Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/5b2494fc-302b-3660-a42d-c9f17bb1c50f.roa
File:                     5b2494fc-302b-3660-a42d-c9f17bb1c50f.roa (raw, json)
Hash identifier:          pVqt9X5D83t+CRfFS0rQ+uq4NHsxnBIqP2vfpSvPqaA=
Subject key identifier:   26:0C:58:42:A4:04:9E:99:FE:E6:D7:A0:E8:0D:F9:FC:05:88:CB:B6
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583CE3CA442F55CAEA76E49C4C00
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/5b2494fc-302b-3660-a42d-c9f17bb1c50f.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e3:ca:44:2f:55:ca:ea:76:e4:9c:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=e117572f-16f0-4e60-9ae4-23af8bcd0ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:55:c2:6b:81:c4:d2:1d:cb:6b:65:e9:13:
                    cd:34:5b:0f:1c:3c:a6:fd:8e:b3:19:78:a0:8a:05:
                    b0:12:8b:a4:9c:37:30:d6:fd:2c:65:02:18:f6:94:
                    83:a0:fa:86:10:ec:b0:8e:60:d7:ee:1a:19:be:5a:
                    d9:23:16:d3:de:3c:9b:7f:d5:17:a7:11:22:2d:5a:
                    86:19:c1:76:b4:50:57:fe:f1:23:78:7d:f3:7a:c9:
                    cd:0e:f0:bd:98:c1:6e:93:f0:bc:b2:c5:72:7f:5d:
                    a9:3c:2a:8b:e5:43:b4:e5:a5:83:18:ea:06:96:b9:
                    17:79:09:0b:3a:bf:31:1f:32:ab:83:44:45:70:e4:
                    34:7e:31:8a:eb:df:43:95:ac:dd:90:63:bc:db:f8:
                    42:c8:17:73:9b:4e:d2:32:5c:71:cc:72:82:79:f8:
                    19:ce:39:5b:ac:91:18:69:8c:7f:68:91:23:95:1d:
                    9a:8b:46:b7:67:d3:33:67:0d:53:1d:70:5f:26:e4:
                    9f:a1:e3:e4:2f:55:98:3d:65:67:7e:5c:b0:d0:01:
                    08:eb:c8:eb:fc:60:47:79:05:87:57:69:79:c9:7b:
                    83:82:42:1f:6e:fc:19:37:fe:da:24:ba:ac:66:aa:
                    ae:3a:49:c6:c5:52:39:a6:76:01:89:d4:f5:9b:e0:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:58:42:A4:04:9E:99:FE:E6:D7:A0:E8:0D:F9:FC:05:88:CB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/5b2494fc-302b-3660-a42d-c9f17bb1c50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:97:eb:d7:cb:85:d2:a1:e5:14:95:0b:36:c9:c0:e0:71:7b:
         03:f2:c8:40:d1:cb:ac:a4:14:e4:23:cf:63:49:48:66:45:f3:
         eb:87:7f:2c:ed:4f:ba:01:0b:23:92:2e:6b:2e:37:18:27:b2:
         be:9b:67:3c:eb:75:1d:ed:04:6a:df:e2:db:fa:f0:67:9c:a3:
         ac:42:14:fc:f1:7f:ec:43:f6:2c:b3:72:9e:38:fa:17:db:5a:
         2f:c0:6c:59:2d:6f:bb:b4:51:b6:03:70:1f:46:50:c0:f3:46:
         ff:02:1b:48:10:d6:6f:13:23:21:9b:97:e2:8d:d4:a9:ce:32:
         23:06:1e:83:b5:f7:e5:4c:c9:1a:11:16:69:20:d5:8e:77:65:
         c2:28:e1:56:04:79:4e:1f:94:d5:ed:cb:9d:7f:ab:b0:fb:3b:
         63:93:b1:7f:5b:2b:be:34:6d:71:8b:70:cf:f1:e2:aa:82:eb:
         b0:99:2b:cd:67:a0:1c:97:9d:04:23:ed:06:60:fd:cf:2e:40:
         d7:49:7f:29:df:83:b1:6c:fb:7e:5c:21:9e:ce:f5:19:33:a1:
         52:68:39:c9:fa:86:68:20:d9:48:17:25:b8:d3:35:c4:e3:9b:
         58:d3:3e:43:92:32:d5:85:54:5c:f4:bd:62:16:3d:7c:c6:89:
         87:9a:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----