Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/624cac18-8b04-32fe-9284-1057a17b1406.roa
File:                     624cac18-8b04-32fe-9284-1057a17b1406.roa (raw, json)
Hash identifier:          OsSjrIor/FObQqeL/2sOGYT75EO0L59ynHABFt20X98=
Subject key identifier:   8C:8D:FA:DB:D7:AB:F4:A6:A9:72:88:D9:A6:25:1B:27:5A:81:4C:F9
Certificate issuer:       /CN=54b1659b-ba41-4341-b59b-302264dea33e
Certificate serial:       010D0C9F4328583E05B209AAFD65DFC9AE7C4800
Authority key identifier: 72:9F:E8:9F:BC:EC:6A:F5:C3:96:0B:DE:8F:AF:D3:B9:D4:8D:80:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/624cac18-8b04-32fe-9284-1057a17b1406.roa
Signing time:             Wed 25 May 2022 20:55:39 +0000
ROA not before:           Wed 25 May 2022 20:55:39 +0000
ROA not after:            Tue 27 Aug 2024 04:00:00 +0000
asID:                     207556
IP address blocks:        2602:fb68::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:05:b2:09:aa:fd:65:df:c9:ae:7c:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b1659b-ba41-4341-b59b-302264dea33e
        Validity
            Not Before: May 25 20:55:39 2022 GMT
            Not After : Aug 27 04:00:00 2024 GMT
        Subject: CN=334f6f9a-abd8-4b91-ad59-daeb63f2ddf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:09:6e:50:f1:2d:46:24:7d:22:7a:bc:a9:
                    3e:cd:eb:ff:10:d6:f5:1e:22:4b:36:f9:cd:e1:e0:
                    0f:ec:4c:6d:b8:b9:9f:6b:b7:07:10:93:ea:3d:9c:
                    8b:88:36:43:e1:c9:a2:26:1a:2d:eb:9c:1a:e0:21:
                    7e:39:98:31:df:42:00:3f:85:b5:1b:1c:c0:5f:e1:
                    ec:bf:34:75:5f:29:55:ef:fc:90:e9:3f:ab:f8:b9:
                    12:99:06:e2:3b:19:ba:03:b0:5b:f3:ba:63:c2:f9:
                    bd:bc:d7:32:bb:bb:d6:2c:fe:cb:19:1a:39:4f:bd:
                    66:ee:2f:a2:ee:cd:b3:98:f1:9b:a5:f8:81:75:06:
                    5e:44:f5:77:61:07:11:36:fa:f4:c3:c9:9e:25:e7:
                    03:c4:cb:3b:11:08:15:d9:73:d5:c4:01:83:c0:f6:
                    db:aa:98:c7:2e:64:14:3d:e7:a4:6f:ad:50:46:6b:
                    6c:4d:f1:ea:00:f5:26:c4:8f:8f:da:d7:95:b6:06:
                    77:14:64:21:c5:22:78:c8:2d:63:8e:07:93:63:5c:
                    aa:0f:6c:b2:59:4d:ee:36:a8:0e:82:d0:cc:d0:c0:
                    d6:66:8d:f7:87:8a:33:ae:86:d2:04:c1:62:ed:3a:
                    3d:fe:e0:6c:d5:45:a0:dd:58:f4:8e:f3:5c:f6:21:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:FA:DB:D7:AB:F4:A6:A9:72:88:D9:A6:25:1B:27:5A:81:4C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/624cac18-8b04-32fe-9284-1057a17b1406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e/54b1659b-ba41-4341-b59b-302264dea33e.crl

            X509v3 Authority Key Identifier:
                keyid:72:9F:E8:9F:BC:EC:6A:F5:C3:96:0B:DE:8F:AF:D3:B9:D4:8D:80:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/54b1659b-ba41-4341-b59b-302264dea33e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:33:26:a9:66:8c:51:d7:90:9a:a9:c0:c3:e3:38:0d:2d:68:
         46:8e:af:60:45:42:6b:ac:c2:14:0c:0e:ce:55:f8:35:1b:69:
         09:ca:5a:e3:da:9a:bd:45:02:7f:05:5d:14:56:31:74:bd:e3:
         b9:68:7e:6d:9e:4c:9b:77:f2:72:4b:3c:4a:92:e6:49:ca:6e:
         c3:38:00:73:8e:bc:fb:ce:11:b0:00:92:4f:6f:ba:a5:0a:5f:
         93:e7:32:24:2d:53:b9:7a:6c:30:49:30:7b:4d:fd:7b:ae:1e:
         30:1a:01:3f:da:78:8c:59:1f:81:41:a9:3e:c5:2b:91:60:95:
         3f:cf:ef:ec:a6:0d:2f:23:10:61:91:9e:49:63:13:32:e6:e9:
         27:9c:87:82:04:8a:2d:c8:fe:b3:22:74:10:e2:19:97:c5:7e:
         12:ab:99:86:14:14:81:44:82:9d:7c:d3:53:ba:b8:51:b4:2a:
         5c:6f:88:41:da:9b:c6:fd:79:7f:6a:e6:b3:da:63:67:00:d0:
         bf:c2:47:55:54:14:d6:9d:f3:d4:78:14:4a:81:33:04:4b:83:
         69:f3:b6:ca:6e:83:60:47:da:ed:9f:cd:c6:45:27:5b:68:79:
         ec:a6:42:61:39:84:4e:5c:ee:04:79:bc:e8:9d:48:65:a9:41:
         24:39:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----