Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e83f70a3-955e-328e-929e-1cfac738bfc3.roa
File:                     e83f70a3-955e-328e-929e-1cfac738bfc3.roa (raw, json)
Hash identifier:          ubDMtJ1DdmUzmzVs7sF2r1mhp+1SEDevB2VV04VLBws=
Subject key identifier:   F3:6D:1F:64:D9:B2:F1:5A:2E:8C:C8:51:40:47:8D:2C:9C:BD:2D:F2
Certificate issuer:       /CN=83692920-ea82-48fe-a503-dce277a7ef99
Certificate serial:       010D0C9F4328583E3BB262D7EDEE79A248054D40
Authority key identifier: 0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e83f70a3-955e-328e-929e-1cfac738bfc3.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2606:f40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:b2:62:d7:ed:ee:79:a2:48:05:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83692920-ea82-48fe-a503-dce277a7ef99
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=7e53da19-dda2-4468-83f0-99ebd5ae524e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:ee:27:41:aa:44:84:0d:2a:60:c5:b3:1b:
                    5a:21:16:52:44:5d:c4:10:ec:7d:6b:61:58:4e:16:
                    75:95:32:0d:e3:59:e6:92:10:62:31:04:9b:d3:61:
                    10:a7:44:2f:92:0e:1f:63:1a:77:b6:99:32:db:ad:
                    ea:39:6f:5c:68:51:30:f3:79:9a:a6:8a:0f:dd:fe:
                    65:14:0b:77:08:28:ef:31:f0:a3:6d:2a:d9:91:71:
                    14:9e:64:1c:18:bd:91:eb:ae:44:4d:52:0c:cf:b7:
                    1e:96:f9:de:ee:c0:41:8c:75:9e:1a:5c:71:b3:53:
                    44:43:f0:44:ec:00:a7:44:d5:09:95:6a:1d:ae:57:
                    c5:b9:30:55:40:e7:5d:26:45:8d:ee:86:08:c0:46:
                    0c:fa:39:f7:42:69:be:d9:4a:be:02:ee:ed:e6:61:
                    d7:e5:83:af:96:6a:a6:42:92:df:26:e4:8d:cf:0d:
                    fa:c0:df:c2:d2:a8:7b:2d:38:e5:98:31:88:fb:93:
                    7f:76:d4:4f:8d:94:48:a1:3f:19:61:c0:f4:dd:1b:
                    f3:12:63:46:6b:1a:f6:19:da:60:f3:2a:a1:23:78:
                    d9:e5:99:e4:9e:ff:b8:44:8d:9e:2f:61:54:00:c2:
                    c9:80:3f:2e:43:5a:d6:87:73:13:ba:27:66:9d:81:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6D:1F:64:D9:B2:F1:5A:2E:8C:C8:51:40:47:8D:2C:9C:BD:2D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/e83f70a3-955e-328e-929e-1cfac738bfc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99/83692920-ea82-48fe-a503-dce277a7ef99.crl

            X509v3 Authority Key Identifier:
                keyid:0E:CD:8E:39:55:B7:01:82:F0:92:76:67:B9:14:0C:27:68:A7:04:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/83692920-ea82-48fe-a503-dce277a7ef99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:88:06:88:a8:c5:7a:16:fa:2e:32:56:95:64:4a:bc:65:7d:
         30:e2:db:c0:fa:d8:c6:7b:6c:f4:42:a9:df:06:95:15:28:63:
         94:98:0d:db:99:4f:fa:f9:34:24:c1:cc:71:2a:f0:ca:b3:ce:
         88:80:1c:f5:12:a9:73:d5:a2:06:a1:d1:33:c9:3e:c7:05:81:
         fb:90:36:93:35:57:14:ad:c8:88:26:69:e0:1c:40:e3:3b:15:
         c8:9b:30:36:ab:ee:46:d0:85:81:cf:c8:4c:2d:bc:05:af:60:
         a7:7e:40:af:8f:a0:6b:db:cf:8c:7c:0d:b5:17:d3:3d:9a:5c:
         5e:33:e0:5f:5f:84:d1:cc:26:fd:52:41:be:c4:19:54:b1:45:
         1f:21:f2:10:c9:bd:b4:d1:f7:f7:80:e1:38:0d:08:99:63:4a:
         5b:4f:ac:7c:15:c8:f9:b0:53:16:5b:4f:31:15:17:6d:a3:ca:
         73:99:22:20:a7:7d:79:8f:ec:e9:73:47:1b:ed:fc:fe:05:4d:
         ef:36:29:59:a7:8b:4c:0d:14:97:fb:19:93:10:10:76:e3:18:
         8d:4c:5e:08:50:98:56:95:26:f3:fa:cc:b5:c3:19:fb:d3:1b:
         84:43:ad:c4:22:c2:20:e4:4b:2c:b2:33:cf:5e:e0:f3:bf:d3:
         3f:72:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----