Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0b9922f9-b1b1-38e2-8dfe-7ea386eeff3c.roa
File:                     0b9922f9-b1b1-38e2-8dfe-7ea386eeff3c.roa (raw, json)
Hash identifier:          vTAyDEhNOTi7Kh6ZoXKBELJK9sKW1y3chQbAqt2tENw=
Subject key identifier:   DB:E1:38:3B:CC:3A:3B:D1:15:69:3D:08:9A:FC:D3:D8:11:94:5D:FC
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583E1E3D0B333716E00E879E8E60
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0b9922f9-b1b1-38e2-8dfe-7ea386eeff3c.roa
Signing time:             Thu 02 Jun 2022 12:00:00 +0000
ROA not before:           Thu 02 Jun 2022 12:00:00 +0000
ROA not after:            Fri 08 Jul 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1e:3d:0b:33:37:16:e0:0e:87:9e:8e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Jun  2 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2022 GMT
        Subject: CN=e5d4c6fb-1ab0-4526-99a6-942dfe5b995b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:f9:60:45:ce:99:89:ea:b0:d8:78:b3:cf:
                    7e:bb:95:26:2a:47:57:92:2d:e6:d2:08:60:35:27:
                    b5:51:ed:b8:4f:19:40:58:da:fe:a1:d6:d3:69:35:
                    d9:ef:fe:72:ad:eb:db:d1:d2:d9:26:e6:b6:f1:5e:
                    c3:3d:6c:d5:ae:93:ed:2d:62:9c:25:a3:3c:47:7d:
                    5e:8e:2d:a3:ad:86:0e:d7:73:9f:f6:f3:d3:e9:82:
                    51:77:36:ea:06:21:f1:d9:29:d7:34:3b:74:c4:50:
                    ca:79:9f:d7:b0:85:53:1f:43:4e:1f:c4:33:3c:46:
                    dc:29:56:88:c8:df:e4:aa:01:fb:a7:12:6d:49:e9:
                    eb:75:79:ba:bc:11:bc:07:ec:36:19:d1:ac:3b:e1:
                    a6:13:2d:25:93:5b:60:c6:6d:fb:cf:82:c8:ac:38:
                    b4:87:ed:5a:df:32:ed:d4:63:5f:ce:7a:cf:00:1d:
                    ce:e4:57:bf:bd:f8:0a:13:eb:e6:fc:14:dc:d4:fb:
                    75:31:84:46:2f:7e:5f:a9:c6:09:14:24:27:df:b7:
                    6d:d0:2e:e6:d1:c3:1f:03:35:8b:a9:5d:de:db:5b:
                    cc:9d:9b:c5:2b:a8:c6:e6:fa:75:a7:b7:6c:46:62:
                    fc:4f:5a:85:e6:ac:a9:a6:17:99:58:7b:85:02:e5:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:38:3B:CC:3A:3B:D1:15:69:3D:08:9A:FC:D3:D8:11:94:5D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0b9922f9-b1b1-38e2-8dfe-7ea386eeff3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:53:1d:2d:52:ff:79:ca:eb:8f:1e:fe:8d:4c:d0:ae:d1:1e:
         89:35:00:d3:6d:82:b7:ce:ca:bc:0e:68:b0:c5:84:8a:bb:0e:
         b5:17:46:3c:64:61:8a:0d:df:a2:b6:3d:e5:df:e4:fd:08:dd:
         bf:e5:59:19:85:f4:a6:e4:f9:84:48:1d:94:ce:b4:59:95:55:
         ab:f4:4b:1f:e6:57:64:8b:86:25:3c:4a:36:ff:f7:69:98:8d:
         07:ab:23:cd:7f:70:55:19:7b:23:cb:3b:2d:b7:d0:71:f5:6e:
         d0:d1:4f:03:6c:5a:58:c8:bb:c2:3b:06:e7:17:13:58:88:43:
         c6:ec:98:05:39:c1:68:0d:0e:01:91:58:62:25:98:75:3a:e1:
         6e:e4:75:35:0b:30:20:c6:92:85:2b:1d:e9:f3:bf:59:b7:58:
         0e:78:e3:ba:a6:a4:c6:de:c3:e7:e0:76:af:33:89:2d:1a:50:
         36:a1:e8:77:9d:c9:60:69:a7:76:cd:14:e8:d3:c2:2f:60:17:
         7a:e3:4c:31:4b:e0:c9:2d:8f:4c:8c:b2:52:a9:60:cd:2b:a5:
         2f:04:4f:85:2a:ef:61:e3:7c:a6:7f:10:ed:11:73:57:e0:f1:
         08:29:5e:6b:47:c6:38:47:17:4e:c7:4a:3b:30:f4:b7:22:91:
         7b:aa:3b:0e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD4ePQszNxbgDoeejmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM0M2U5NmQtMWM5Ny00MmE2LWEwYjUtMzg4NGRmZmFi
ZjQ0MB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZTVkNGM2ZmItMWFiMC00NTI2LTk5YTYtOTQyZGZlNWI5OTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZX5YEXOmYnqsNh4s89+u5UmKkdXki3m0ghg
NSe1Ue24TxlAWNr+odbTaTXZ7/5yrevb0dLZJua28V7DPWzVrpPtLWKcJaM8R31e
ji2jrYYO13Of9vPT6YJRdzbqBiHx2SnXNDt0xFDKeZ/XsIVTH0NOH8QzPEbcKVaI
yN/kqgH7pxJtSenrdXm6vBG8B+w2GdGsO+GmEy0lk1tgxm37z4LIrDi0h+1a3zLt
1GNfznrPAB3O5Fe/vfgKE+vm/BTc1Pt1MYRGL35fqcYJFCQn37dt0C7m0cMfAzWL
qV3e21vMnZvFK6jG5vp1p7dsRmL8T1qF5qyppheZWHuFAuUOGQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNvhODvMOjvRFWk9CJr809gRlF38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MzQz
ZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0ZGZmYWJmNDQvMGI5OTIyZjktYjFiMS0z
OGUyLThkZmUtN2VhMzg2ZWVmZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjM0M2U5NmQtMWM5Ny00MmE2LWEw
YjUtMzg4NGRmZmFiZjQ0LzYzNDNlOTZkLTFjOTctNDJhNi1hMGI1LTM4ODRkZmZh
YmY0NC5jcmwwHwYDVR0jBBgwFoAUJcS4u+LBh5GZA4R33hQJUtyfIZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MzQzZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0
ZGZmYWJmNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCDUx0tUv95yuuPHv6NTNCu0R6JNQDTbYK3zsq8DmiwxYSKuw61F0Y8
ZGGKDd+itj3l3+T9CN2/5VkZhfSm5PmESB2UzrRZlVWr9Esf5ldki4YlPEo2//dp
mI0HqyPNf3BVGXsjyzstt9Bx9W7Q0U8DbFpYyLvCOwbnFxNYiEPG7JgFOcFoDQ4B
kVhiJZh1OuFu5HU1CzAgxpKFKx3p879Zt1gOeOO6pqTG3sPn4HavM4ktGlA2oeh3
nclgaad2zRTo08IvYBd640wxS+DJLY9MjLJSqWDNK6UvBE+FKu9h43ymfxDtEXNX
4PEIKV5rR8Y4RxdOx0o7MPS3IpF7qjsO
-----END CERTIFICATE-----