Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/27ed918f-29b1-3ff1-8d6a-91650a3207ad.roa
File:                     27ed918f-29b1-3ff1-8d6a-91650a3207ad.roa (raw, json)
Hash identifier:          8B2GSQ1sdI6+MCfCRCysv42s/jmf/bF1NO5cXdaz5og=
Subject key identifier:   C6:3C:FE:F6:13:72:B8:6A:C3:60:57:99:A3:92:95:DF:86:CB:0A:57
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583FA53A26D2CBB3AF852222EDC0
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/27ed918f-29b1-3ff1-8d6a-91650a3207ad.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     801
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:3a:26:d2:cb:b3:af:85:22:22:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=5c4ccbae-1cec-4d2d-9910-d1bfde6675b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:7e:22:97:2f:2a:dc:ed:1f:b3:bc:55:0b:
                    7f:64:c0:2b:64:5f:84:6e:4e:71:37:ab:b3:cf:e1:
                    2b:43:ce:04:d7:4c:6e:6a:6e:a8:21:d2:bf:70:c6:
                    e2:4d:58:cf:c4:12:e4:fe:d8:00:72:03:bc:74:fb:
                    7a:2c:e0:d4:9b:fc:86:16:18:c6:43:9a:31:d4:95:
                    42:83:50:e3:ac:b6:03:58:fc:5c:9e:ce:01:b9:25:
                    08:88:09:2a:d3:b0:a4:52:6f:41:34:31:71:54:10:
                    f8:8a:83:41:71:cc:d5:48:f3:a7:01:64:ec:8b:44:
                    99:0f:7d:81:5e:56:ba:31:dd:b3:c1:56:e8:46:27:
                    a2:86:85:c1:77:95:13:70:c3:6a:09:0e:d4:cc:ad:
                    bb:24:ed:4a:e8:91:b9:4f:b1:6e:d9:d3:ee:13:5d:
                    b4:5c:d3:d4:77:94:91:27:56:f4:cf:50:e0:d5:21:
                    34:f1:12:3b:50:27:eb:f9:bc:02:28:bf:77:5f:2a:
                    46:b7:fe:40:6e:4c:3e:33:7e:8c:57:66:a9:8e:47:
                    ce:6c:55:05:af:57:d4:19:f9:59:2a:6b:d9:8b:56:
                    52:1e:e7:b2:fd:ec:57:93:3e:da:3d:9e:9b:5e:4d:
                    34:74:56:37:f1:ed:41:cf:ff:dc:08:59:a6:e6:9f:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3C:FE:F6:13:72:B8:6A:C3:60:57:99:A3:92:95:DF:86:CB:0A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/27ed918f-29b1-3ff1-8d6a-91650a3207ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:90:2f:7f:37:bd:dc:1e:7a:a2:de:6f:7c:c9:3e:9f:4f:
         13:8a:38:0c:d9:1f:b1:a5:9e:74:b4:80:6d:e3:3d:d3:23:a6:
         4a:1b:e9:f6:f4:1e:fe:d5:cc:91:0e:ac:76:88:c1:2b:f3:67:
         1b:df:92:f6:74:79:fe:c9:b5:cc:bc:a7:8d:7e:fa:76:4c:b3:
         09:ea:e8:ce:a5:15:e0:da:f8:b5:8e:94:bd:f8:4b:82:f5:be:
         e9:28:76:05:cf:89:1e:d1:4f:f5:62:63:8b:4a:a7:28:18:77:
         2a:75:d1:29:5b:77:e7:2e:59:a3:46:50:65:5b:51:63:f0:29:
         69:5c:15:39:79:94:d5:80:c1:81:10:c5:ae:35:00:72:97:57:
         56:e5:3b:55:be:ff:a3:3b:9a:d7:1c:12:05:64:c1:51:4c:7a:
         9f:93:e1:93:f5:3f:80:f8:15:6a:d8:93:02:ff:c9:a7:59:c2:
         86:e6:e6:58:28:4e:cf:9c:cc:5a:e0:43:aa:ca:c1:09:dd:03:
         ce:3b:55:41:e0:0a:6b:ec:d1:da:1c:13:42:d7:4c:1d:cb:82:
         1d:ac:8f:d5:3f:68:d7:19:b5:db:6e:50:03:ce:2f:5c:cf:e2:
         ac:ba:ec:67:ba:a0:15:cb:88:d1:e2:f0:ba:ee:35:a6:13:c7:
         70:2f:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----