Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/612d3b7d-41f4-334a-bb6e-90ce57b644bf.roa
File:                     612d3b7d-41f4-334a-bb6e-90ce57b644bf.roa (raw, json)
Hash identifier:          vJmt1NxQxScWnSnq3CBUxFlwwPwqT+yhssOMbJEcJNo=
Subject key identifier:   FE:2D:EA:E4:E2:FC:28:61:37:E5:97:7B:32:4F:D5:A5:86:93:20:9C
Certificate issuer:       /CN=a0839207-1494-4e82-8648-ab9b9567c70f
Certificate serial:       010D0C9F4328583E319B185A908BCEC88E9D5940
Authority key identifier: 10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/612d3b7d-41f4-334a-bb6e-90ce57b644bf.roa
Signing time:             Thu 09 Jun 2022 12:00:00 +0000
ROA not before:           Thu 09 Jun 2022 12:00:00 +0000
ROA not after:            Fri 15 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:f000::/24 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:31:9b:18:5a:90:8b:ce:c8:8e:9d:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0839207-1494-4e82-8648-ab9b9567c70f
        Validity
            Not Before: Jun  9 12:00:00 2022 GMT
            Not After : Jul 15 04:00:00 2022 GMT
        Subject: CN=43d3d04b-6b58-48f3-8029-22451b75471a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:c5:88:6a:fa:d9:88:f7:ea:70:64:81:d9:
                    ad:5c:29:70:16:af:cc:45:a5:27:5d:c7:a9:d8:a1:
                    7e:b4:52:64:80:4d:ea:61:d8:78:90:d9:e7:08:52:
                    e6:52:a5:db:41:8d:8f:3f:33:c3:a7:70:47:69:6c:
                    cb:e9:ac:19:97:95:1c:97:8f:eb:25:b8:ab:bf:12:
                    ec:6e:b0:e5:c6:32:00:2f:43:fe:1a:af:c0:e6:a3:
                    42:4d:d7:71:66:a7:f1:e3:ed:a3:61:f4:85:34:ba:
                    1e:8a:99:0e:b0:89:1a:35:10:36:e8:79:2c:77:f2:
                    92:e6:84:9e:19:5b:e5:f0:97:6d:2c:76:52:75:0a:
                    4a:09:96:f8:32:d1:6f:97:56:a8:8c:78:bd:06:e9:
                    01:9f:6d:5c:84:a8:b1:53:65:82:31:f5:05:20:e6:
                    f5:d1:02:19:f6:af:dd:72:87:56:a4:df:37:fb:28:
                    6a:d0:7d:ba:9f:76:71:2f:ad:84:fa:c9:0f:e1:ae:
                    01:00:6c:75:64:f3:2c:5e:46:19:53:00:90:e7:f6:
                    5c:ff:8e:67:5f:73:31:c8:54:ae:1e:ca:48:50:a0:
                    f5:01:e8:05:79:9c:8a:c5:12:71:e1:e1:56:7d:f8:
                    c1:d6:f2:1c:24:e7:b2:79:ea:6c:ad:72:33:83:b7:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:EA:E4:E2:FC:28:61:37:E5:97:7B:32:4F:D5:A5:86:93:20:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/612d3b7d-41f4-334a-bb6e-90ce57b644bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f/a0839207-1494-4e82-8648-ab9b9567c70f.crl

            X509v3 Authority Key Identifier:
                keyid:10:18:D5:99:4E:8F:9F:DE:FE:93:63:56:D5:AA:12:F5:6F:98:D9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0839207-1494-4e82-8648-ab9b9567c70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:44:9b:88:4b:78:ab:4b:97:6d:2b:61:8b:75:1a:1c:e3:
         06:af:34:6c:fd:09:2c:39:26:9e:7b:60:85:9a:a2:54:c3:b9:
         2a:cd:74:b0:d7:6c:ca:4e:ee:41:49:00:1a:ce:01:4f:8c:41:
         25:4d:aa:05:d3:fb:90:54:eb:64:01:fb:b4:c0:c6:23:0a:81:
         9d:df:f6:f5:83:92:64:7f:01:da:0e:84:fa:88:93:27:36:46:
         a5:0d:30:f5:7e:ae:62:8b:4f:10:6b:3f:9f:56:38:ba:10:d9:
         2b:82:86:61:8c:bf:6b:5e:78:60:e7:f8:07:0b:d7:b9:32:ac:
         cf:13:df:48:66:e8:87:a0:a3:d6:d5:80:40:4b:9b:21:2a:49:
         cf:68:03:21:05:e5:d7:07:b8:1d:a1:ac:c4:2e:d5:ac:50:94:
         63:dc:9b:7b:49:9c:1b:26:ee:e5:3d:de:e1:12:27:de:a5:03:
         3f:d1:30:11:be:dc:75:8d:c1:3c:f6:f8:03:59:02:c0:f7:e5:
         60:43:4c:63:b2:28:01:60:e9:be:18:5b:3f:dd:3a:d9:f0:e2:
         80:f1:4d:51:32:ee:72:19:48:f9:26:53:7a:e6:b9:da:18:08:
         d1:ec:0c:6b:80:fc:aa:b4:8b:b8:1d:17:8d:10:03:1b:2e:79:
         88:ee:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----