Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/c1879301-f5cd-381b-9fe9-2e55049223c2.roa
File:                     c1879301-f5cd-381b-9fe9-2e55049223c2.roa (raw, json)
Hash identifier:          UCZA4qp5HHFrRSlSsWMrUHQ3NaQ7Pd5Dsr5nfkhEdhk=
Subject key identifier:   5D:33:EB:82:07:54:4E:41:AC:07:3F:E9:4C:F4:BE:F2:79:72:61:CD
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583DC65B506FBC75FBD3E40EF0A0
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/c1879301-f5cd-381b-9fe9-2e55049223c2.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:5b:50:6f:bc:75:fb:d3:e4:0e:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=f290e35a-87cc-4150-b9db-bfbd3a309344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:4e:79:9d:c9:85:d0:62:b4:32:be:1d:05:
                    e8:ee:d7:5c:13:36:89:48:d0:93:21:d0:95:a3:30:
                    9a:b4:54:de:38:bb:12:43:f9:9a:35:73:22:0f:f3:
                    9b:7f:7f:16:1b:7f:d8:52:2a:87:8e:bb:bb:37:ec:
                    27:f5:0f:e3:10:e8:7f:30:26:24:e8:92:82:d6:d8:
                    d2:74:29:61:f7:98:99:da:cc:87:b2:e7:3f:13:2d:
                    f6:cd:06:40:2b:c1:68:b8:56:13:db:ed:dd:67:2f:
                    08:28:5e:f6:54:75:ef:7a:49:93:97:4e:f0:88:74:
                    7d:1b:c6:2b:fd:2f:3d:f4:26:a9:c7:a9:2f:9f:fd:
                    09:42:20:28:da:9e:c0:41:54:3a:46:05:39:25:60:
                    27:52:38:06:e6:11:17:ea:22:6c:79:3e:69:8f:a9:
                    aa:e7:f3:ad:ce:0c:27:ae:13:42:fc:33:e8:01:5d:
                    89:90:4c:ab:b2:c4:08:8a:fb:68:d6:3e:b3:0c:43:
                    e1:a6:51:61:f5:76:81:3a:dd:a0:81:57:b9:06:f4:
                    82:62:25:a5:72:25:d2:16:71:76:56:af:bc:27:aa:
                    4c:04:13:e1:92:4b:35:af:08:b0:d5:68:f0:79:7a:
                    07:b5:52:7b:40:73:cd:a8:14:82:5b:91:47:01:82:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:33:EB:82:07:54:4E:41:AC:07:3F:E9:4C:F4:BE:F2:79:72:61:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/c1879301-f5cd-381b-9fe9-2e55049223c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:69:89:34:a5:f7:54:b7:82:fa:d5:87:6e:f0:0c:77:65:d2:
         d2:ae:b4:26:2f:8f:1a:32:c0:d8:7b:b6:94:1f:84:df:66:42:
         4f:be:23:db:49:0c:9f:81:77:ee:b2:7d:40:d2:44:bc:0f:f0:
         9e:3f:29:fe:69:38:04:0d:7b:fb:a4:8c:7c:b7:94:bc:43:b8:
         b1:ce:e6:07:61:a2:9e:5c:9b:13:51:c6:e4:03:a6:ee:29:df:
         60:d5:e9:4f:53:75:73:43:81:6a:a2:08:2c:6e:95:8c:e7:fa:
         ad:25:91:e6:fe:b6:6f:04:8a:e5:91:b7:06:58:46:a9:17:2d:
         68:09:b2:1d:a6:f2:c7:c7:88:a0:e7:c4:bd:b9:c4:2f:2d:95:
         85:b3:ce:19:74:b0:5a:35:ac:ce:33:d9:74:6c:bc:d4:64:2d:
         fb:bd:ed:b4:b3:31:a0:47:87:ca:4a:21:14:cb:56:29:f1:b3:
         4d:8a:45:b1:2e:f8:c6:ce:26:78:c5:d8:24:54:99:8c:33:db:
         d3:c9:28:99:6f:4a:e3:fb:05:8d:e8:db:78:11:87:2d:04:9b:
         ae:30:a8:e1:c9:e9:35:9b:56:9b:ed:d8:ca:83:a7:02:de:1d:
         64:15:10:61:c0:39:2a:47:be:de:86:01:f5:31:82:0e:48:cb:
         3a:03:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----