Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/025e7710-996a-3576-843d-b9377f6ae205.roa
File:                     025e7710-996a-3576-843d-b9377f6ae205.roa (raw, json)
Hash identifier:          NbflZMJYD8ZMGSmv6Vh9Zjltgk/459v3wPenYxfBCPM=
Subject key identifier:   CF:D9:12:DF:CA:BC:11:46:81:C1:75:33:D9:01:50:B2:25:2F:2A:E3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D0EF8C0060D55AE1E6200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/025e7710-996a-3576-843d-b9377f6ae205.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:80fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:0e:f8:c0:06:0d:55:ae:1e:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=9f23afd4-3514-4461-92a2-ee89e999b6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:51:e9:cd:0b:b0:2d:da:a0:43:7e:3e:7e:
                    47:b3:5b:dd:5d:79:75:1c:7e:52:45:7b:87:fe:46:
                    ff:49:7c:8c:ca:ad:a3:5f:18:b9:28:94:77:7d:3a:
                    d7:d5:37:a8:cc:e9:30:ae:48:84:4a:69:46:97:a3:
                    68:8e:95:d0:e7:78:fc:12:13:11:dd:22:03:e8:5a:
                    3b:e2:bb:41:1c:2d:a2:a2:48:b2:d6:13:7a:e0:4c:
                    c8:b7:fc:a8:e1:3b:65:83:70:95:e8:d3:09:75:ed:
                    8a:2a:60:a3:da:c2:b0:a6:45:7d:0e:5d:15:ae:55:
                    66:0a:fe:3d:5c:8f:b3:4d:0e:20:c2:71:37:18:15:
                    76:c2:c6:94:35:b8:91:5b:89:d8:9c:ce:66:29:ed:
                    63:47:06:18:2a:b8:79:c2:e2:05:1e:47:5e:7b:62:
                    18:c4:8f:2e:69:77:88:4e:cf:c5:58:c0:a3:49:78:
                    0d:a8:46:15:cc:19:a3:b3:b4:31:e8:bb:54:71:8b:
                    d7:3b:7e:96:5a:4f:75:10:0b:a5:e8:59:a8:b2:71:
                    ea:05:e5:5e:30:6e:0e:14:3f:43:8a:68:bd:58:ea:
                    93:fd:26:c6:38:d6:59:fc:63:b2:1d:04:3c:16:f5:
                    6a:f0:22:92:ea:0f:76:3f:eb:44:ff:71:d1:3f:ca:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:12:DF:CA:BC:11:46:81:C1:75:33:D9:01:50:B2:25:2F:2A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/025e7710-996a-3576-843d-b9377f6ae205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3e:57:a2:f7:be:14:4c:fb:57:ce:7b:cc:69:31:61:c5:d0:
         b3:67:a7:cc:a8:59:e5:08:a2:1a:fd:4c:cc:cb:70:d3:0e:e3:
         a8:c7:35:31:e2:c2:5f:b6:10:04:50:4a:ab:ff:d4:e2:d6:90:
         b6:ef:f8:d8:2a:3d:b2:d9:04:39:37:6b:73:35:cc:2a:10:14:
         67:0a:1d:2a:41:c7:b8:56:26:c6:25:64:1f:51:b7:3c:3d:bd:
         58:a6:4c:57:c0:10:da:27:a0:de:d9:60:d8:80:c4:9a:cc:a2:
         1e:2c:75:7e:a2:55:2e:27:5e:d9:d9:ef:33:19:84:d5:28:3f:
         1d:cf:e8:ad:f9:88:01:50:00:00:4c:bb:e3:0d:8d:86:44:6b:
         24:9f:af:3b:a4:d4:5a:a8:a6:6e:e1:29:2a:4c:b4:e6:b3:fa:
         c2:91:22:d9:e5:45:92:c9:57:b0:a2:a6:df:88:9c:26:10:aa:
         10:85:62:7a:d0:6a:fb:4f:04:f9:66:9f:da:bd:3f:71:a4:03:
         43:cf:5a:cd:fb:3b:ef:4e:c3:7d:86:00:78:1e:45:2b:f5:39:
         9f:37:af:54:98:68:7e:c7:3e:c0:52:af:68:2e:0f:0c:55:21:
         26:ec:52:25:1f:eb:a9:fc:f2:27:a0:7a:8e:9c:e4:96:fb:8c:
         fd:11:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----