Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/a1106803-16a2-3ca9-b9cb-151d9ad6cefc.roa
File:                     a1106803-16a2-3ca9-b9cb-151d9ad6cefc.roa (raw, json)
Hash identifier:          fc78rZ0t5mWim57M/Hww0rLRhwtDC6J2/+nOsbv0aus=
Subject key identifier:   02:7D:12:8E:0E:91:52:28:DF:5D:27:CD:CB:F4:82:99:EA:B6:E4:03
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FF2B2A23EEA3466D12BC6BE80
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/a1106803-16a2-3ca9-b9cb-151d9ad6cefc.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:b2:a2:3e:ea:34:66:d1:2b:c6:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=f45b2e88-aa40-4c43-8b63-243c9491a4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:c0:da:f6:76:66:fb:c1:76:98:3a:ee:55:
                    c2:2c:ac:10:8f:97:2f:3e:70:73:ad:04:05:44:75:
                    ea:85:47:39:1e:79:f0:0f:c6:77:0c:22:6c:9e:30:
                    74:95:a9:13:5a:8c:3e:09:79:f1:fc:83:c3:fe:0f:
                    46:95:38:f0:c4:a2:06:fb:77:79:3d:a1:01:88:f4:
                    ee:47:5b:08:80:5d:82:00:8c:7d:62:64:1c:f2:04:
                    f5:2c:26:fa:45:27:91:ee:82:d9:79:7b:d7:15:ec:
                    69:60:d1:2b:fd:1f:ac:9d:ef:cf:58:05:f2:5f:2e:
                    c1:0b:22:1b:7a:1c:a9:41:8b:90:f0:18:fd:32:e7:
                    31:10:3d:85:a8:b8:8c:53:7e:e1:43:96:bd:63:42:
                    c5:4f:30:c6:02:2b:6a:00:c7:d1:e7:17:0b:8e:a5:
                    47:bc:c3:87:bd:38:9b:c1:30:0c:38:d2:f3:58:4f:
                    29:8a:8b:98:6a:d7:65:d5:51:a5:ad:30:7b:dd:2f:
                    59:3a:0d:18:f4:6b:d5:6d:e6:e3:3c:ab:3f:9a:e7:
                    80:8b:0f:cb:fb:40:10:7a:b4:90:50:41:ad:bf:42:
                    f2:67:b7:56:a5:40:e7:ad:4d:b3:d5:5e:96:a1:09:
                    80:07:bc:09:64:79:a8:90:4a:88:35:fb:47:9f:ce:
                    d4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7D:12:8E:0E:91:52:28:DF:5D:27:CD:CB:F4:82:99:EA:B6:E4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/a1106803-16a2-3ca9-b9cb-151d9ad6cefc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:72:ab:06:0a:91:b5:fa:70:36:4b:64:0b:b6:42:c6:61:19:
         80:ac:e5:37:01:aa:d4:4a:ac:73:ba:36:1f:90:ec:f1:a6:75:
         ad:5d:61:3d:ff:71:1c:69:c4:3b:87:9e:d1:33:20:30:1c:3a:
         c2:2e:8e:f2:bf:ce:c3:f3:ad:e8:04:f7:9f:ca:86:f3:c6:99:
         24:02:3b:5e:f0:98:9b:fe:16:4a:f2:81:80:09:43:f9:be:17:
         ca:a3:1e:73:a0:b0:a2:90:0a:aa:b9:e9:fc:0a:ab:58:ea:86:
         1e:37:70:a0:6c:23:f2:f5:fb:c6:80:9b:ad:c9:85:e0:9e:07:
         a1:a2:fe:d2:d7:f7:6f:7a:27:3f:7b:88:26:8b:c0:bb:7e:c9:
         e9:c1:83:b6:c2:3c:0d:8f:a8:f9:fd:56:16:dc:04:87:ac:ac:
         8b:4c:49:46:7f:31:b0:17:93:8f:77:88:3e:94:b9:a0:9e:9b:
         6f:9c:dc:b4:c0:bc:40:b1:8d:f0:82:98:57:be:d6:37:f5:9d:
         62:a0:41:df:ab:f7:ef:99:47:26:ff:b4:a9:15:af:27:69:c2:
         62:65:73:6a:5d:0a:93:3c:71:6d:6a:db:95:72:69:ee:b5:0c:
         a8:c7:af:87:de:c1:05:22:98:8d:2f:66:32:58:01:d5:01:d3:
         20:07:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----