Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/3db5068f-4dc1-3628-9282-babd068e8613.roa
File:                     3db5068f-4dc1-3628-9282-babd068e8613.roa (raw, json)
Hash identifier:          4D7YoTEpWASPW1isCfAOO7sRPgrQhmmTy9q3cRBRhGc=
Subject key identifier:   53:C4:EB:0F:6F:05:A8:FF:77:D6:55:A3:33:EA:02:4C:8F:A6:BF:8A
Certificate issuer:       /CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
Certificate serial:       010D0C9F4328583E22C76A06EF8CB46EE851FC80
Authority key identifier: 72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/3db5068f-4dc1-3628-9282-babd068e8613.roa
Signing time:             Fri 08 Jan 2021 15:30:42 +0000
ROA not before:           Fri 08 Jan 2021 15:30:42 +0000
ROA not after:            Sat 07 Sep 2024 04:00:00 +0000
asID:                     206216
IP address blocks:        2602:fcd3:1b0::/48 maxlen: 48
                          2602:fcd3:1b1::/48 maxlen: 48
                          2602:fcd3:1b2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:22:c7:6a:06:ef:8c:b4:6e:e8:51:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0afacf20-2411-4ca3-ba34-f7e297cdb606
        Validity
            Not Before: Jan  8 15:30:42 2021 GMT
            Not After : Sep  7 04:00:00 2024 GMT
        Subject: CN=e8f3914f-b90d-42e9-9777-6c8c4050819c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c6:aa:3c:76:e4:46:12:46:c5:73:79:8b:ad:
                    46:d2:48:82:32:59:f6:44:03:49:1e:08:26:ef:70:
                    a7:23:a9:14:bf:d3:23:66:a8:14:93:f6:bd:e5:a7:
                    51:ba:ae:ec:75:f4:7b:9c:d2:ab:b6:d5:92:de:41:
                    d9:d8:cb:be:4e:e0:0e:99:d7:ec:d8:b5:38:a3:6f:
                    dc:9e:5e:b4:ac:a3:19:ef:31:e1:3d:90:8b:0c:16:
                    fe:f8:b2:32:ac:08:61:be:f7:8e:f1:87:52:44:1c:
                    0e:90:0e:a4:fc:fe:1b:e1:67:0c:89:31:e6:58:17:
                    c8:df:d5:4a:28:13:01:16:5a:33:cb:67:65:95:cd:
                    1d:74:45:50:d8:c4:5a:8d:9b:41:ff:d4:4a:53:45:
                    e1:42:9e:b6:45:c9:e6:60:bb:86:83:6f:fc:7f:07:
                    a7:6b:89:4f:1c:0a:bb:ac:18:58:d0:58:be:1d:81:
                    24:19:0a:cf:74:26:d1:29:23:81:73:50:a0:6d:bb:
                    ac:99:85:45:0c:4b:48:6b:93:69:08:9b:11:e4:5a:
                    bc:b0:fb:4b:0b:34:7a:4f:86:f5:94:b0:ca:f8:e0:
                    32:ed:58:5b:e4:18:ef:c8:aa:95:3d:62:cf:70:42:
                    80:93:40:f8:5f:64:ff:50:87:de:42:23:7d:e2:70:
                    f1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:EB:0F:6F:05:A8:FF:77:D6:55:A3:33:EA:02:4C:8F:A6:BF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/3db5068f-4dc1-3628-9282-babd068e8613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606/0afacf20-2411-4ca3-ba34-f7e297cdb606.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:4A:0C:67:9C:38:7B:C2:A5:09:3A:83:77:F4:80:A8:01:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0afacf20-2411-4ca3-ba34-f7e297cdb606.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:1b0::-2602:fcd3:1b2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:53:4b:ca:d4:5c:d2:f6:5e:86:db:6f:05:6c:20:e8:11:5a:
         35:f8:41:1e:bf:b8:30:2c:c6:16:02:62:bb:10:cc:31:d9:bb:
         73:dd:61:40:af:c3:78:d7:a4:2b:ae:43:6a:b0:a3:a9:ca:57:
         c0:1d:ba:0e:b6:c9:94:1e:ef:ec:e6:d6:22:ea:22:1d:22:74:
         a1:73:dc:e0:0d:89:b2:09:e4:0f:41:21:18:a7:ad:84:d5:60:
         7a:ac:85:40:a1:54:53:e0:fb:93:7d:ed:7a:97:44:7d:20:dc:
         4a:57:d3:f3:a1:09:27:e3:aa:ac:6a:a0:69:04:3e:9e:df:14:
         c3:ea:2c:49:96:e2:38:6d:f6:3c:fa:06:55:51:99:ac:61:e6:
         90:dc:35:74:77:d0:50:e4:1a:42:7c:32:ae:65:b7:27:36:a1:
         48:57:7e:87:64:2f:9e:cc:08:5d:b1:98:f3:70:b3:3b:02:85:
         8f:01:51:50:fa:be:fa:2c:e4:44:85:b7:32:82:25:96:f9:40:
         6f:b9:71:e8:4d:e9:a9:8c:3a:26:0e:21:04:5a:73:89:2d:7a:
         d7:92:f4:12:c5:5f:ba:f9:87:ba:01:5d:35:f4:40:c1:66:ad:
         79:9d:e2:f2:c5:fb:5d:0b:5a:d8:3b:07:ee:fd:59:8c:94:f6:
         93:b9:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----