Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5b31d9e2-e77b-39f7-9696-ccc281378a58.roa
File:                     5b31d9e2-e77b-39f7-9696-ccc281378a58.roa (raw, json)
Hash identifier:          mNA+kEVC/5ApCJRnpVyzVoCfDZuSGf3m87JQTCedj6c=
Subject key identifier:   FE:EA:2D:36:DB:4D:1A:90:34:2B:5B:32:D2:FF:BD:DE:1E:50:B7:5E
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FF2B280B0C4B4D4EED4325380
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5b31d9e2-e77b-39f7-9696-ccc281378a58.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:b2:80:b0:c4:b4:d4:ee:d4:32:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=a2a0921b-9763-405a-ad6f-c8152b01787a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:fa:82:de:44:a9:1e:47:f1:73:f4:d4:c1:
                    50:44:61:65:74:a1:f9:0c:09:79:24:9c:6c:7b:31:
                    ab:a5:74:ad:2e:54:63:23:42:fc:f4:5d:ff:c6:d4:
                    b4:6e:68:d1:e8:da:c1:d6:61:3a:75:65:d5:ff:68:
                    44:14:22:11:b2:40:d3:bc:7b:40:2d:02:cd:f7:c3:
                    57:7c:c8:07:ee:b8:98:9c:af:ff:e5:50:11:7b:ee:
                    d9:f8:e3:30:39:5c:46:5d:c8:78:17:b8:02:6c:01:
                    3d:25:eb:a2:b8:ae:d9:1d:16:0c:7c:32:67:55:72:
                    0a:0e:b0:b0:eb:22:d8:95:fe:9f:eb:6b:31:fb:5d:
                    de:cc:42:92:a6:39:66:17:58:31:b4:d1:1f:d7:fb:
                    e0:82:27:35:bf:b8:5d:49:a4:fa:f4:dd:83:e6:f8:
                    55:dd:d4:42:f9:ff:0a:6f:ac:de:c3:2c:57:68:d6:
                    79:d8:d3:1f:da:63:7f:49:d0:52:e8:89:59:2b:af:
                    67:38:3a:bb:59:22:4e:71:7b:99:c1:34:60:2c:82:
                    f6:ad:0f:b5:8b:4e:45:95:25:15:f2:4f:5b:bf:5c:
                    b0:9f:17:a2:b9:58:c1:8a:35:9c:6d:d9:4b:0c:31:
                    6c:5f:73:c6:93:6d:17:23:55:ba:d6:35:5d:27:60:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EA:2D:36:DB:4D:1A:90:34:2B:5B:32:D2:FF:BD:DE:1E:50:B7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/5b31d9e2-e77b-39f7-9696-ccc281378a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:d8:be:00:fb:66:e1:22:68:a2:a4:a6:1b:18:d7:73:d7:
         6d:03:51:d9:ff:f3:be:af:17:b2:02:a2:15:8c:3f:34:67:e0:
         31:ae:f9:f0:1c:e2:28:45:f9:1f:29:17:af:e3:a6:4d:de:ac:
         59:13:fe:70:d7:dd:5c:54:6f:40:64:88:02:2f:05:0a:a3:b4:
         92:44:80:e6:1b:37:a7:8d:22:8d:43:d1:32:43:31:72:e3:cd:
         e8:af:cf:1d:2e:8d:7f:d5:7e:72:bb:c2:83:e5:27:ac:d2:64:
         69:3d:13:6f:0c:37:49:1b:d9:15:2f:78:46:8a:2d:a5:ae:7d:
         cf:f2:1d:6a:4e:e0:26:9e:29:df:62:54:46:3c:75:20:ad:a4:
         07:84:5c:23:6b:29:7c:47:04:d0:f8:64:4b:9b:a5:48:7c:4e:
         ca:eb:ee:dd:f5:52:60:b3:f8:ff:34:74:99:80:ea:46:26:5e:
         42:7a:51:bf:2f:0f:2c:23:4b:1a:b3:a2:a9:83:58:dd:8b:29:
         47:89:21:6e:15:82:6a:29:28:1c:d2:21:65:4b:17:3a:45:a7:
         cb:da:b9:e1:5f:db:17:30:ee:04:21:ea:64:8f:92:db:a2:19:
         89:3f:23:eb:91:7c:0b:0b:55:1a:06:64:6d:94:7a:30:d4:5c:
         79:e8:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----