Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7553005-539d-3656-a16a-5c7bc7e8eefc.roa
File:                     e7553005-539d-3656-a16a-5c7bc7e8eefc.roa (raw, json)
Hash identifier:          NOFkBDkZPIBmJ9jnPYysbTm4DIYhHzDGJ4Sj8Fg/4jU=
Subject key identifier:   A9:0B:2D:A6:B3:4A:4F:7F:73:FF:74:3C:91:32:7A:2D:F1:D4:88:35
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285839967DA3E0360C82909519BC00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7553005-539d-3656-a16a-5c7bc7e8eefc.roa
Signing time:             Wed 14 Apr 2021 04:00:00 +0000
ROA not before:           Wed 14 Apr 2021 04:00:00 +0000
ROA not after:            Wed 07 Apr 2027 04:00:00 +0000
asID:                     33363
IP address blocks:        2605:a401:842a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:96:7d:a3:e0:36:0c:82:90:95:19:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Apr 14 04:00:00 2021 GMT
            Not After : Apr  7 04:00:00 2027 GMT
        Subject: CN=16839c42-22fc-450b-b143-ad01fd4b11de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:59:40:98:2d:23:ac:c7:3e:02:af:27:03:
                    1a:1b:c5:5a:f4:ea:36:ba:6e:31:47:24:31:59:5b:
                    56:4a:61:68:36:b1:69:6c:43:20:22:4c:d8:74:03:
                    ac:7f:2f:7d:db:29:53:24:f4:7f:f9:65:7d:97:ad:
                    d7:45:20:01:1a:d9:8a:81:6e:68:68:df:c1:38:2b:
                    d3:38:7a:b2:e3:85:d3:6d:68:82:65:f5:dc:57:3c:
                    cb:1d:b9:79:81:c7:56:7a:db:2f:cf:79:b1:98:9f:
                    50:d7:a0:d1:ce:08:45:d2:0a:b2:7b:f8:33:50:6b:
                    99:28:55:1d:42:9c:57:76:33:fe:17:89:c3:6a:bb:
                    d2:0c:f1:29:3c:cf:03:e1:3c:1c:47:fc:84:a9:fe:
                    8c:a2:36:50:4a:e1:7c:18:77:cc:8e:4a:11:39:da:
                    da:e1:93:8e:ea:7f:f5:7c:1f:4d:84:6c:25:d1:a7:
                    a5:f3:8e:02:fa:86:e1:1f:0f:5f:43:d2:f6:56:e1:
                    e1:a7:56:c4:3c:d7:09:f9:b5:b4:d1:53:c2:b2:9b:
                    ec:d6:98:5b:0f:8e:c2:fc:bf:39:89:48:5d:d3:b6:
                    93:a2:de:be:64:16:34:e2:9e:20:6a:74:95:18:b2:
                    aa:cd:47:36:77:20:76:02:8c:5c:97:0c:f4:c6:d3:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:2D:A6:B3:4A:4F:7F:73:FF:74:3C:91:32:7A:2D:F1:D4:88:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e7553005-539d-3656-a16a-5c7bc7e8eefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:842a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:98:62:da:c0:dc:41:0f:64:4a:04:ca:84:ef:24:9d:ad:43:
         ff:4d:ca:a0:75:58:20:d1:80:65:d0:24:12:85:ee:39:72:af:
         e7:9b:26:1e:24:8c:29:93:36:1a:9d:87:84:72:a2:f6:60:e9:
         09:42:92:cb:59:1d:e0:b5:a5:6d:ba:31:e1:d7:e9:1f:5e:f7:
         f5:10:c2:fa:1d:a6:bc:72:a8:de:a4:d6:d5:d6:34:3b:3d:3f:
         36:91:97:3e:ad:f7:56:b6:52:2e:06:aa:fb:cc:1a:b4:4c:30:
         2a:a1:44:c4:3c:12:47:0e:69:1c:0e:c6:86:fc:a2:a9:2a:81:
         3a:ee:f6:77:90:7e:9f:da:31:74:10:23:6e:91:9b:8c:27:8d:
         ee:8a:ee:31:a1:23:2c:91:f8:52:d1:32:2c:de:c3:f1:47:56:
         39:9a:38:31:37:29:a5:65:59:ec:55:77:19:23:8d:e7:0f:ad:
         b6:57:5e:20:79:aa:ca:44:54:68:90:41:e0:70:b1:40:ee:32:
         39:3d:64:20:6d:a7:03:55:c8:e9:d7:4e:00:62:a4:87:aa:bf:
         68:46:23:3b:94:e8:dd:a2:0c:af:68:e1:10:73:0e:1e:19:bc:
         b5:5b:22:ed:be:4c:c3:5c:d3:26:99:1c:f4:0a:3f:c0:79:fc:
         d9:64:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----