Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/dcb1592b-d307-3fed-af05-27446b6c1c31.roa
File:                     dcb1592b-d307-3fed-af05-27446b6c1c31.roa (raw, json)
Hash identifier:          5RXdhaznG+ONuKYDU1GbOJv43VX20ML3IeLIShG0Pxc=
Subject key identifier:   97:BD:78:45:DC:97:35:FC:52:C9:2A:EC:A6:91:02:D6:2F:A0:D7:8F
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583E52B0C624FB36D124246CBDD0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/dcb1592b-d307-3fed-af05-27446b6c1c31.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Thu 10 Jan 2030 05:00:00 +0000
asID:                     36692
IP address blocks:        2620:119:13::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:52:b0:c6:24:fb:36:d1:24:24:6c:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2030 GMT
        Subject: CN=a6ad64d4-4a29-4e3d-9f61-21b9c22dd559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:24:4d:b5:9b:9d:b7:02:6c:1e:b2:7c:1e:74:
                    0e:1e:05:73:eb:e4:63:5e:0f:90:74:2c:4a:a5:04:
                    60:2a:23:86:29:7f:44:9e:e2:f9:37:70:35:17:ca:
                    3a:8c:3a:58:88:a2:05:80:4f:2f:89:94:99:d0:c1:
                    f0:8d:55:48:3b:29:2b:61:e5:e5:29:06:83:15:93:
                    13:d3:ee:15:d0:8a:6c:95:be:60:40:0c:3a:db:51:
                    8e:48:6d:3d:3c:b3:18:fd:dd:33:ab:b6:af:ad:10:
                    36:9e:c5:46:f8:e3:0c:49:bc:f2:5a:25:a4:ed:48:
                    e3:d3:e4:18:08:90:ee:57:30:d9:62:d7:74:a8:3f:
                    d7:89:0b:b0:06:38:09:ed:0f:44:9f:cb:c0:34:3b:
                    a9:43:cc:20:0b:c8:67:9a:f1:11:52:20:d7:64:a8:
                    0c:a5:6e:1e:c1:00:ec:c7:88:b8:89:35:20:5c:b8:
                    7e:e7:b7:79:bf:32:5a:d9:cc:23:de:47:e7:2a:2a:
                    82:f8:cd:48:ad:19:df:dc:d8:82:bc:41:97:db:9b:
                    6e:cc:91:ca:95:19:bd:fb:1b:71:21:ab:35:9d:50:
                    a7:b6:c8:3a:f0:87:f5:ca:dc:1b:d4:11:d6:76:49:
                    f6:04:65:46:29:e4:0e:3e:f5:5c:13:7d:44:ee:f6:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:78:45:DC:97:35:FC:52:C9:2A:EC:A6:91:02:D6:2F:A0:D7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/dcb1592b-d307-3fed-af05-27446b6c1c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:2d:be:8f:61:48:5b:34:1c:fd:cd:fe:3f:b2:de:3e:e9:
         8e:e3:32:9b:9d:8a:10:53:b1:a9:3f:4f:a0:79:c5:01:e5:db:
         4b:ba:79:0f:3e:aa:00:1d:77:ef:f6:3b:71:70:b9:83:82:f6:
         9e:60:4f:55:6a:da:7f:7a:7a:a4:e3:4b:9b:a9:77:e4:25:2f:
         ad:3d:e8:0c:68:0d:11:3b:2a:83:32:7f:d7:c7:a7:4e:42:60:
         49:ce:d6:09:3b:84:67:59:7f:91:2d:ad:69:e4:0e:f5:74:62:
         90:69:d5:a4:55:5c:b1:e3:ef:27:81:6e:9e:00:dd:3f:51:32:
         2d:04:a3:24:85:8b:70:b1:1f:e1:e0:fd:75:13:46:92:1a:d0:
         83:78:30:eb:81:a8:e6:80:81:63:15:fd:06:8d:5a:85:57:5c:
         d2:f5:cc:35:cc:ec:0f:09:f2:7d:e4:fc:37:02:88:a4:ea:b3:
         4f:65:b6:cd:06:52:ef:5a:e7:69:2d:5e:82:33:3a:ab:2c:b5:
         af:f4:00:c6:c1:e3:48:45:8e:03:45:6f:69:36:20:1e:b2:c2:
         ad:ae:5f:2e:ed:b9:ef:fb:30:78:d6:bc:b6:7a:26:02:69:d8:
         62:80:06:bb:b7:a6:f4:56:3c:70:e0:f4:17:68:32:e9:ab:f6:
         ca:7a:c7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----