Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/83b95759-0e28-3f11-b833-47df56f0fd26.roa
File:                     83b95759-0e28-3f11-b833-47df56f0fd26.roa (raw, json)
Hash identifier:          YxC3NLiXm5BPk++NejhjljLAFDxnf4bo/eSXedPUZF0=
Subject key identifier:   41:F5:3F:6D:91:D2:B6:60:9A:3F:3D:11:8A:CA:4F:57:3F:0D:20:D8
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583C6FFDED2F80DFA8EA89D71300
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/83b95759-0e28-3f11-b833-47df56f0fd26.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6f:fd:ed:2f:80:df:a8:ea:89:d7:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=f2c2382e-1ba3-4805-a511-bad283a4b163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:ea:33:bb:a3:99:ab:27:ac:74:48:57:55:
                    3b:d4:d2:b2:3e:65:b4:21:17:c8:e6:9f:9e:94:a0:
                    83:d3:33:c3:70:02:3e:59:f7:a2:3c:e5:31:c6:b3:
                    4e:9b:81:7f:6c:b5:70:1c:07:66:94:ab:21:af:2d:
                    28:c9:c0:f7:84:ba:33:5b:bb:57:00:ec:46:d8:7a:
                    b2:ce:bf:93:77:81:f9:d6:49:c3:4a:47:0c:97:78:
                    09:ef:b2:6d:29:01:fb:14:cb:c2:e8:ff:bf:eb:c5:
                    14:34:ea:d4:81:3d:79:0b:f4:19:7a:17:5c:56:f6:
                    78:2f:63:26:31:1d:db:1e:8d:14:25:ba:05:d6:01:
                    c8:d4:7f:d4:79:b6:19:68:7d:dd:5b:56:d2:dc:fb:
                    da:94:65:94:e3:8b:20:5f:03:ce:bb:11:53:9f:dd:
                    b9:89:c4:43:04:e0:b2:27:fa:c7:eb:ce:ed:b0:ab:
                    b3:a0:8a:27:51:1b:8d:ee:9b:4c:ff:3e:b6:2f:ac:
                    7c:3f:03:21:5b:3f:99:46:59:c9:a2:2a:1d:4d:46:
                    31:e9:1d:03:07:11:42:71:ff:c9:48:64:f6:4a:7b:
                    11:33:77:3d:fc:ae:6a:d6:20:ff:20:75:c3:85:60:
                    33:77:86:18:d4:ea:d9:30:11:2a:5a:42:04:5a:f9:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:3F:6D:91:D2:B6:60:9A:3F:3D:11:8A:CA:4F:57:3F:0D:20:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/83b95759-0e28-3f11-b833-47df56f0fd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:07:7f:7b:ea:ee:e8:e7:94:9b:e2:d1:26:9a:5d:7e:9a:d3:
         44:76:2f:df:36:1c:54:ba:32:28:73:67:7d:1a:a7:ba:ca:4c:
         56:34:4d:99:53:04:46:ba:43:75:b4:a9:7f:fb:32:56:01:4c:
         39:4a:0e:0a:89:a6:1c:a3:22:6e:49:c4:98:77:5c:d2:51:c2:
         af:c9:f2:54:f5:26:7a:de:7e:a0:e2:02:82:3e:ed:9f:f1:6d:
         f4:85:48:2f:0c:20:d2:22:f1:92:cd:19:e4:d7:1f:a9:3c:8e:
         cc:fe:cb:79:93:4b:1f:53:b1:88:bf:ce:89:9a:e9:e6:7d:7e:
         5b:c3:be:d8:ac:43:c4:e1:16:1d:3c:64:97:b7:4f:3b:8a:01:
         1f:2d:a5:d2:16:2c:e4:47:10:aa:95:97:3f:17:de:7f:dd:a1:
         62:a6:41:52:3b:57:ac:83:cb:de:33:1d:97:4b:04:dd:3f:3d:
         cc:3f:f0:85:39:24:af:62:76:67:ad:c3:66:f9:2f:2e:d9:6f:
         3a:7b:6c:34:86:ad:e5:bb:8a:98:49:ab:45:83:19:3c:ef:6a:
         1a:15:a1:a8:8e:5f:53:c3:34:24:90:8d:87:d2:53:65:25:80:
         c7:00:33:91:e9:79:89:84:7d:79:ce:6d:94:16:ca:17:11:e9:
         9f:10:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----