Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/72335c3f-245a-3f25-b323-014e80b9f5bd.roa
File:                     72335c3f-245a-3f25-b323-014e80b9f5bd.roa (raw, json)
Hash identifier:          n0CKOxeRR857mVyMFfScMtd8lMPhYePj/QH3dupEEAQ=
Subject key identifier:   4F:18:D6:28:C2:09:B5:CC:52:4C:D8:9A:0D:05:00:5A:16:C2:B8:D6
Certificate issuer:       /CN=d25162b3-7899-4412-8d2b-385913c82300
Certificate serial:       010D0C9F4328583D66879685842F940794A00400
Authority key identifier: 3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/72335c3f-245a-3f25-b323-014e80b9f5bd.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Mon 01 Jul 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        2602:fc3b::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:87:96:85:84:2f:94:07:94:a0:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25162b3-7899-4412-8d2b-385913c82300
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Jul  1 04:00:00 2024 GMT
        Subject: CN=43591964-52ce-425d-acbb-ffad2573ae93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:05:d0:be:55:59:5f:cd:d7:85:48:0c:16:
                    09:d0:09:fb:1b:3b:54:d1:95:3b:8a:e3:5e:5e:a5:
                    ee:50:ae:64:d8:f6:c0:35:a7:d7:4a:c0:e7:9b:34:
                    8d:aa:4b:1a:8f:f0:e8:4b:3b:e0:20:c4:56:41:0f:
                    63:bd:2b:b7:28:3c:bc:8b:b1:91:a2:ff:40:39:f9:
                    8a:d2:d1:d8:66:5f:55:2d:d6:63:c7:ac:eb:f8:fd:
                    9b:83:95:10:f7:69:da:bc:b5:ac:36:34:f7:e6:90:
                    46:ef:56:b1:41:57:5b:ad:dc:e7:60:cc:5b:8f:02:
                    bf:ef:a1:05:ed:9d:66:7c:e3:26:a6:82:d3:ed:13:
                    50:60:68:f9:fe:5e:5f:11:08:7e:39:c8:d2:d9:e6:
                    9e:3d:c3:87:ed:81:8a:b3:15:4b:4a:e7:0c:25:ce:
                    99:78:3e:fe:7d:44:39:7b:4d:fe:51:36:0f:e6:c8:
                    2c:80:b7:42:15:fa:0a:ee:4e:a0:38:7a:27:b9:c7:
                    95:d1:26:d6:5a:7b:a8:89:af:8b:a8:5d:20:2a:6c:
                    1a:fd:96:21:8d:5c:19:54:a4:2f:40:6f:70:ea:38:
                    71:76:53:b7:41:d6:6b:5f:e1:52:24:83:16:86:0c:
                    9d:7b:da:8f:87:cf:63:d9:e5:aa:a8:15:c3:8a:13:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:18:D6:28:C2:09:B5:CC:52:4C:D8:9A:0D:05:00:5A:16:C2:B8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/72335c3f-245a-3f25-b323-014e80b9f5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300/d25162b3-7899-4412-8d2b-385913c82300.crl

            X509v3 Authority Key Identifier:
                keyid:3A:68:24:34:5D:61:11:10:6E:0E:0E:C8:9C:FB:72:38:4B:02:3A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d25162b3-7899-4412-8d2b-385913c82300.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:9e:f0:70:c5:d3:2f:a9:6d:a0:2b:ad:14:a3:fb:7f:e7:
         aa:9e:ab:5e:67:7c:66:22:b2:8a:33:23:0d:bc:b3:d0:70:c5:
         ed:bd:db:61:49:eb:59:2f:b2:73:62:76:58:bd:aa:a5:bd:43:
         09:9c:64:f4:21:b0:01:21:76:64:4c:bd:d0:10:87:7c:6d:18:
         cd:fb:25:77:71:ba:44:ee:5d:60:3c:5d:cf:7f:4c:0e:a4:96:
         a0:8f:f0:ec:61:a6:5b:a5:26:35:9e:5a:d5:9b:7d:7f:b7:22:
         ff:4a:8e:b2:b1:1d:56:45:cb:95:46:e8:ee:91:20:2c:f7:12:
         68:ab:39:d2:3a:8f:53:d2:2c:1f:42:13:3c:61:5f:52:51:4a:
         3e:c7:66:9f:f7:a9:c5:3c:d7:87:db:85:4a:19:41:5b:be:b4:
         01:eb:0d:1c:a0:d5:82:df:a9:39:a9:7c:4d:ea:bb:5c:e9:20:
         57:84:45:5a:48:1f:f5:13:06:0c:a6:b5:51:b4:b7:67:65:42:
         84:ca:9f:fe:e9:43:67:fb:92:4a:4c:e8:52:65:ec:62:f9:9e:
         39:c4:a4:1b:c1:38:65:77:d6:5e:e6:d8:54:d3:c6:f0:76:8a:
         b3:bc:dd:62:92:85:d3:5a:63:a8:df:56:ae:20:2c:48:8f:84:
         c8:41:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----