Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/8251f047-de64-3b3a-8dc4-ece715f6448d.roa
File:                     8251f047-de64-3b3a-8dc4-ece715f6448d.roa (raw, json)
Hash identifier:          C1Air7rqjFRzBspo7aXCbXpUhAftiY8nhRgYs+R6wfw=
Subject key identifier:   62:86:9D:C7:03:CA:EE:F9:0E:38:CC:A6:20:FC:FE:D5:1E:09:6E:DF
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583CDBAD66BCAD2B43D3FCBE1D80
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/8251f047-de64-3b3a-8dc4-ece715f6448d.roa
Signing time:             Tue 08 Feb 2022 05:00:00 +0000
ROA not before:           Tue 08 Feb 2022 05:00:00 +0000
ROA not after:            Tue 15 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:ad:66:bc:ad:2b:43:d3:fc:be:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Feb  8 05:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2022 GMT
        Subject: CN=13db167b-5da9-4a48-8bb1-4109a7a5f9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:78:e4:ea:7a:c8:b9:f1:87:c6:cc:dc:d8:92:
                    fe:7c:58:a9:d7:dd:94:7a:d6:52:9e:e6:14:7c:24:
                    bc:a4:f1:5d:c5:5c:17:df:54:9d:99:ce:65:5b:77:
                    37:bf:6e:20:24:6c:bb:c5:50:ec:03:34:c6:dd:25:
                    67:09:96:46:ef:d9:53:83:bf:ec:88:0f:c7:70:12:
                    0d:e9:ed:e2:32:c1:19:bb:f8:01:03:ec:6e:91:05:
                    dd:4d:b9:4a:ed:34:4b:48:5d:75:58:09:95:62:59:
                    ee:ca:ed:c5:08:92:58:ad:62:06:9a:b6:30:1f:71:
                    eb:ef:53:c6:70:fe:87:b7:10:69:f9:e5:6e:7a:6e:
                    63:63:23:60:d3:a9:94:92:ad:18:ab:79:4f:d2:de:
                    13:61:ff:b4:f9:b8:9b:40:9e:67:2f:9a:87:72:4a:
                    de:ee:59:57:09:b3:5d:40:4d:f1:74:6c:9e:f7:05:
                    16:f0:3e:04:c5:26:42:d3:08:32:a7:7a:d3:b2:61:
                    18:b2:75:5f:7b:18:d7:43:b9:9a:14:a2:93:98:f0:
                    e9:49:da:60:30:a0:bc:1e:c0:c8:c5:cb:b3:d9:a4:
                    3c:0f:6b:28:e9:34:b8:a9:c8:52:c5:68:e4:4a:ea:
                    8a:92:77:0b:92:6c:bf:ce:bc:47:fb:e2:34:22:da:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:9D:C7:03:CA:EE:F9:0E:38:CC:A6:20:FC:FE:D5:1E:09:6E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/8251f047-de64-3b3a-8dc4-ece715f6448d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:d8:97:cc:b7:d6:b2:58:fc:25:84:c6:19:9b:07:e3:78:
         b9:90:51:53:ca:de:8d:a1:94:5b:b3:80:42:29:a7:ac:21:af:
         33:5c:8c:b5:ba:58:65:44:f4:80:da:d3:45:b3:6e:c5:1e:d2:
         77:0c:e1:e6:fc:74:d5:67:61:1f:8e:96:4c:36:35:d9:f0:f6:
         9c:91:b4:70:30:e2:0f:61:55:a9:98:69:72:1d:9c:30:17:c7:
         5b:3b:ad:8a:07:03:f1:fe:2e:53:21:dc:4b:2d:fd:d6:68:b3:
         33:d1:13:5d:f6:06:42:09:14:53:41:9f:14:cb:5c:61:9e:2c:
         bd:0f:7e:f0:57:cd:a5:26:83:1a:88:e1:15:d2:b2:36:b4:c0:
         70:67:68:d2:0b:02:71:34:fc:b2:5d:d1:6c:46:c5:25:13:27:
         8e:fc:3e:fb:69:b5:33:82:30:12:89:91:85:58:41:35:1e:15:
         12:8c:d7:d7:94:1e:1d:81:93:6b:4f:38:83:a6:c7:b2:2a:e6:
         df:6d:b8:c8:b6:00:b9:4a:42:d8:1f:62:da:be:77:97:84:46:
         4f:70:52:57:0c:10:f4:07:fa:58:15:89:cc:b2:8c:9a:39:de:
         77:13:9b:39:b0:8b:4e:67:99:96:a0:ab:ab:73:79:96:d7:7a:
         56:bc:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----