Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/4c9fdfc5-cfaf-3569-a3a2-c1dba3882ee4.roa
File:                     4c9fdfc5-cfaf-3569-a3a2-c1dba3882ee4.roa (raw, json)
Hash identifier:          T9qesCCr5NYvZJwnX5LcUpyaxy1NrGgD2ah+Gm4a5ts=
Subject key identifier:   EB:66:E5:11:FB:87:67:AF:46:05:9A:96:ED:E9:69:A6:9B:7A:EB:9C
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583DD0033A36107067241ED63280
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/4c9fdfc5-cfaf-3569-a3a2-c1dba3882ee4.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:03:3a:36:10:70:67:24:1e:d6:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=eaff0f54-9fc4-4766-a4f3-7f3bedcdcf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7c:24:e7:bd:e3:41:95:5a:a1:80:41:eb:bf:
                    16:a3:af:11:ab:94:06:cf:70:3c:38:bb:fe:47:33:
                    dc:98:ac:80:bf:15:cc:2c:fa:16:a4:d7:e9:b0:ca:
                    cd:7b:46:f6:1b:db:b3:88:98:15:1b:c7:11:ae:d8:
                    e6:b4:41:e6:bc:6f:c8:f2:e3:ff:e3:34:cc:8b:f2:
                    a0:39:54:1e:84:9c:58:1b:fa:1a:da:1f:6d:e2:75:
                    84:2e:67:c9:fa:83:0e:f8:23:c3:cc:59:da:90:da:
                    65:ca:d0:71:34:18:5e:15:01:da:0a:5f:f9:dd:9c:
                    fd:d6:0c:a1:59:0c:28:6e:7a:f4:9a:41:f9:22:b1:
                    b0:04:ce:85:44:5b:0b:bd:2f:26:76:45:21:b4:f3:
                    fb:7a:26:1d:c8:66:d0:36:57:13:45:be:55:cc:70:
                    75:50:1f:b9:e4:c9:cf:56:ee:aa:a1:32:58:77:fc:
                    4f:71:10:f4:4a:ba:11:b2:24:66:ec:2c:a7:29:13:
                    dd:cf:d5:83:67:f1:4a:a5:21:c9:01:4f:e9:32:14:
                    6b:84:bd:66:ce:60:10:c1:7d:40:b0:7d:91:13:21:
                    26:b3:3e:a8:be:8b:85:c6:32:ad:a2:86:c8:9b:8f:
                    2a:a0:cc:5a:11:0b:9e:53:ff:8c:8d:75:6a:92:cd:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:66:E5:11:FB:87:67:AF:46:05:9A:96:ED:E9:69:A6:9B:7A:EB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/4c9fdfc5-cfaf-3569-a3a2-c1dba3882ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6e:2c:58:5a:4c:5a:e2:46:24:69:73:29:4d:c9:49:58:91:
         a9:5f:fe:59:a0:02:54:bc:c0:36:51:ab:39:a8:99:89:58:08:
         21:2d:2a:7a:31:9f:53:8b:e9:f9:90:8a:16:14:9b:f9:8c:34:
         a2:69:bd:5a:89:22:98:60:d4:31:35:7c:b7:84:cd:72:d0:43:
         f2:e1:26:7a:44:e8:a7:7d:85:ea:1b:21:45:a8:6d:71:ee:26:
         41:90:82:59:2f:ac:49:52:31:0e:23:98:ea:3d:25:c0:34:5f:
         08:9d:46:1e:a8:51:89:68:64:09:38:87:98:88:a4:30:20:7d:
         50:ca:33:12:a2:3d:f8:2f:fa:eb:81:90:93:9b:c6:e4:34:92:
         86:93:43:47:11:4b:9e:1f:a3:b5:71:b0:b2:ab:56:36:d4:dd:
         d2:c6:fc:fb:b4:c3:71:6d:a1:b8:e0:9f:f0:0f:f1:cb:b0:84:
         cf:f5:a1:dd:80:49:ff:96:a8:16:0a:5d:17:52:7a:80:1a:08:
         31:51:b1:c8:14:45:b6:37:fc:1e:49:f6:0b:79:bc:15:41:86:
         a6:7d:30:20:7d:72:74:f8:e6:c8:b4:5a:f7:1e:ef:eb:49:7e:
         73:f9:64:2f:fc:7c:c5:e7:d3:55:b0:c6:c6:d3:8d:ec:08:56:
         6b:92:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----