Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/215fa45e-6d1c-3b4f-bee8-fd5e9ec40e3a.roa
File:                     215fa45e-6d1c-3b4f-bee8-fd5e9ec40e3a.roa (raw, json)
Hash identifier:          TOdckkT0etzm1li1JGz8NXHEOWl0vgsLZBWhvykTdJM=
Subject key identifier:   6D:49:6E:E8:9B:A3:A0:8D:CE:93:D2:BA:4B:EF:69:C2:00:43:AC:82
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FA49632A7BE2538F8E0E693C0
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/215fa45e-6d1c-3b4f-bee8-fd5e9ec40e3a.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:96:32:a7:be:25:38:f8:e0:e6:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=9eae19eb-e581-4f9b-aae3-6ef2aad13319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:fb:1b:41:49:07:8d:bc:92:4e:fc:ee:25:
                    e6:73:f6:88:97:37:42:72:0b:83:32:4f:8f:bc:29:
                    86:75:a0:ad:37:f5:f5:2e:98:d9:f5:96:45:97:19:
                    cd:45:7a:f9:b0:3c:bd:9b:42:fe:1f:38:2b:5c:0b:
                    32:da:e3:81:12:42:e4:5e:88:0e:8a:22:60:83:40:
                    c3:34:5d:07:8c:52:54:bd:ac:c3:5c:f4:05:c5:2f:
                    79:ff:67:fb:75:55:f8:96:f8:bf:88:bc:ae:3b:3e:
                    c8:36:6d:dd:5a:32:f0:aa:fd:0c:57:0d:9c:19:4c:
                    68:ce:1d:82:6c:ef:3d:84:07:68:e8:b3:54:08:06:
                    f6:2c:b6:b9:aa:bf:9c:bb:b6:da:09:2f:57:52:05:
                    c7:24:0f:77:ea:c1:6a:aa:ef:9c:56:a8:75:5b:20:
                    33:e4:26:2a:42:3e:54:79:aa:66:77:e4:76:a7:56:
                    13:d8:4b:bf:5f:b2:fc:ee:13:5f:d8:15:b3:de:5c:
                    e0:8d:fd:fc:1d:76:c3:ea:1a:da:49:d1:62:bc:ad:
                    de:33:db:0d:c0:15:b4:a8:1f:ee:a6:6d:87:e3:97:
                    78:5e:eb:30:7f:c7:f8:2e:12:9d:80:86:2f:4e:ac:
                    43:18:64:90:85:c4:7e:3d:18:0f:f9:a5:11:2f:09:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:6E:E8:9B:A3:A0:8D:CE:93:D2:BA:4B:EF:69:C2:00:43:AC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/215fa45e-6d1c-3b4f-bee8-fd5e9ec40e3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bf:15:b7:76:19:b8:f7:ec:8b:fd:45:2a:50:f4:83:71:c0:
         dc:8c:30:e0:b9:3c:a3:ef:81:d9:4b:78:e8:b8:7f:10:79:5b:
         59:9c:e3:40:55:09:ce:d0:04:81:4d:db:ab:52:c5:df:44:9e:
         0a:03:ce:ff:9a:e9:58:14:a4:6c:11:8b:d1:e8:9a:c4:de:84:
         ff:61:2c:4d:31:50:54:b2:12:3c:97:df:c8:31:85:3c:1b:43:
         d9:ab:36:7a:f3:eb:23:96:29:fc:33:91:68:70:c2:8e:6d:8c:
         7c:da:94:91:77:00:49:28:3b:3d:a5:54:fc:9a:ab:3c:00:1e:
         30:af:a8:4a:69:13:09:67:a7:80:a4:d2:33:69:5d:a6:d3:94:
         9d:24:1c:0d:e8:32:6a:4e:8b:fc:65:98:e8:d0:94:43:5e:63:
         fb:90:80:1f:ef:36:fc:99:2f:17:ec:0f:05:02:15:e9:c2:62:
         29:41:97:ea:74:3e:33:b8:99:bc:09:2a:a7:d1:5a:bf:4b:9a:
         18:e5:76:cc:0d:1a:5a:34:0e:d0:7b:82:34:43:8e:06:cd:dc:
         88:db:67:c0:7e:cb:eb:c6:3e:3f:85:0c:c7:ff:64:41:68:0c:
         0c:e6:63:fa:5c:6b:90:e9:3d:a1:b7:85:32:99:30:b8:83:16:
         d9:a6:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----