Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/f03876ee-cbbd-37cb-93f5-5f78753b173f.roa
File:                     f03876ee-cbbd-37cb-93f5-5f78753b173f.roa (raw, json)
Hash identifier:          QgtzjhZ3ATIKgYl87bMTBcDHEsjbZ+FU0F9ca2I0hM4=
Subject key identifier:   99:4F:BB:7D:87:AA:D3:EA:5A:D0:1E:2D:F2:49:CD:FC:54:0E:50:85
Certificate issuer:       /CN=66da5668-93e1-42c6-ade5-962632fe800a
Certificate serial:       010D0C9F4328583FA5C7A391F6008BBBB7A33A80
Authority key identifier: 17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/f03876ee-cbbd-37cb-93f5-5f78753b173f.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     54113
IP address blocks:        2606:2cc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:c7:a3:91:f6:00:8b:bb:b7:a3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da5668-93e1-42c6-ade5-962632fe800a
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=13142425-8030-4bae-8217-355042489c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:38:3e:d8:c7:69:13:75:1d:80:c2:6d:01:
                    c8:1a:72:68:d5:0e:c5:4b:ab:b0:f9:bc:a1:21:74:
                    bd:46:b8:07:3a:d8:04:92:99:4d:10:72:e6:0f:6f:
                    1b:87:85:54:99:d8:ed:71:d1:5a:8b:52:b6:20:bb:
                    a3:d6:3d:f3:e3:d2:80:39:5f:51:7b:30:ed:e8:0e:
                    77:07:a3:60:b7:4d:68:47:3d:80:c3:cd:98:ba:04:
                    6c:e0:d0:31:56:c6:d3:1e:fc:82:c0:41:f3:33:9c:
                    16:26:02:8e:a7:7d:17:b2:a9:c2:98:6d:c9:1e:1a:
                    89:87:35:87:1e:1a:c1:21:dd:4d:87:e6:66:8e:0f:
                    f7:2a:8d:f4:a8:af:0c:14:a1:f3:f7:2b:83:b5:d1:
                    84:e0:7b:aa:e1:bd:10:96:70:34:d0:44:23:61:df:
                    52:98:a9:df:0c:51:13:e0:42:4e:4b:18:00:b0:d2:
                    0d:b3:77:f3:2e:00:30:c5:5e:a2:0d:bd:98:4f:a8:
                    7e:5d:4f:73:4b:76:d3:75:a9:91:9f:00:25:8f:cc:
                    7c:63:59:3d:5c:f5:9e:f0:56:f5:34:21:63:9f:f5:
                    68:fa:83:f9:01:77:27:09:c1:df:69:bd:1d:ac:c4:
                    df:1f:a0:ea:5a:57:bb:89:05:1b:29:57:b3:32:b1:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:BB:7D:87:AA:D3:EA:5A:D0:1E:2D:F2:49:CD:FC:54:0E:50:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/f03876ee-cbbd-37cb-93f5-5f78753b173f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a/66da5668-93e1-42c6-ade5-962632fe800a.crl

            X509v3 Authority Key Identifier:
                keyid:17:59:A5:6E:DF:B3:DE:D7:0A:20:4C:E0:40:C4:8D:52:8F:84:B8:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66da5668-93e1-42c6-ade5-962632fe800a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f2:8d:e3:26:69:d8:22:70:41:6a:54:75:d3:89:56:36:a9:
         d2:bc:61:d4:cf:00:5f:83:5c:57:05:97:d3:b9:3a:66:a1:03:
         af:eb:cc:2a:c1:6c:f4:3b:9c:5a:b6:54:60:c2:6a:a6:54:09:
         6c:ad:6d:f5:2a:c4:69:06:4c:ae:cf:b1:97:45:2e:64:72:25:
         40:c4:cb:6c:ea:b1:73:1f:40:8f:5e:49:82:b8:0a:c1:45:84:
         f4:5e:c7:61:3a:e3:3d:12:5a:95:6e:5f:f4:e4:aa:fe:eb:bc:
         71:39:2b:93:99:65:b6:cb:17:13:cc:ee:85:c2:1a:c8:7d:c3:
         79:5b:ff:32:49:98:f7:72:32:10:f1:64:40:9e:8d:65:19:e5:
         45:15:a3:eb:20:b2:47:04:0d:c5:d1:ee:3d:38:e4:38:04:d6:
         a6:13:46:ed:4f:eb:b2:c1:e6:12:a2:84:49:79:01:75:ef:21:
         cb:e4:0e:cb:3f:f6:5a:95:89:88:38:d7:13:bd:22:df:8b:f0:
         f9:2f:0b:89:23:63:b9:c2:f7:67:19:9f:c9:9e:c5:bf:48:ac:
         05:c2:0b:48:54:2e:78:95:b4:02:28:78:03:90:34:c0:23:f3:
         41:cd:7b:e0:59:9a:ae:a7:11:af:83:2f:37:23:20:9b:1f:1b:
         1d:e1:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----