Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/68531c07-df56-3a2b-8303-c74c8122d80c.roa
File:                     68531c07-df56-3a2b-8303-c74c8122d80c.roa (raw, json)
Hash identifier:          ul407I6n7wtfbv5twljGzpgnRyiVYQoeu/LaNVZpfdw=
Subject key identifier:   34:FE:8C:71:23:38:ED:3F:6B:2F:75:24:C5:A8:B4:34:4C:45:A8:EC
Certificate issuer:       /CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720B68A436
Authority key identifier: 26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/68531c07-df56-3a2b-8303-c74c8122d80c.roa
Signing time:             Wed 13 May 2020 00:21:46 +0000
ROA not before:           Tue 12 May 2020 04:00:00 +0000
ROA not after:            Thu 15 May 2025 04:00:00 +0000
asID:                     32261
IP address blocks:        2600:3700::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0b:68:a4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11cddc66-c1b2-4bbb-a5ef-e3a08f499f72
        Validity
            Not Before: May 12 04:00:00 2020 GMT
            Not After : May 15 04:00:00 2025 GMT
        Subject: CN=cd758095-6cff-476b-bf97-c61ad44dd2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:b8:49:23:42:51:04:c1:c9:00:ee:2b:02:
                    0e:28:89:70:29:09:a5:58:85:60:d9:06:30:be:39:
                    a5:f6:e7:da:7e:9e:13:96:8f:43:b8:69:b2:9e:2a:
                    c2:b1:a8:fa:c7:44:95:fe:68:bf:24:9d:83:62:a7:
                    f3:35:7f:71:01:37:16:9f:5c:2f:67:43:73:a7:1b:
                    e2:d1:d1:dd:8c:a6:b5:4e:60:2b:85:00:6b:84:51:
                    6e:c7:7e:ea:fd:02:a2:39:87:f6:04:36:0b:0f:3a:
                    ca:e6:a0:a9:e8:1e:95:5b:6e:6f:c5:b2:d6:1b:3d:
                    7c:61:0b:c2:85:bf:87:85:a4:6c:d4:0b:1c:86:7c:
                    2b:50:5a:1d:ac:25:dd:70:9a:03:7a:0a:c9:89:3a:
                    d3:64:f0:33:29:ce:44:7c:af:ab:43:5f:30:ea:39:
                    58:da:c5:fb:6d:01:8b:45:b7:50:95:c7:4c:a8:65:
                    4f:5c:cd:f7:f5:29:d8:4c:b6:6f:81:d1:b6:76:17:
                    13:12:49:d6:a5:09:92:96:54:62:05:70:88:86:d3:
                    a8:6a:95:28:b5:95:fb:a0:6e:29:25:55:24:28:ce:
                    41:5e:84:5d:00:ff:d8:0a:24:41:2d:bc:8e:9b:a9:
                    6f:8d:9c:d4:6d:1c:9a:4c:ae:81:fe:60:b7:ba:8b:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:8C:71:23:38:ED:3F:6B:2F:75:24:C5:A8:B4:34:4C:45:A8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/68531c07-df56-3a2b-8303-c74c8122d80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.crl

            X509v3 Authority Key Identifier:
                keyid:26:BD:7C:37:C9:22:3B:7A:6E:21:EE:5B:31:30:43:2C:9E:0D:10:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11cddc66-c1b2-4bbb-a5ef-e3a08f499f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3700::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7b:64:08:bf:95:cb:79:23:a5:17:58:4c:b1:35:8c:e4:c1:
         2f:e6:a0:73:10:c7:8b:fb:ba:91:9e:39:c1:2b:e8:a6:4a:52:
         c6:af:e8:76:7d:6c:fa:28:dd:c1:3b:fc:de:6c:99:1e:54:0d:
         f9:40:47:29:7d:66:15:b2:4c:7f:58:d7:33:92:04:54:80:38:
         bd:de:a6:a5:8d:2a:fa:89:79:82:91:b1:14:b2:3f:51:f4:ea:
         2a:8b:09:24:b1:72:1b:73:a1:c6:84:a2:36:8d:54:b9:e3:77:
         e2:27:02:99:2e:dc:7c:3a:c8:e1:2c:ef:6d:66:39:39:6f:f1:
         64:c5:e6:bd:a8:99:84:82:14:49:29:e5:84:d6:67:70:3b:46:
         ff:5c:5f:cf:20:bb:a8:b1:c1:9b:25:15:ea:ec:92:80:41:32:
         17:af:dc:95:94:a5:9f:b7:d0:f9:0c:f5:4b:28:1e:8d:b1:f2:
         70:21:8c:8d:ea:13:04:dc:ad:39:a7:21:cc:12:77:13:3f:78:
         32:2a:72:90:b6:4b:4f:0f:99:c7:18:ba:6a:38:01:04:f3:7e:
         0d:d4:35:40:25:91:b7:80:ce:cb:46:22:72:24:74:56:45:37:
         25:44:a0:8c:e3:4f:52:22:80:f3:2d:fb:4f:fd:8b:b4:60:6e:
         6f:cf:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----