Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/b314d71c-3d08-38c2-b588-8a6e4344c19e.roa
File:                     b314d71c-3d08-38c2-b588-8a6e4344c19e.roa (raw, json)
Hash identifier:          RKkL3ofysTkZo/MFlof4ddOEMLqLeTumRP1eDSZBHnY=
Subject key identifier:   86:A1:5E:3B:81:3A:97:97:01:2E:BA:F9:F6:0F:3C:48:10:B7:0C:7E
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583C8D736409ABFD1D2B31592B00
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/b314d71c-3d08-38c2-b588-8a6e4344c19e.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8d:73:64:09:ab:fd:1d:2b:31:59:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=13863c80-fcaf-4c19-be01-51ac93635693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:2a:2e:93:31:e7:d8:38:d6:6d:ef:69:cf:
                    17:b2:58:95:a6:de:31:29:22:fa:c5:31:87:47:69:
                    33:c4:e9:9b:e4:b6:9c:4e:5a:88:60:e5:3c:95:85:
                    ce:c7:72:88:16:21:b9:28:5f:04:e1:8b:27:4d:01:
                    2f:d9:98:8d:a7:45:5b:6d:ad:22:7c:4f:03:58:bd:
                    24:01:cf:e7:9d:6d:b4:3f:15:c4:0f:6d:7b:0b:d4:
                    70:44:52:04:c7:e3:d3:38:f9:7c:37:85:7b:91:91:
                    8f:56:42:8d:ab:a8:f8:b8:62:6d:71:33:ad:45:19:
                    b9:bb:2c:71:bb:38:f6:1e:1f:92:63:e0:4e:a3:67:
                    ed:d5:76:3c:e1:74:96:9e:e7:86:5b:32:0b:74:86:
                    62:17:89:bf:ce:aa:85:c6:77:2b:d7:59:bb:ac:5d:
                    43:e2:f1:eb:ef:f4:b0:b2:fa:56:cf:b5:50:4f:36:
                    05:1f:62:56:39:bd:07:50:9a:83:a3:f8:1e:1e:d7:
                    2b:aa:d1:a8:65:58:61:5a:0c:a3:b5:fa:ef:77:c4:
                    f8:da:9b:16:87:1a:ba:23:b2:7e:15:5b:47:e2:53:
                    5a:d8:9f:8d:78:b1:67:fa:4b:92:ad:8c:b3:7c:d2:
                    42:1d:20:17:53:4d:55:f6:41:bd:9d:a7:9f:9d:9f:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A1:5E:3B:81:3A:97:97:01:2E:BA:F9:F6:0F:3C:48:10:B7:0C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/b314d71c-3d08-38c2-b588-8a6e4344c19e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:37:3f:53:aa:27:1e:14:db:0c:9d:15:35:31:83:9f:b5:9e:
         04:5d:4d:fc:f9:5c:55:b2:37:6c:7f:4a:0f:a9:4a:21:b3:d9:
         d6:8f:a5:58:c6:ce:6a:be:a1:71:d7:3c:bf:96:e0:27:d5:25:
         07:66:68:41:30:63:c2:49:bd:5c:a9:f4:79:83:5e:3c:d2:76:
         47:94:c7:1d:89:fd:6c:91:18:3a:7a:cd:86:9d:08:c4:3a:5b:
         a6:53:7c:63:27:02:34:a4:39:8f:fd:7a:c8:d8:7b:27:5f:a7:
         58:c7:df:64:79:2b:a5:8c:42:b7:ad:6f:7d:fa:e4:04:df:47:
         e8:4e:96:62:91:fa:2c:ba:75:4c:07:df:2e:c7:ee:e3:15:97:
         03:fb:76:af:2b:1c:0e:d2:41:d9:73:e9:3f:55:a4:f7:ba:63:
         80:70:50:e2:22:41:50:50:df:4e:ab:ff:8d:75:1f:55:43:44:
         11:d9:fd:bd:14:46:e9:53:4f:99:5c:04:2b:cf:fb:38:00:3e:
         26:97:23:84:fe:3f:40:fa:23:52:b9:87:c4:2e:3f:6b:77:d7:
         9e:33:81:62:ec:0f:1b:02:a0:64:b6:99:99:da:92:c9:26:d1:
         bc:4a:ef:7b:ba:ea:79:d1:5b:1f:33:0d:98:57:ad:24:07:31:
         78:27:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----