Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c656ce6b-293e-3e2e-bb29-b7515edce11f.roa
File:                     c656ce6b-293e-3e2e-bb29-b7515edce11f.roa (raw, json)
Hash identifier:          Ktz2qmiv0DBLB4gQJgnoF1WjIMw/uJx3JQK9OAmRaU0=
Subject key identifier:   F4:18:C4:BF:1A:65:D6:81:15:9C:51:5A:EE:F1:04:A2:82:D9:3E:A9
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967D8815AA30EA01349EAF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c656ce6b-293e-3e2e-bb29-b7515edce11f.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:82c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:88:15:aa:30:ea:01:34:9e:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=6472f50b-15df-451a-8d78-2da40639a0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:c2:77:f4:01:15:be:00:e5:03:c6:69:71:
                    fe:9e:d9:46:9e:86:a5:3a:63:15:82:21:4d:ba:25:
                    7d:75:6d:e7:ce:92:67:ac:af:90:39:e6:5d:2f:f1:
                    75:5b:03:41:97:fa:ac:48:6a:ba:80:60:34:5e:78:
                    b5:21:7d:82:92:ed:0c:d3:b4:6f:b1:4c:d3:37:44:
                    5a:ea:a0:61:3b:95:4e:8f:13:43:e2:1b:38:da:81:
                    ae:56:da:8a:cf:cc:c5:4e:5e:ad:44:09:cd:85:d3:
                    ab:ac:d5:d4:e4:6d:9f:20:77:c6:9b:32:7c:da:16:
                    99:79:13:5e:df:99:78:83:f5:82:47:de:73:35:b5:
                    a7:a8:16:d1:c5:7a:bf:29:cc:69:41:ff:4d:7d:03:
                    d1:a9:02:76:77:c6:ed:17:d2:f3:8b:c0:ea:86:f9:
                    cc:96:74:41:a7:46:b6:4f:a6:9e:3b:9e:45:89:a9:
                    0f:3c:89:ba:55:59:ec:f6:fe:04:49:38:e7:16:b4:
                    a4:4d:e3:f5:ec:dc:01:a4:ec:27:ef:80:0e:12:34:
                    9f:fd:b9:c6:81:cb:a7:45:86:d8:60:55:93:43:19:
                    1c:63:58:9f:df:a1:e5:97:6c:ca:82:04:af:30:a5:
                    d1:88:04:e3:37:a2:4a:c3:1c:38:71:5a:8d:68:8f:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:18:C4:BF:1A:65:D6:81:15:9C:51:5A:EE:F1:04:A2:82:D9:3E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c656ce6b-293e-3e2e-bb29-b7515edce11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:8f:7b:61:9c:30:d6:fa:82:0e:e8:49:db:12:df:eb:3b:
         ba:d7:74:1f:7c:26:3c:ce:3a:5f:66:7e:37:4d:b9:c7:6c:b0:
         b9:b8:88:a6:c0:a9:f4:68:d2:71:43:fe:f7:b0:78:f3:c2:98:
         95:22:ec:ad:13:3d:9c:fe:b6:25:2a:28:d8:ac:f0:e9:31:fa:
         15:d7:62:03:75:fc:d2:83:79:8e:91:16:5a:c0:15:c5:12:cf:
         df:0f:d6:2c:bd:7b:1f:75:0e:aa:cc:1f:9b:8a:b7:d7:0d:ed:
         0e:1b:49:60:05:68:c8:b9:64:d0:65:85:0d:e4:14:6a:df:7a:
         17:d3:0a:59:25:8c:43:6f:c6:e5:a2:35:f4:a7:94:c3:2d:dd:
         95:e5:3e:7c:57:a6:a1:6e:2d:b2:ce:2f:67:6b:6d:7e:5f:d1:
         22:f0:1f:3f:4b:78:5f:04:6f:39:36:d8:d8:f3:7b:ae:62:32:
         06:41:bb:00:8f:c0:aa:a4:7a:0a:64:a7:a0:15:60:ba:28:bb:
         7c:a3:ce:26:6b:1d:d2:4e:d4:42:8a:5e:e9:99:f7:0f:06:a3:
         c0:cb:48:8a:03:62:dc:39:ea:ad:c6:9a:5d:21:a3:aa:3a:af:
         e3:94:2e:7a:02:0c:f4:b4:84:26:92:ad:c3:6e:0d:11:25:a6:
         d2:3b:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----