Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/16e64856-fe4b-3f1a-b480-6f640ca3bb21.roa
File:                     16e64856-fe4b-3f1a-b480-6f640ca3bb21.roa (raw, json)
Hash identifier:          gCONaeu/42C3j4XDYWiQEpUbw5nx3IBj46hKIt+/EZw=
Subject key identifier:   E8:F4:1F:96:44:AC:1D:88:7A:79:F4:2C:C5:A2:AC:D1:8E:85:A5:62
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583F2E7D92CEA0C3BFF93813C500
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/16e64856-fe4b-3f1a-b480-6f640ca3bb21.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2e:7d:92:ce:a0:c3:bf:f9:38:13:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=336b4a77-3df5-4c2a-9acf-c11686f5bfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:09:38:7e:df:0a:c5:43:ea:d7:30:6d:03:
                    43:35:9d:92:d0:46:1d:57:35:b6:aa:4b:17:48:c0:
                    91:da:96:bb:aa:5b:82:b6:f6:92:73:25:eb:0f:da:
                    29:d3:98:2b:de:81:b4:e6:a2:a3:05:11:6f:21:0d:
                    15:13:ff:f0:d7:59:d7:95:00:36:41:11:15:6c:14:
                    de:9b:ad:4f:e6:cd:14:f8:26:11:a7:93:bf:44:8d:
                    50:17:fb:17:cd:75:11:ad:ac:43:5d:c2:8f:41:04:
                    5d:2d:0f:f0:3e:41:31:d3:e3:7b:66:8c:7a:fd:4a:
                    75:e2:3a:6b:d3:c6:cd:13:5d:ca:8d:e1:8f:46:43:
                    50:ab:04:3f:f5:9c:5e:21:21:06:ed:5e:c4:29:99:
                    5e:f7:e6:17:7d:ac:59:85:fd:8b:44:2f:d7:ee:fe:
                    96:0b:84:af:63:a3:4d:de:5f:d5:89:ee:8c:a7:00:
                    3d:f0:82:56:e5:64:2d:a4:db:3b:fb:6c:ae:88:ea:
                    03:cf:68:22:43:15:75:df:41:e1:69:8d:d5:93:62:
                    b5:fc:2d:a5:ac:d7:48:3c:11:07:46:f3:6a:ea:bd:
                    d7:6a:78:d3:09:b4:79:f6:69:9d:dc:a7:42:cb:da:
                    3a:91:73:17:e4:50:6e:eb:4a:40:ac:6b:b4:ca:a3:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:1F:96:44:AC:1D:88:7A:79:F4:2C:C5:A2:AC:D1:8E:85:A5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/16e64856-fe4b-3f1a-b480-6f640ca3bb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:7b:53:6b:c8:12:36:de:03:b9:c8:fe:13:18:58:77:c6:
         d0:4d:7e:bd:f2:46:84:52:be:ba:4b:21:b8:8d:14:7d:aa:80:
         11:40:13:66:bc:fd:0b:52:12:a0:1b:f4:7a:31:b8:17:69:3b:
         70:24:84:c6:57:f5:46:51:bd:70:56:29:ce:2a:f9:e7:7a:e1:
         c5:98:04:e8:5a:34:78:b4:0a:b6:2a:a4:88:fc:5d:d8:f6:ca:
         d4:82:63:8f:c3:2e:73:bc:cf:e0:84:07:75:f3:16:93:22:6c:
         63:16:8b:bb:f7:3a:70:1d:4d:48:99:b9:db:d0:46:89:5c:f4:
         d6:29:10:03:a5:95:04:b0:18:f8:2c:3b:ee:ec:d8:72:ee:84:
         73:a4:01:e1:89:89:7e:d0:65:68:59:80:06:bf:ff:52:ba:a5:
         ee:a9:f0:33:e8:d1:67:ea:ff:4d:24:89:2c:51:a7:73:f3:f3:
         42:06:6e:02:da:c2:87:42:9c:6b:18:82:8b:ec:d5:70:e8:9e:
         80:0f:9d:87:15:aa:88:19:ad:67:4c:8e:63:30:9c:d2:30:96:
         3d:92:01:a2:bc:ca:42:01:66:a6:df:f9:b0:fb:f9:c1:15:d2:
         bd:9b:83:00:f6:0b:6c:2a:5a:31:24:3e:6f:51:81:ad:9c:18:
         fb:94:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----