate serial:       010D0C9F4328583CD207897985B75066C228DA40
Authority key identifier: 48:FC:16:B9:09:ED:89:61:00:E3:2C:84:30:CA:DB:A8:D6:C7:83:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/186c2da4-318e-3598-9abd-8ecb18cf366f.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Wed 04 Feb 2032 05:00:00 +0000
asID:                     14618
IP address blocks:        2602:fbd0:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d2:07:89:79:85:b7:50:66:c2:28:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7593e70d-1998-40d1-b884-f7f29a045c12
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2032 GMT
        Subject: CN=c0aabb2a-91bb-4d42-8e3c-c640cb561fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:84:fa:0b:2e:7e:b6:e0:ea:04:27:c7:07:
                    9d:0b:76:0b:ce:f5:54:54:09:bd:d8:15:28:b6:78:
                    9c:0a:89:30:69:bd:74:83:ed:e3:22:c2:28:b4:bb:
                    98:79:4a:9f:fa:e3:10:b8:96:96:d3:47:b3:fc:0c:
                    58:37:86:3c:08:39:4e:d4:da:be:e3:7f:b2:60:50:
                    09:98:1f:5f:42:15:7a:f3:00:ee:da:87:7e:00:27:
                    53:be:15:ca:84:ae:0a:02:ce:27:66:05:eb:0b:b9:
                    22:0c:ff:fa:a2:8c:78:79:5f:fb:2f:76:47:ad:cc:
                    27:89:43:5c:e6:85:77:31:9c:de:0e:3c:25:8a:cc:
                    13:0d:bf:f0:f3:f2:4e:19:2e:3c:ec:a8:20:d2:8f:
                    2d:ae:c7:3f:d0:b1:95:28:92:b0:c1:4e:68:22:ee:
                    9f:71:db:29:da:c8:a7:e3:10:ad:80:44:6f:1a:83:
                    ae:52:da:d1:aa:46:04:e1:63:f0:e2:cd:e8:0e:3c:
                    b6:d4:a4:80:42:58:cc:60:57:e3:b0:8b:71:4e:14:
                    8c:ca:5b:c5:24:8b:63:4e:3d:b0:7e:24:90:db:02:
                    90:79:6e:43:c0:4b:c3:21:26:3e:2f:cb:78:82:de:
                    8d:b3:1e:40:45:cd:9e:12:92:f4:78:42:0e:f0:f9:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8A:48:99:D8:88:DB:B6:FE:1A:0F:D5:EA:39:77:FE:CF:3C:60:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/186c2da4-318e-3598-9abd-8ecb18cf366f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12/7593e70d-1998-40d1-b884-f7f29a045c12.crl

            X509v3 Authority Key Identifier:
                keyid:48:FC:16:B9:09:ED:89:61:00:E3:2C:84:30:CA:DB:A8:D6:C7:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7593e70d-1998-40d1-b884-f7f29a045c12.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd0:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:2b:35:05:20:2d:5f:73:b8:c6:3a:69:c4:a7:8f:3b:87:63:
         85:ac:a9:c7:00:66:a2:5d:b9:3e:92:ac:20:10:0b:bb:1e:d3:
         44:b4:18:d5:f0:25:bb:92:b5:a2:de:7e:25:a1:65:bc:eb:b6:
         f1:a0:46:fc:c9:b7:8e:99:90:da:b7:ac:e2:bd:c2:8b:ed:9c:
         f0:3d:98:fb:97:15:ae:df:83:da:36:a5:2c:ab:0e:1e:43:c2:
         47:b1:fd:d1:f4:37:b5:0a:d1:aa:94:59:0c:25:83:70:e7:0a:
         20:e3:a0:87:7f:ac:33:00:d3:24:9c:10:10:15:b8:5b:f9:3e:
         ce:e3:64:81:b7:77:b2:40:af:9c:05:be:9f:22:50:a8:6d:a7:
         21:70:cd:83:af:e0:cb:89:62:a1:5d:d6:ea:0c:78:a7:59:27:
         2e:9c:33:4f:46:0e:37:1f:8d:01:a8:b2:86:51:92:76:d6:1c:
         15:aa:a6:13:fb:b8:f7:89:43:4a:b4:ad:25:7b:7e:e0:a6:55:
         cd:9e:3e:7a:45:ae:f2:7c:2a:9b:3e:e3:24:2e:9e:2b:16:61:
         37:a0:5c:fc:f5:ce:88:86:5e:17:81:f2:88:3c:ba:44:22:d5:
         ee:c5:a4:78:e1:04:7f:8c:77:6d:04:c9:ce:15:f2:b7:3e:b3:
         26:00:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----