Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/1b40f59b-be1b-357c-b6ab-544e3157a233.roa
File:                     1b40f59b-be1b-357c-b6ab-544e3157a233.roa (raw, json)
Hash identifier:          DIU6SAkKEZQV0ih5gKzaBg7Td4RrB3ZN8Q+5wftbAow=
Subject key identifier:   4F:02:B3:EC:74:56:F6:EC:63:81:C9:FE:3C:44:8F:D4:A7:DC:E2:05
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F7D80B16517F40DC471CC3B40
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/1b40f59b-be1b-357c-b6ab-544e3157a233.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:80:b1:65:17:f4:0d:c4:71:cc:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=157c08a7-8a2c-49b9-a292-191ec5a0aae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:b5:15:4f:15:f0:6b:51:a6:66:1a:b0:2e:
                    1b:6d:0e:40:ab:27:2c:0e:aa:01:af:c3:8c:64:5e:
                    77:8c:cd:4c:ef:21:bc:11:fe:f9:9c:bf:f5:d3:c3:
                    61:28:2e:84:5d:58:3f:a0:51:18:cf:5b:03:73:3f:
                    ab:0c:1f:d2:a6:41:10:b5:aa:8e:ee:df:76:a1:8b:
                    9d:83:62:bf:30:ee:19:18:c9:d2:43:d6:8b:e2:5f:
                    3b:7e:ea:f9:4c:bd:09:f2:1a:ba:b8:29:60:9b:8a:
                    2b:ff:5a:8e:9c:29:9e:58:21:3f:60:31:f7:c0:76:
                    7b:c3:78:3a:b4:1e:af:10:50:8b:7b:ec:5e:a9:0e:
                    48:a7:39:c2:a0:41:bd:a2:f4:e2:52:1c:23:a3:c8:
                    5c:ea:77:bb:20:62:b8:66:89:aa:fd:5d:1e:ab:42:
                    4b:75:40:e5:02:9e:57:ad:2f:bc:dd:6c:32:a4:28:
                    51:f5:72:98:99:3d:51:d6:ee:d8:55:e7:e3:57:34:
                    ed:da:1d:11:c9:54:63:e6:b1:e6:a6:5c:0e:8e:7f:
                    7d:bd:5f:68:06:86:2a:e4:04:47:2a:d2:11:f5:b3:
                    5f:96:a9:c7:96:61:47:c3:b5:82:83:b6:5f:ad:d9:
                    f0:c7:51:44:59:4a:13:61:55:85:d1:39:6c:ed:1c:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:02:B3:EC:74:56:F6:EC:63:81:C9:FE:3C:44:8F:D4:A7:DC:E2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/1b40f59b-be1b-357c-b6ab-544e3157a233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:05:d1:50:33:b5:65:f4:79:8f:a4:e0:14:78:90:07:62:
         9d:5e:ae:4c:06:e1:ef:38:10:97:b3:30:f3:14:90:a1:e3:67:
         49:52:70:66:6a:67:f6:b1:f1:74:06:a3:4f:0e:2a:99:ba:9a:
         0f:03:52:f5:33:83:c4:ed:3c:48:ee:4a:72:9e:b1:3f:eb:79:
         38:cd:ec:1d:41:66:09:ad:14:3b:22:b5:4a:e9:82:b7:2e:bc:
         b3:57:bd:30:a0:ec:aa:37:9f:3b:1d:3a:45:f0:23:e0:21:2d:
         01:9c:b1:66:20:25:eb:38:5d:fd:82:35:6f:3d:ed:04:f2:e7:
         81:b3:1f:cd:36:55:3a:c2:76:ef:5f:91:40:f8:9a:85:25:00:
         8f:2b:f2:49:64:83:f6:bc:4f:95:41:29:87:c9:ae:5b:40:c8:
         f0:e3:0b:81:7f:6b:d5:a8:9e:19:0d:c5:0f:b3:89:dd:89:f7:
         21:ed:04:9b:f9:a5:4a:96:c2:de:79:78:d0:0f:21:cf:1b:9e:
         e4:c0:b2:33:4e:55:7e:83:69:ef:0d:1f:3c:8d:c0:93:21:ae:
         3c:00:78:cf:6a:a0:38:7d:f9:5c:56:60:17:1a:ad:5c:c7:49:
         51:ca:6d:db:7f:c2:6b:ef:ee:75:6d:0d:e2:73:1c:b1:10:40:
         72:29:85:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD99gLFlF/QNxHHMO0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM0M2U5NmQtMWM5Ny00MmE2LWEwYjUtMzg4NGRmZmFi
ZjQ0MB4XDTIyMTAwNjEyMDAwMFoXDTIyMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
MTU3YzA4YTctOGEyYy00OWI5LWEyOTItMTkxZWM1YTBhYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiW1FU8V8GtRpmYasC4bbQ5AqycsDqoBr8OM
ZF53jM1M7yG8Ef75nL/108NhKC6EXVg/oFEYz1sDcz+rDB/SpkEQtaqO7t92oYud
g2K/MO4ZGMnSQ9aL4l87fur5TL0J8hq6uClgm4or/1qOnCmeWCE/YDH3wHZ7w3g6
tB6vEFCLe+xeqQ5IpznCoEG9ovTiUhwjo8hc6ne7IGK4Zomq/V0eq0JLdUDlAp5X
rS+83WwypChR9XKYmT1R1u7YVefjVzTt2h0RyVRj5rHmplwOjn99vV9oBoYq5ARH
KtIR9bNflqnHlmFHw7WCg7Zfrdnwx1FEWUoTYVWF0Tls7Rzh8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE8Cs+x0VvbsY4HJ/jxEj9Sn3OIFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MzQz
ZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0ZGZmYWJmNDQvMWI0MGY1OWItYmUxYi0z
NTdjLWI2YWItNTQ0ZTMxNTdhMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjM0M2U5NmQtMWM5Ny00MmE2LWEw
YjUtMzg4NGRmZmFiZjQ0LzYzNDNlOTZkLTFjOTctNDJhNi1hMGI1LTM4ODRkZmZh
YmY0NC5jcmwwHwYDVR0jBBgwFoAUJcS4u+LBh5GZA4R33hQJUtyfIZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MzQzZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0
ZGZmYWJmNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCw4wXRUDO1ZfR5j6TgFHiQB2KdXq5MBuHvOBCXszDzFJCh42dJUnBm
amf2sfF0BqNPDiqZupoPA1L1M4PE7TxI7kpynrE/63k4zewdQWYJrRQ7IrVK6YK3
LryzV70woOyqN587HTpF8CPgIS0BnLFmICXrOF39gjVvPe0E8ueBsx/NNlU6wnbv
X5FA+JqFJQCPK/JJZIP2vE+VQSmHya5bQMjw4wuBf2vVqJ4ZDcUPs4ndifch7QSb
+aVKlsLeeXjQDyHPG57kwLIzTlV+g2nvDR88jcCTIa48AHjPaqA4fflcVmAXGq1c
x0lRym3bf8Jr7+51bQ3icxyxEEByKYV/
-----END CERTIFICATE-----