Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/b64e6845-c059-3d40-811b-68b62c7f6ff4.roa
File:                     b64e6845-c059-3d40-811b-68b62c7f6ff4.roa (raw, json)
Hash identifier:          3TUCoJYzTagBg50c8TkZ73h7A4I4ADSnVsHI/AJ3pyw=
Subject key identifier:   A1:54:D3:87:7F:50:35:84:FE:B3:1A:C0:4E:49:E9:55:43:46:9E:42
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F566B03B648018550790C4180
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/b64e6845-c059-3d40-811b-68b62c7f6ff4.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:6b:03:b6:48:01:85:50:79:0c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=03fb7d4c-29cd-401d-834c-e213ad63868e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7a:bd:03:0e:3f:4b:57:0f:21:a3:69:32:72:
                    2a:18:43:17:9f:cf:6c:31:00:13:7a:ce:05:c0:44:
                    1f:98:6a:b3:18:14:42:ce:1f:fa:05:b3:30:2a:09:
                    08:16:ea:55:ca:b0:36:08:78:7f:64:09:23:7c:12:
                    fb:48:bd:6a:2d:b3:d3:46:bd:89:45:6e:83:0b:c1:
                    7a:d6:2a:4f:9e:21:6d:56:07:3d:18:fa:30:22:b5:
                    c3:69:25:e2:aa:03:8e:45:2a:8b:96:3b:95:67:a8:
                    24:9b:96:bd:16:fe:22:59:d2:f1:26:41:9f:57:80:
                    c8:51:8e:2f:60:6e:b3:fe:b9:43:32:ed:51:eb:26:
                    7b:fe:4f:e9:83:87:33:d1:75:51:92:38:94:dc:8e:
                    0a:74:81:96:cf:da:77:24:ab:93:a5:0b:35:08:10:
                    ef:03:56:da:ea:dd:72:47:da:9c:4c:b5:97:0b:27:
                    18:4b:9f:24:59:2a:3b:66:81:76:15:3b:15:2e:39:
                    6a:68:a4:88:bb:47:63:67:50:ab:83:b3:d8:2d:b0:
                    a4:28:c8:b2:da:0c:05:64:53:64:dd:59:90:c7:16:
                    7c:31:2c:f9:9e:8f:c7:e6:78:20:3b:6f:b7:c6:54:
                    01:31:34:a9:e6:94:1a:72:54:64:49:5b:51:8f:0a:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:D3:87:7F:50:35:84:FE:B3:1A:C0:4E:49:E9:55:43:46:9E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/b64e6845-c059-3d40-811b-68b62c7f6ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:88:f1:71:b5:cc:ce:0c:86:9c:b3:0c:7a:ec:69:a7:25:
         7d:24:73:52:5c:f4:00:6a:7c:5e:18:60:62:68:6f:ae:b3:8a:
         bb:49:55:fa:54:72:57:ee:f7:4a:16:39:f1:5a:e4:65:45:0e:
         9b:af:2b:77:2f:c3:19:eb:0e:e5:76:a1:c5:cc:41:23:d2:a4:
         0e:81:8b:d6:f1:b9:f0:ea:fa:70:14:9d:af:8a:96:d0:07:dd:
         19:bf:3a:35:7c:33:9b:63:8c:fe:43:3d:f7:3c:16:36:c9:5a:
         0f:4f:4c:6d:ca:8d:f5:c4:6f:b2:b9:02:7c:a1:ee:b5:ec:7a:
         e0:e0:56:ff:60:67:8a:f7:ab:e8:fd:08:de:3d:1a:63:cb:22:
         c9:09:f9:1b:74:b7:64:c6:dd:49:27:eb:18:db:21:89:e7:c1:
         f4:bf:20:94:c7:95:e2:02:f3:e4:17:53:85:33:4d:a9:ec:30:
         98:56:1c:e3:7f:ec:38:04:b2:22:2e:7c:42:f7:37:bf:eb:5d:
         f2:25:0e:e8:7a:0a:0d:4f:d1:90:5c:72:cc:86:32:6a:1b:ac:
         ea:0d:1c:a1:bb:00:e7:a5:0a:99:d3:01:a5:d6:6e:61:45:99:
         ba:c5:ab:4d:cd:28:49:56:53:22:3f:5a:2b:14:02:20:0d:1e:
         43:9e:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----