Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115fe93f-9ffe-38fc-9c5f-4da783889825.roa
File:                     115fe93f-9ffe-38fc-9c5f-4da783889825.roa (raw, json)
Hash identifier:          nZ2TMgK/3jkievFN6OlCoJUM8csj61/GBaww3ND73Qc=
Subject key identifier:   79:BE:47:87:15:D2:4A:3A:51:E4:70:C1:1A:6C:88:8C:95:FB:E4:37
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583F4D7D86DA3450160C11F50A42
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115fe93f-9ffe-38fc-9c5f-4da783889825.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 12:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4d:7d:86:da:34:50:16:0c:11:f5:0a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Sep 19 12:00:00 2022 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=ab05e7c5-9f0b-4ed1-b528-1b0c6a348977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:14:ce:f8:17:b1:38:17:2c:fd:a4:4f:91:
                    28:86:c3:04:ab:6d:b4:e5:f5:b4:96:89:4e:be:2f:
                    57:9a:5d:e0:e3:a5:d6:da:ab:64:7b:8d:79:11:f7:
                    c9:e1:eb:49:17:26:c2:5b:d2:eb:b9:5a:61:43:52:
                    eb:24:4c:ba:86:5f:e9:4d:13:cd:b4:85:9c:b5:bb:
                    c0:bb:d4:14:e2:33:df:05:80:46:12:85:ab:6d:55:
                    89:e4:53:bf:9a:cc:f7:e0:e8:b9:2f:c7:20:54:09:
                    15:bf:a3:9b:54:02:17:28:a0:ac:52:12:ce:3a:4e:
                    c4:21:3b:5c:3a:a0:24:fc:43:a6:1a:54:ac:19:da:
                    03:3a:85:e1:fb:27:7b:5d:7e:41:89:75:3e:3a:d2:
                    2f:45:3e:7c:da:46:09:be:7b:cb:8b:0c:1f:27:48:
                    98:e1:f3:ce:3b:35:c8:39:f8:c2:c6:d8:3f:9a:3c:
                    74:6d:06:98:54:f4:97:6a:fa:c4:7c:fe:6d:5b:c7:
                    ac:44:ee:43:2b:59:d7:26:3c:e2:cb:a0:83:33:08:
                    ee:47:71:ad:fd:cc:ca:dc:29:a0:c6:6e:e2:51:d7:
                    dd:d0:96:d3:07:f1:f8:3a:78:82:6e:e4:e3:9a:12:
                    ff:bb:a3:d1:b2:74:3d:1e:aa:23:7e:2e:01:d6:4a:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:47:87:15:D2:4A:3A:51:E4:70:C1:1A:6C:88:8C:95:FB:E4:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/115fe93f-9ffe-38fc-9c5f-4da783889825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:14:31:5f:ba:68:67:c8:1b:c9:21:88:a6:1b:4b:17:c1:
         d1:bb:ce:71:6a:c2:3e:dd:0c:bf:73:81:0a:9a:57:9d:2a:1a:
         e4:55:ab:f7:f6:16:38:e9:b6:3e:48:4e:e2:df:fa:d4:ce:29:
         60:38:9a:d6:40:94:79:e1:5d:18:9a:52:64:08:e7:44:32:3b:
         4f:9d:f7:11:9f:dc:54:48:60:12:95:31:8e:54:21:57:9e:0e:
         ce:a1:0e:40:fd:09:fb:3e:7d:c7:0f:3e:d4:e5:a7:f9:3c:f2:
         6f:e3:15:15:aa:d3:12:22:61:ad:80:b9:af:6a:15:18:cb:20:
         46:c7:00:ff:32:3e:f3:df:d5:9e:b8:00:aa:a3:b9:9a:54:fa:
         87:bf:d8:16:e1:ad:4f:54:e5:0f:9c:6f:9f:6c:a0:ff:b3:f1:
         da:6d:b2:52:c2:e5:09:cb:31:d7:fe:4d:38:f1:07:f3:00:53:
         46:8c:d7:82:fb:6a:fd:44:0c:f8:cd:ce:67:ae:cd:42:15:f9:
         49:bf:57:ef:9a:10:72:92:14:1d:20:7a:b2:6d:f5:e5:99:2b:
         35:76:3b:ee:0a:09:29:14:02:b0:55:a3:33:8b:d2:aa:66:35:
         66:5a:22:af:15:88:7d:82:3e:78:e7:d5:06:9e:5c:1e:58:27:
         82:72:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----