Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e0e76070-5db3-344e-86b8-46f9017584a6.roa
File:                     e0e76070-5db3-344e-86b8-46f9017584a6.roa (raw, json)
Hash identifier:          rSv5U0Cpa5HEn6EF31+T+qQv63vkjBPyCYOg8LGkgck=
Subject key identifier:   1C:32:3C:FD:01:A7:FC:2F:F4:78:CC:75:6C:7C:EA:BD:6B:47:D0:1B
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583F9BD56337D80FE1D35E6CBB80
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e0e76070-5db3-344e-86b8-46f9017584a6.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9b:d5:63:37:d8:0f:e1:d3:5e:6c:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=db2f6df1-9162-45a0-af6e-b46b6ccaf8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:76:4f:53:6e:f0:b1:3d:f2:ae:d3:8a:10:
                    90:ed:b6:95:0b:ad:7a:ce:c6:ab:2c:0a:e9:cc:3f:
                    5f:7f:e0:42:1e:d3:13:5e:f9:c7:35:52:55:e8:27:
                    7e:68:7b:c6:6b:f2:aa:21:18:78:4b:b6:08:35:47:
                    49:23:dd:f3:a2:d4:20:b3:18:3c:95:2e:47:07:ac:
                    bd:71:ae:6b:f3:ee:d9:4a:57:50:f8:d1:19:8b:c8:
                    91:c2:64:30:52:f2:77:21:0e:70:7f:71:a0:25:b1:
                    2d:d9:e4:89:1c:cf:99:54:08:bd:62:2a:6c:4f:4e:
                    e6:8b:ed:ab:7e:68:d2:13:36:6c:74:b3:12:f6:91:
                    f7:9a:26:60:ac:43:02:b5:00:f8:43:90:57:0c:66:
                    70:5a:a4:60:d9:33:8b:75:a4:ff:14:0b:50:a5:22:
                    59:91:0e:2d:5c:5f:43:de:b9:a2:d5:4f:c6:57:9a:
                    13:4c:e8:7f:de:5c:a5:88:aa:05:68:bb:77:41:35:
                    14:3c:cc:49:58:c7:65:bc:9d:a5:43:5b:e1:3b:6d:
                    8d:e7:32:2d:a8:8a:5b:ba:cc:aa:8a:3b:6c:1f:bd:
                    4b:10:49:6f:1b:da:e9:1c:a2:b9:42:31:08:fc:c1:
                    24:7e:c2:11:d7:7b:84:d9:d2:29:37:71:06:49:13:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:32:3C:FD:01:A7:FC:2F:F4:78:CC:75:6C:7C:EA:BD:6B:47:D0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e0e76070-5db3-344e-86b8-46f9017584a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:aa:50:1d:89:48:b4:70:c2:ff:5a:ee:c6:6f:2b:97:c3:fd:
         67:9f:b4:3f:1a:52:85:78:80:33:a4:0c:01:77:35:82:56:6d:
         7b:91:ce:5d:55:98:7c:d3:09:60:b4:03:59:32:cd:98:1f:cd:
         9d:ed:e8:b9:dc:79:c2:b2:99:a8:c1:3e:cc:05:88:1a:49:8f:
         d3:87:44:75:c0:37:60:df:d1:b1:1c:22:c5:04:c9:59:dc:e9:
         4d:93:90:10:8a:74:3c:e9:ca:48:65:72:60:0a:ab:46:93:ff:
         d3:92:6e:c6:03:11:36:8e:b8:bb:f0:08:4c:05:26:51:50:ac:
         e0:81:3f:91:cc:3d:77:a5:5d:a6:5e:8b:80:96:52:0d:a0:cd:
         e6:01:0e:42:1b:45:d2:2e:34:23:ef:05:aa:cd:41:13:22:46:
         9b:c7:f3:1f:01:60:c7:9b:ad:1f:90:ea:40:bf:6c:7b:c7:7b:
         4d:5d:6f:72:c2:c7:c8:bb:8e:93:34:65:62:8d:d7:93:5f:0e:
         c6:af:1b:ca:80:ee:0f:10:a1:4e:8b:35:0f:4f:ab:ed:46:df:
         e4:76:db:80:65:a0:ee:f1:fc:cf:47:a7:0a:2c:14:93:0b:e2:
         bf:40:a4:de:2a:fd:be:d0:c4:5e:af:f4:74:4f:5f:48:5f:2c:
         59:48:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----