Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/0602a1d4-4571-3a03-9aab-ac2ced972e8a.roa
File:                     0602a1d4-4571-3a03-9aab-ac2ced972e8a.roa (raw, json)
Hash identifier:          d9vf6G1ygWG50kKgqvhzHFBepPBWJ0F8aAbH8A8UJdM=
Subject key identifier:   2C:D2:BD:7C:5F:43:8B:E4:08:A9:A4:40:6E:F9:9B:92:A6:AB:B3:7F
Certificate issuer:       /CN=a0839207-1494-4e82-8648-ab9b9567c70f
Certificate serial:       010D0C9F4328583F1C49535974DD880DEFBC4800
Authority key identifier: 10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/0602a1d4-4571-3a03-9aab-ac2ced972e8a.roa
Signing time:             Thu 01 Sep 2022 12:00:00 +0000
ROA not before:           Thu 01 Sep 2022 12:00:00 +0000
ROA not after:            Fri 07 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1c:49:53:59:74:dd:88:0d:ef:bc:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0839207-1494-4e82-8648-ab9b9567c70f
        Validity
            Not Before: Sep  1 12:00:00 2022 GMT
            Not After : Oct  7 04:00:00 2022 GMT
        Subject: CN=a49538ee-e74c-4672-b70c-a6b0aa7fd4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:80:06:f9:70:29:be:02:41:6e:c9:1c:c4:
                    25:c1:20:18:3b:76:ce:85:29:d9:2b:c0:6b:67:f9:
                    3f:b0:05:a4:70:ba:f6:68:d3:fd:b7:9b:78:23:c7:
                    80:35:e9:67:39:44:0e:da:71:4a:e1:d8:7f:87:c2:
                    8a:8f:d2:77:c1:23:27:3e:3e:80:b8:ed:17:8f:77:
                    d7:f7:39:f3:a6:68:d4:0b:e8:e4:ac:44:a5:ba:dd:
                    cc:d0:96:31:ea:0c:64:7a:cc:63:67:30:08:ea:e5:
                    1c:6f:aa:47:67:74:5e:73:ae:2d:cc:80:b9:6e:53:
                    f9:14:f2:71:06:e8:f0:e8:c1:2d:bc:5c:0f:4d:40:
                    85:c6:c2:a0:83:f3:13:f0:1f:6e:a3:05:c7:84:8a:
                    21:aa:d2:aa:86:a6:cf:0d:5b:e8:30:a8:cf:32:4b:
                    60:b2:21:56:1b:ba:c1:98:52:97:16:ca:53:2a:06:
                    f1:05:99:e5:2e:41:05:ae:9b:ba:5c:e2:fc:52:87:
                    96:27:0f:c5:b6:43:ae:dc:a3:56:df:3d:18:a0:4f:
                    41:60:35:d3:49:ed:96:07:9d:90:94:7f:16:eb:a9:
                    63:a1:a3:da:eb:fc:34:0d:fc:6a:86:53:6f:bf:d4:
                    af:a4:3c:44:97:be:b3:d2:32:0a:41:89:3e:7c:36:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:BD:7C:5F:43:8B:E4:08:A9:A4:40:6E:F9:9B:92:A6:AB:B3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/0602a1d4-4571-3a03-9aab-ac2ced972e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/a0839207-1494-4e82-8648-ab9b9567c70f.crl

            X509v3 Authority Key Identifier:
                keyid:10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:9b:0e:34:19:7b:70:f5:87:64:30:d9:04:81:0d:2c:34:
         a1:a4:3c:f6:d1:7f:5d:cb:d1:9e:86:a8:ee:58:2a:2e:32:ba:
         43:f7:09:0f:61:a8:97:6b:5f:8b:ca:aa:70:e7:78:45:44:3f:
         2e:c6:ee:2c:67:6c:d9:ac:0e:25:2c:0f:8f:31:3f:51:7b:90:
         fd:5a:68:73:97:e8:ce:b9:ee:78:5b:a0:19:0f:ea:cb:15:e1:
         9b:90:3e:38:12:cb:38:74:42:cd:b7:66:64:48:b7:14:c2:24:
         a0:ff:43:ac:43:1b:9a:70:91:40:05:c6:b3:42:89:d8:3b:9b:
         92:f1:ee:41:5f:56:5b:83:0c:54:7b:32:a9:5c:15:47:c5:3b:
         8b:50:9b:42:4f:ce:3d:72:a0:54:5d:d6:b4:25:20:af:87:d9:
         04:be:7c:cd:60:f0:73:3b:ef:bd:4d:c7:90:44:8f:35:54:6e:
         96:b0:2a:0a:74:a6:cb:f0:e7:7f:2b:24:85:b8:ad:68:e6:df:
         e0:34:1c:34:70:de:fd:9d:7f:8e:40:24:a1:07:18:0e:b2:93:
         24:33:4f:b5:5d:88:96:f7:f3:2b:d5:5a:1f:24:a1:7c:ec:35:
         12:31:f4:75:ce:9a:d8:cf:f2:61:4f:06:e7:13:66:32:1e:25:
         cf:7d:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----