Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/56de4b70-869f-3c31-9d8c-6acb73b86dda.roa
File:                     56de4b70-869f-3c31-9d8c-6acb73b86dda.roa (raw, json)
Hash identifier:          q+LxzqwKO5fp64YvXEwPBZwvmyQ4gIGp9Hl2zoz59jw=
Subject key identifier:   72:F5:76:57:A2:81:5F:89:DD:C6:42:AA:15:49:F8:18:80:53:02:DE
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583D51044EAA4AB92FC382AE3280
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/56de4b70-869f-3c31-9d8c-6acb73b86dda.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Tue 26 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:04:4e:aa:4a:b9:2f:c3:82:ae:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Apr 26 04:00:00 2022 GMT
        Subject: CN=3ac886b1-b802-47b7-ba3e-63dedcf24d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:1f:1a:c6:8d:71:f4:ff:36:29:18:b5:f4:
                    d6:e8:4f:32:4c:71:7d:33:61:a0:00:69:6d:28:0a:
                    8f:6b:72:30:15:37:71:a3:f0:bf:bb:05:4e:90:3f:
                    23:40:ea:80:a6:c8:4c:c1:aa:65:24:67:e1:f4:69:
                    73:eb:03:78:26:87:93:b9:f7:a3:f4:d0:81:50:2e:
                    6a:56:39:3b:0a:1a:7e:1b:85:d8:de:e4:a1:58:7d:
                    5a:c7:f5:93:50:54:f9:a2:47:5c:d8:24:5e:37:8c:
                    bd:32:92:68:5c:d2:60:fd:a2:b9:a8:19:8a:ba:d4:
                    c8:42:3e:84:48:79:e4:83:05:c7:b4:71:f6:fd:3a:
                    1d:65:47:e4:ab:62:c7:c0:98:54:20:8e:e5:1b:60:
                    16:a9:98:b2:91:ab:23:55:86:94:e6:a1:98:e6:a4:
                    0a:77:e5:c8:39:6c:83:9c:66:11:09:bb:d7:a9:f0:
                    33:49:10:93:96:cd:df:08:09:f7:f3:d2:d1:a2:82:
                    a7:00:40:2b:a6:4f:22:1a:d1:03:71:61:6a:66:55:
                    f4:d9:30:34:83:bc:9b:3d:46:73:e3:8d:f5:90:82:
                    1c:5f:0a:d1:b3:1b:00:2c:79:06:2b:be:a4:a9:b4:
                    60:01:1a:8f:1b:c2:93:08:a4:81:2f:d6:3b:8c:47:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F5:76:57:A2:81:5F:89:DD:C6:42:AA:15:49:F8:18:80:53:02:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/56de4b70-869f-3c31-9d8c-6acb73b86dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e0:1f:ac:bc:f5:f2:46:28:e5:70:f0:dc:60:c9:b9:78:b0:
         a9:02:04:3b:89:33:85:44:6d:b1:1d:25:0d:c4:cf:8e:dc:d0:
         06:a5:8a:95:7e:73:18:b5:bc:3c:35:ba:fb:dd:e4:aa:ab:e1:
         1f:42:5f:73:63:82:64:33:68:64:2f:8d:44:1a:db:99:68:ba:
         05:d1:cc:78:7d:55:f1:30:e9:ed:14:be:98:6f:f6:4e:45:49:
         57:7d:0c:6a:0a:01:21:3b:e0:2c:a9:4b:22:c2:ad:48:c6:eb:
         9a:9c:2d:cd:61:9b:5d:20:67:f8:77:fb:a5:30:05:71:91:b4:
         b4:82:0a:fd:37:21:2f:d8:62:4e:ae:4b:1b:a1:a7:59:65:f8:
         20:03:f6:b3:2e:e9:d2:84:39:5d:d3:c8:27:bf:47:e7:27:6f:
         9f:a0:df:4c:55:a6:66:e0:29:f8:99:5f:f7:4d:47:17:3f:cb:
         38:2d:29:56:a5:a3:ff:45:40:91:3a:83:20:7b:89:90:7c:25:
         f1:d3:6c:2f:81:d0:f2:2d:bc:61:ed:d2:72:66:c2:61:6b:0d:
         1b:81:99:cd:d3:b4:64:70:a8:f0:ea:b2:52:0b:68:63:4b:17:
         dd:0e:61:58:3f:02:53:25:62:fc:66:fd:e8:99:42:4d:8e:a2:
         c3:59:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----