Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8f7a2072-1f42-3d86-bcc2-dbb2e1294ce8.roa
File:                     8f7a2072-1f42-3d86-bcc2-dbb2e1294ce8.roa (raw, json)
Hash identifier:          NG8sBjDPv1UK2oVavqgtXvHhImpcqQUZuwEhMykABCg=
Subject key identifier:   92:9A:4D:BC:B8:67:75:A0:E3:96:C7:75:11:A9:F1:01:4B:D2:82:B2
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583E6CB284DE5AE0FC3F3F36C3C0
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8f7a2072-1f42-3d86-bcc2-dbb2e1294ce8.roa
Signing time:             Thu 30 Jun 2022 13:21:37 +0000
ROA not before:           Thu 30 Jun 2022 13:21:37 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2606:7b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:b2:84:de:5a:e0:fc:3f:3f:36:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Jun 30 13:21:37 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=9f518285-9e1b-4755-8734-834672138cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:08:3e:5c:f0:77:1c:7f:1a:44:e3:12:03:36:
                    77:bd:a3:9e:51:0f:ef:a4:b3:68:18:9b:e5:f6:2f:
                    13:69:66:f8:74:7b:47:54:b7:07:c2:46:bb:3a:e7:
                    48:27:2c:92:dd:0d:0e:87:4d:c1:34:3d:1e:66:62:
                    55:18:54:35:d5:25:8d:38:2f:ce:24:0b:b2:ed:f3:
                    85:2e:88:75:b9:b9:cd:38:76:17:07:40:67:1e:03:
                    45:12:7d:67:f1:d1:fa:f7:8e:05:c5:49:c6:fb:30:
                    02:85:87:26:20:86:d6:36:fb:fc:5c:02:58:fe:db:
                    de:fb:d5:d3:2e:99:3f:17:b0:1b:1a:74:18:ab:57:
                    9c:ce:2a:70:60:4e:f2:00:a4:95:15:8a:68:15:a5:
                    91:e7:aa:05:42:00:5b:eb:58:4f:72:cb:45:98:bf:
                    30:69:48:4d:ee:f3:b8:6f:a9:6b:4c:ba:5e:b5:93:
                    ad:95:f9:cd:39:43:1b:8e:12:d0:ec:d0:6d:a3:9c:
                    04:ee:37:c1:78:e1:4d:27:1d:8f:20:72:79:a9:1e:
                    1d:8d:7c:dd:f3:0b:5e:0b:b4:f1:f7:cb:b5:fa:bf:
                    96:b5:13:08:eb:a6:7d:80:28:19:63:29:c1:a1:cc:
                    7d:84:00:b8:ef:63:f5:40:91:a6:23:28:b8:a1:a3:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:4D:BC:B8:67:75:A0:E3:96:C7:75:11:A9:F1:01:4B:D2:82:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/8f7a2072-1f42-3d86-bcc2-dbb2e1294ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:f6:dc:a8:9d:dc:94:01:96:e2:4b:12:03:ce:f3:7c:f3:
         95:f7:59:3d:27:da:a3:14:60:1b:ce:b4:b9:3f:96:f9:1d:78:
         af:ed:f8:e3:56:91:bf:a9:90:19:39:d9:0d:b8:43:e1:1a:e2:
         be:8c:1f:fb:43:e9:13:20:42:72:e2:84:be:38:19:50:99:d9:
         b8:2a:31:d3:d5:c7:f1:94:5f:97:09:29:c4:81:dd:ce:d9:aa:
         b8:a2:8c:07:c8:3b:47:1b:50:30:3b:1a:89:cb:a7:c9:5c:cb:
         cf:1f:29:b4:33:cd:c8:f8:6f:5d:2d:a7:7f:2d:9e:27:4b:0c:
         0c:91:4c:ed:cc:cc:a5:35:a4:06:44:6d:94:a6:38:ea:31:a2:
         1d:34:e2:60:cd:4d:4e:fb:02:d0:76:a1:4b:ed:8b:96:f4:3f:
         c5:4d:4c:1a:eb:88:48:76:88:0c:31:5b:ab:95:f1:bc:4b:67:
         d5:73:91:7c:fd:bf:5e:6c:85:90:87:f5:21:6e:15:3a:ca:21:
         ea:04:5f:08:f7:18:23:31:49:57:e7:8e:3e:00:61:58:bc:eb:
         69:d6:e5:6d:58:31:64:01:a9:e6:90:12:a9:3a:c0:fd:6d:79:
         27:53:80:f7:52:7f:43:c5:b1:ca:b5:8a:34:73:99:8b:42:a2:
         db:f7:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----