Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8/42531cd9-bada-3949-88c8-7db306322202.roa
File:                     42531cd9-bada-3949-88c8-7db306322202.roa (raw, json)
Hash identifier:          CW2GXL2gfeZnYliNvj4vxZ4waE7M5Mb+5AtguquN2y8=
Subject key identifier:   1A:54:50:4C:E1:66:E6:F1:B1:83:D8:E0:23:72:42:E0:33:CD:76:02
Certificate issuer:       /CN=15d0695f-5b31-42b0-8ab1-ab77ee36aef8
Certificate serial:       010D0C9F432858439556EC509A8D8FFEE9FD2E00
Authority key identifier: FA:D2:DC:75:6D:59:DD:5A:F7:14:0C:35:31:D4:E1:F5:BC:17:C4:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8/42531cd9-bada-3949-88c8-7db306322202.roa
Signing time:             Tue 17 Oct 2023 20:02:47 +0000
ROA not before:           Tue 17 Oct 2023 20:02:47 +0000
ROA not after:            Mon 15 Jan 2024 21:02:47 +0000
asID:                     55201
IP address blocks:        2607:74c0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:95:56:ec:50:9a:8d:8f:fe:e9:fd:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d0695f-5b31-42b0-8ab1-ab77ee36aef8
        Validity
            Not Before: Oct 17 20:02:47 2023 GMT
            Not After : Jan 15 21:02:47 2024 GMT
        Subject: CN=42ae795d-688a-44bb-a742-efcb99ad3540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:85:65:59:a7:8e:69:15:44:cb:2c:ae:0d:
                    45:fe:ed:b2:5a:87:07:b4:23:d8:7e:73:22:1e:b1:
                    48:4d:4b:27:4a:25:2a:27:6f:77:ee:92:6c:b9:02:
                    c1:65:60:63:d6:6e:d4:06:9a:a1:01:16:e7:c7:52:
                    d3:a5:db:f2:4b:0a:e3:80:ed:3a:7b:ac:bf:a5:ec:
                    02:0d:8a:9d:38:ec:fa:67:86:c4:2b:72:83:eb:c1:
                    25:82:ac:d1:0c:a4:41:af:1b:06:fb:19:24:d5:d8:
                    99:38:54:08:06:00:73:c5:a0:cf:12:dd:ef:da:46:
                    00:82:33:40:37:41:8b:bb:e8:08:74:9a:6a:6b:98:
                    20:b5:14:4f:05:32:24:e9:3c:87:6f:f2:a3:71:35:
                    50:ba:85:80:4d:38:bb:74:72:ee:9e:e3:82:07:e0:
                    a7:e1:e0:04:77:52:f9:08:71:d0:f3:9d:33:ad:ed:
                    a1:ac:22:98:05:c3:ae:81:9b:14:e6:0d:fe:3e:1c:
                    fa:e0:1a:e0:32:f5:0a:99:ff:45:8b:2b:7a:f2:98:
                    db:bb:8d:bb:c1:d5:0a:1e:b5:ee:8f:d7:d4:bc:de:
                    c7:ed:18:5c:38:3e:01:78:0b:66:08:c4:98:98:cd:
                    1c:83:70:75:2f:18:42:6d:17:ed:76:a4:5d:64:3a:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:50:4C:E1:66:E6:F1:B1:83:D8:E0:23:72:42:E0:33:CD:76:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8/42531cd9-bada-3949-88c8-7db306322202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8/15d0695f-5b31-42b0-8ab1-ab77ee36aef8.crl

            X509v3 Authority Key Identifier:
                keyid:FA:D2:DC:75:6D:59:DD:5A:F7:14:0C:35:31:D4:E1:F5:BC:17:C4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15d0695f-5b31-42b0-8ab1-ab77ee36aef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:06:8e:02:85:c0:44:67:8d:1a:10:d3:05:6c:6e:5d:25:7e:
         16:45:4d:72:0b:bc:a7:0e:a9:44:04:e9:d2:f4:53:b5:4c:d7:
         00:84:c5:b2:5f:cf:02:07:03:52:bb:36:7c:1d:a3:06:d4:aa:
         48:74:dc:e5:1f:d1:99:fe:8d:0c:db:8d:bb:5c:54:1b:fd:3f:
         4b:ca:b4:dd:62:d5:a2:21:db:b3:1a:ce:61:ce:14:fe:10:73:
         31:78:88:16:bd:a7:e9:97:a1:73:0a:53:70:88:85:ed:c4:dc:
         9e:80:38:04:e8:a9:98:b7:16:2f:00:c3:4c:43:30:05:85:3c:
         41:3c:a3:3d:08:5a:b2:11:10:87:df:88:56:39:0e:9f:00:73:
         07:00:98:99:20:5c:b9:86:22:4b:07:2f:e7:f5:84:34:fb:95:
         28:57:4b:ef:fe:18:03:50:5a:98:2b:db:c9:b6:25:c3:49:2f:
         b2:b4:61:a6:f8:95:68:6e:a9:bf:91:18:2d:68:7d:fe:c0:7a:
         f7:eb:32:da:ee:c0:44:07:20:68:b1:70:ba:84:97:53:89:ad:
         25:b9:c2:23:c5:fd:fd:de:e8:1d:01:c4:8b:f3:21:eb:97:0f:
         e7:8e:c7:db:ca:bf:f7:16:69:a7:23:93:2e:4a:b4:a9:c5:a3:
         82:10:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----