Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6acb47f3-9391-30c9-80c6-b86fbabfe4bf.roa
File:                     6acb47f3-9391-30c9-80c6-b86fbabfe4bf.roa (raw, json)
Hash identifier:          Q3HXNCqUotxPJA5IvDTxM4A7D9T0gUJUKZlEm4We+gc=
Subject key identifier:   4B:DB:3D:A8:E0:B6:8D:EC:7D:3C:70:56:BC:62:BA:33:4F:EC:29:EA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858395BDED95DF1BFA0E03BF7C380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6acb47f3-9391-30c9-80c6-b86fbabfe4bf.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Wed 17 Mar 2027 04:00:00 +0000
asID:                     11955
IP address blocks:        2606:a000:c07::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:5b:de:d9:5d:f1:bf:a0:e0:3b:f7:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2027 GMT
        Subject: CN=5a5e541e-8762-487f-b71f-a80dc96dfa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:e2:52:d2:52:19:6b:61:23:e5:8a:23:ae:
                    3c:f5:ff:d5:0a:fa:66:9c:00:07:56:7c:0e:c2:5e:
                    53:ac:98:d2:9d:40:9a:99:e6:a6:8f:23:5c:d7:af:
                    cb:f4:b6:6b:3f:70:c4:75:f2:9b:fd:9d:4c:70:a5:
                    be:50:52:64:31:2d:23:42:ee:23:64:9e:6c:4e:41:
                    64:ac:87:55:1d:8e:5e:b5:28:6a:43:34:39:f1:22:
                    cf:a5:67:20:fe:7e:16:3f:4b:a5:01:f5:b3:8d:89:
                    3f:82:e0:af:de:06:ac:7a:a5:71:e4:73:44:99:3b:
                    d0:f9:40:56:fa:5d:77:46:94:ea:63:33:ff:37:b2:
                    73:85:bb:2a:49:68:11:3c:d7:7c:b5:e7:b3:a7:ac:
                    31:e7:63:2c:04:8e:62:18:e6:bc:df:6a:b0:49:b9:
                    0e:ba:a8:3a:ac:92:32:99:7c:11:aa:73:aa:f3:b6:
                    ae:d4:9a:a9:f8:88:c9:08:d6:52:a0:e3:80:e7:62:
                    75:97:4f:48:7d:2e:0a:ce:26:47:7c:62:25:7e:06:
                    ec:51:d0:80:84:2f:1b:80:6b:87:4f:eb:12:71:f1:
                    d6:d8:8e:a6:90:76:5b:cf:0a:12:89:7f:05:43:d4:
                    2e:74:7e:be:cd:dc:a5:9f:59:90:ff:9a:9d:27:7a:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:3D:A8:E0:B6:8D:EC:7D:3C:70:56:BC:62:BA:33:4F:EC:29:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6acb47f3-9391-30c9-80c6-b86fbabfe4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a000:c07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:79:7f:45:10:a2:e6:3a:db:c1:c5:f0:81:6e:6f:bc:e1:
         81:ef:59:1b:5e:35:ec:b8:79:10:88:4b:41:9e:2e:df:61:cc:
         d4:a3:37:1d:a4:12:34:ec:dc:19:ae:e0:5f:f6:2a:4a:d3:c2:
         98:e5:22:c4:83:3d:26:1d:aa:f4:94:48:b1:1e:ef:c6:af:aa:
         c9:2d:5a:fb:eb:cf:29:50:77:56:41:15:07:c2:bf:50:ae:bc:
         ad:5f:47:2e:ee:90:8e:6c:8a:b4:85:6b:e4:ab:4e:1a:3d:ca:
         8d:6d:47:7a:94:58:4e:8b:e8:8f:f2:51:96:bd:5f:79:b3:0f:
         4f:be:68:d6:23:b8:d4:a3:8a:e3:aa:5c:f2:3b:a2:2b:f9:12:
         44:b1:ce:48:fd:fa:25:c0:ed:9f:7e:28:2a:da:e6:66:b6:31:
         56:d1:55:ec:4b:45:a5:3a:12:8f:59:ad:81:fd:ce:33:22:af:
         7b:2d:84:79:d9:a5:1a:ed:f0:80:f5:a5:40:c5:eb:70:27:b2:
         00:f3:78:6e:93:2c:4a:b8:15:13:45:e0:b6:fb:a1:a8:63:58:
         f9:1f:32:8f:fb:1a:95:fb:c4:32:ba:54:49:1a:a1:d8:57:a8:
         76:e1:25:72:48:15:44:27:c4:7d:2a:1a:06:fe:9b:c8:ef:ee:
         86:79:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----