Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115d7a6c-11cf-37c4-bea1-30f97a0bc3b7.roa
File:                     115d7a6c-11cf-37c4-bea1-30f97a0bc3b7.roa (raw, json)
Hash identifier:          czRjLh9hgpwyNU//cMivsUAfTIu0nolkDxwSBGCSfbc=
Subject key identifier:   75:F9:92:59:08:7C:36:ED:AD:A6:79:AB:E4:95:ED:AA:7D:39:FA:82
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583DC65B8A4ED1CDBB1D5ABB18A0
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115d7a6c-11cf-37c4-bea1-30f97a0bc3b7.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:5b:8a:4e:d1:cd:bb:1d:5a:bb:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=7aa2cd1b-d874-4b5f-beba-104ca54fc9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:da:2f:91:ea:ad:05:84:9f:5f:e6:b9:62:2f:
                    f6:00:a0:d4:b6:1d:2a:e5:f7:e1:c5:16:06:32:e6:
                    ad:6b:46:60:a1:e7:7a:66:8b:c6:c0:10:16:1e:14:
                    75:c4:2c:45:8b:f8:ed:50:57:28:77:3f:24:96:80:
                    d0:53:01:aa:36:36:9c:dd:37:41:1f:44:5e:59:1f:
                    0b:18:c1:ec:27:22:d8:be:25:f8:40:34:d4:a7:cc:
                    eb:4d:94:ca:ce:cf:a2:5e:98:36:e8:30:a1:77:ad:
                    68:71:da:86:23:ce:37:21:cf:12:bd:34:c4:6f:84:
                    7a:b1:6d:b8:eb:b2:90:28:50:01:26:54:ad:4c:6e:
                    da:d3:67:82:de:13:e1:d7:48:08:06:24:f3:c2:90:
                    b2:c0:94:8e:1b:9b:48:3f:44:77:4c:5f:f7:d0:4f:
                    6d:e2:ba:40:ba:c6:02:1b:33:17:08:32:d0:ef:cd:
                    27:b2:5d:a5:35:77:fa:38:70:bf:f1:26:e8:81:87:
                    5c:ed:b6:d6:e2:a8:35:5e:62:bc:63:6f:bb:48:18:
                    86:ed:de:fa:42:e6:4d:9a:fc:7b:59:d6:7a:e5:18:
                    1c:94:28:ca:39:fa:b9:a3:0a:fd:0b:1a:d3:44:c0:
                    61:28:2f:42:6a:83:e5:b6:89:12:06:e8:8f:88:1a:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:92:59:08:7C:36:ED:AD:A6:79:AB:E4:95:ED:AA:7D:39:FA:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115d7a6c-11cf-37c4-bea1-30f97a0bc3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:04:a2:df:65:2a:b4:9c:5d:6a:40:73:23:7d:ff:7f:04:69:
         77:6c:70:f1:a5:0c:41:ef:dd:75:de:76:bc:e2:28:8f:50:c2:
         e2:e8:97:b9:14:f4:c7:75:71:4c:fe:66:fd:fd:4e:da:ed:be:
         1f:9e:ec:19:4a:02:07:63:45:26:b0:79:3d:c4:70:e3:42:41:
         fd:29:c1:f3:b1:ee:be:a3:48:da:9e:d0:94:59:a4:3c:3f:91:
         2a:09:35:55:8d:10:59:d1:7d:17:be:25:f4:09:07:b8:6a:c3:
         ca:71:f7:ac:da:71:8c:e7:5e:7d:22:58:ee:7a:da:e7:b0:f4:
         93:9e:71:c3:0f:22:e5:7d:36:53:66:d6:4a:79:5f:c3:2b:5f:
         d1:bd:2b:51:1b:27:b5:a5:ef:97:fb:0e:85:9a:8a:00:a6:bb:
         9c:8f:c4:ca:f5:74:18:5d:4f:e0:93:d6:5f:74:d2:06:f4:64:
         fb:27:5f:15:c3:48:63:fa:e1:b5:34:9b:88:41:d7:e1:32:6c:
         24:98:99:a8:ea:d7:6f:08:2d:79:ee:6b:e1:3e:16:be:86:2b:
         2e:68:fa:a6:1c:2e:60:c9:f4:01:6f:59:50:93:83:9f:3b:0e:
         5f:c7:53:20:8f:36:fb:03:29:21:b0:13:41:34:e9:5e:f2:5e:
         3e:db:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----