Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2a5f3905-3777-3e2b-ad41-cd2ed0d40016.roa
File:                     2a5f3905-3777-3e2b-ad41-cd2ed0d40016.roa (raw, json)
Hash identifier:          X/wVlYNX1Dxqa57GgLervKi9FLXCFMDkOIVAhTIBKHQ=
Subject key identifier:   CF:AF:AA:72:E8:50:95:CC:06:D2:7A:23:D8:54:2B:7A:6B:CC:58:48
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583ED8268DBE7F8FA6BA168591D0
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2a5f3905-3777-3e2b-ad41-cd2ed0d40016.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:26:8d:be:7f:8f:a6:ba:16:85:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=eb991ea5-692e-479b-9891-10aa2e8d8f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:d2:5f:8b:1f:a8:ca:73:a0:44:4d:66:7d:
                    ad:5f:77:0f:16:4f:59:86:5c:85:ae:a5:7a:9b:6c:
                    6b:f4:81:61:11:13:9a:cf:f3:4c:43:93:4e:e8:e8:
                    a7:e3:32:58:44:b7:7f:fc:a8:eb:66:2c:6e:8f:32:
                    5c:3f:39:41:0a:04:f9:aa:ef:0e:0c:c4:e1:08:90:
                    1b:5a:d7:00:92:ea:de:7d:2a:9d:77:b3:06:b7:5a:
                    a5:21:7b:d2:a5:5a:7a:dd:15:a0:65:6d:aa:78:9d:
                    ed:59:f9:44:af:13:06:c3:b9:10:6d:94:41:ed:31:
                    b0:2d:15:ee:9b:ad:d7:26:94:63:c5:39:1e:91:77:
                    0a:e9:45:51:c8:d4:87:68:ed:0c:51:df:76:6d:97:
                    26:d0:fa:4a:12:8e:1d:79:c1:07:58:fc:34:6b:f1:
                    61:a3:bc:5e:3d:c8:73:f4:46:7f:40:24:85:65:3f:
                    2a:72:9a:5d:fd:64:09:d5:37:5f:49:b5:fb:39:fb:
                    95:41:02:b6:9b:cb:5f:1a:83:d9:98:ab:35:29:73:
                    8b:4d:29:8c:c9:e6:fb:db:cd:19:59:cb:90:2a:0f:
                    29:3e:b3:3a:d7:98:f9:58:02:c6:97:18:dc:09:6f:
                    e5:e6:bc:b4:cc:24:16:38:56:09:ed:54:41:cd:be:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AF:AA:72:E8:50:95:CC:06:D2:7A:23:D8:54:2B:7A:6B:CC:58:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/2a5f3905-3777-3e2b-ad41-cd2ed0d40016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:70:52:20:d6:fe:00:35:25:2f:3f:56:20:5d:fb:70:63:
         e1:41:52:68:49:a5:5c:4d:71:c3:d4:fd:30:18:fa:dc:21:6f:
         f0:8f:4c:48:b6:e5:64:1e:4f:ea:ea:fa:3e:3c:11:76:d1:5e:
         ae:86:0f:c0:24:c3:87:be:07:6a:a5:1b:c4:d2:2c:b2:9b:a0:
         3b:6e:98:f5:09:df:e9:aa:ca:87:2e:b2:b9:8d:26:2f:24:36:
         e1:a5:c3:ad:ff:4f:9e:74:57:09:ef:97:5a:02:26:35:ba:1f:
         ed:86:8d:37:ff:2f:e7:c9:d8:e4:0b:42:ed:16:37:2d:45:f1:
         8e:f3:3d:d9:93:f8:41:36:3d:5e:04:a7:2a:fb:24:a5:df:57:
         cf:4b:b5:b3:b5:ed:dd:27:51:41:dc:f4:b2:f6:ac:5f:5b:23:
         f9:b9:45:68:42:5b:ff:e5:c0:d7:07:5f:6a:e0:10:81:66:9b:
         41:1b:94:f5:66:9c:09:47:df:e6:7b:d9:00:a0:6d:2c:86:31:
         32:ea:b0:bf:1b:f8:29:0d:bf:5e:71:e3:ca:48:cb:ee:d2:d9:
         c3:e3:29:e3:cc:6d:20:3d:c1:27:d5:4a:0a:6f:f8:7c:1e:49:
         ca:2c:a1:11:70:6b:80:a8:0e:35:8f:c4:ca:69:ec:08:e9:52:
         ba:05:31:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----