Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/ca4d5d12-a655-392e-8eff-2346c8f26919.roa
File:                     ca4d5d12-a655-392e-8eff-2346c8f26919.roa (raw, json)
Hash identifier:          aLgjCIgtdOzhkRA3sbm0yW4a+kTUhvS5Umg5RkM7DBk=
Subject key identifier:   75:F3:66:8C:DE:20:32:33:F9:32:5E:F8:F9:70:55:1B:15:97:01:BE
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583ED8267447309D37FFD1AB9728
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/ca4d5d12-a655-392e-8eff-2346c8f26919.roa
Signing time:             Mon 08 Aug 2022 12:00:00 +0000
ROA not before:           Mon 08 Aug 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:d8:26:74:47:30:9d:37:ff:d1:ab:97:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Aug  8 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=bec12973-b5f8-461f-b31d-5b2741e0b9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:6d:04:d5:9d:20:a6:5e:81:ac:47:bf:42:
                    69:1b:0c:11:f2:db:b4:cb:48:34:69:66:01:70:b0:
                    37:da:46:fc:b7:89:13:04:11:73:4c:5b:a7:ad:29:
                    8e:b9:12:c6:62:e8:63:1a:59:27:04:04:c5:01:a7:
                    69:4d:e5:74:d2:c8:3e:1d:64:dc:40:0d:75:e0:da:
                    d6:b9:2c:eb:42:d1:d4:9e:91:c4:5d:d9:bd:32:c1:
                    5a:8d:3a:ec:8b:be:ce:e9:dc:e2:a6:a6:76:df:ab:
                    24:39:e5:9b:51:54:0e:4c:97:0f:3a:44:ab:af:5c:
                    61:98:9e:05:44:0d:f2:ee:9f:cd:3f:bf:1a:23:20:
                    9c:5f:a1:1d:45:15:df:f5:5c:7d:43:fb:15:ac:cc:
                    01:8a:2a:27:45:b2:a3:3e:e9:a6:c7:f2:29:3d:4d:
                    57:69:57:1d:a2:0e:37:2e:a7:16:bc:a8:79:b4:0a:
                    64:78:98:97:63:a8:fb:7e:81:93:60:41:2e:6c:79:
                    28:60:34:90:63:42:8a:c6:32:35:0a:dc:5b:8a:88:
                    94:de:9f:09:c6:d7:30:73:ad:0a:69:d8:b9:44:2c:
                    0e:86:ba:6f:6b:b8:6f:4f:5b:4a:58:7f:f7:3e:98:
                    61:f8:a3:90:4e:3f:3a:cb:f8:96:18:0c:eb:93:46:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F3:66:8C:DE:20:32:33:F9:32:5E:F8:F9:70:55:1B:15:97:01:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/ca4d5d12-a655-392e-8eff-2346c8f26919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:d5:f9:f2:6f:4f:d7:8a:47:0d:f0:d2:e2:46:95:7e:9c:
         ef:bf:a7:f0:ba:d4:84:67:37:be:46:c7:17:93:74:9f:1e:8b:
         ac:34:e8:67:94:01:df:01:c1:cc:d1:4b:33:aa:f4:59:1a:af:
         e1:bd:68:12:14:5a:1a:25:da:85:e4:fc:28:da:e0:07:1d:df:
         fa:c3:71:a3:cb:f1:ac:2e:03:f1:a4:be:79:eb:67:bb:d9:23:
         a3:49:a1:d8:99:c3:5f:b8:11:4d:14:33:be:be:b4:bb:5c:9d:
         f0:27:eb:ea:48:7e:85:14:d2:db:a2:7f:24:37:fc:6f:7e:59:
         f5:55:e7:8b:05:e6:61:69:1d:1d:a3:55:33:39:39:49:fc:09:
         86:7e:22:2f:4c:e2:4c:03:0c:11:46:43:63:f1:4c:04:90:a6:
         dc:b8:f3:6b:f7:c3:77:d3:74:01:28:6b:2c:d5:87:42:26:35:
         ec:4f:2e:8e:ea:2d:80:13:de:ab:ce:b7:38:e4:d4:1a:bc:28:
         e4:85:b1:b2:a8:c0:a0:3d:07:66:84:90:e2:68:fd:4e:54:4e:
         cf:a6:e3:93:16:db:93:86:3a:2e:b8:1c:b2:89:65:e6:57:cc:
         81:69:c5:b9:d5:be:a9:ec:b0:2f:d6:ed:fb:25:18:ee:6b:d6:
         18:98:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----