Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/a6129d43-874d-320e-a2eb-a9f391b38d9c.roa
File:                     a6129d43-874d-320e-a2eb-a9f391b38d9c.roa (raw, json)
Hash identifier:          jYS7+tpvSQ7hnk5tj7CB5l6Jtg6qnmWbVXKhhv0/F7Y=
Subject key identifier:   CB:68:5B:F3:BD:1C:CC:A7:87:ED:36:49:0C:BE:39:D3:7F:43:5D:80
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583D59215736ED3CEA5C369D0580
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/a6129d43-874d-320e-a2eb-a9f391b38d9c.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:21:57:36:ed:3c:ea:5c:36:9d:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=686b59c0-0819-43cb-b6dc-8022873d00f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:3b:22:44:01:ce:3d:b1:f1:26:03:1c:16:
                    9b:ad:e0:83:7a:66:22:b4:e0:60:cd:ac:72:9b:82:
                    d1:22:6d:83:c1:4e:35:73:28:e3:be:01:96:98:dd:
                    00:0a:92:73:d4:6f:28:ee:95:99:be:a5:1a:90:4f:
                    a1:eb:a0:0f:a6:bb:27:f5:4a:b5:32:ef:84:ff:03:
                    49:b2:e8:63:f4:1c:ee:0b:12:4f:56:df:03:d0:4e:
                    e1:8f:3e:75:cf:db:78:64:1e:35:2c:3c:d6:0b:90:
                    94:82:a8:38:40:9b:40:b1:81:b1:14:cd:d0:ab:59:
                    7a:e5:20:bc:af:e8:19:ca:16:67:d4:7b:f6:4a:2d:
                    30:67:a5:3f:a2:d2:ea:6a:51:f3:79:90:9b:ee:05:
                    23:de:ee:b1:d8:88:c4:db:b2:96:42:6b:75:5b:d6:
                    5e:98:df:8e:86:d8:ab:f0:03:16:d6:b7:82:bb:3c:
                    2a:44:31:e0:00:81:6f:3c:aa:52:a5:c0:f9:62:d3:
                    c4:aa:ed:f2:9a:a0:2f:68:c5:56:6e:06:78:a3:e2:
                    b5:fb:2f:95:10:a6:c4:87:cc:4a:44:f2:31:29:b6:
                    da:27:b0:1d:f0:b5:c2:74:0b:58:78:0a:de:e6:08:
                    b8:4c:ac:76:8c:64:65:59:d3:00:b3:07:fd:96:77:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:68:5B:F3:BD:1C:CC:A7:87:ED:36:49:0C:BE:39:D3:7F:43:5D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/a6129d43-874d-320e-a2eb-a9f391b38d9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:ee:8e:1a:1d:aa:91:e1:c7:cc:9f:89:7a:33:8d:32:14:
         3d:6b:75:37:17:a4:2a:37:2c:01:66:06:2d:6b:85:89:4a:ea:
         c8:98:65:e3:92:1e:42:08:2b:8f:d2:09:4f:e2:47:e5:d3:95:
         44:46:3a:2c:53:59:81:b1:f1:56:21:56:0f:47:27:bd:8f:ca:
         9b:e6:74:04:de:62:87:30:a9:14:60:de:e6:ce:75:9c:49:57:
         f1:f4:96:15:8f:dc:10:9b:d2:f9:5d:52:6c:a4:a4:66:e0:6f:
         b5:74:71:14:ef:de:61:d0:dc:35:dc:18:5e:1e:7f:7a:b6:a7:
         f4:7e:b4:41:bb:59:5d:9f:46:8c:5e:52:68:eb:1e:13:c3:1c:
         2b:d2:66:ae:c9:84:43:c4:1a:c6:76:d4:16:24:96:84:ac:7f:
         0c:2e:f8:f9:d1:9a:c5:66:e1:03:af:8e:dc:86:be:5a:c0:fe:
         b7:27:2b:13:63:1d:a7:97:5f:88:de:66:bf:d9:51:c1:74:85:
         1d:56:fb:58:ec:3d:32:87:42:63:e3:a7:4a:1d:a7:22:e3:18:
         2e:46:dd:30:24:07:d0:41:89:9c:5d:9a:82:74:1f:34:10:92:
         00:1e:f8:12:2a:9c:c8:a2:6e:bf:64:44:11:b2:de:48:6b:02:
         fa:d0:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----