Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/c1332eb1-0efc-3029-aef2-b5f668cb1604.roa
File:                     c1332eb1-0efc-3029-aef2-b5f668cb1604.roa (raw, json)
Hash identifier:          PX5lpMLRn7ODuYgYdMH4623foiQqRgKsbYmHBr20MqQ=
Subject key identifier:   78:CC:67:A6:BB:66:B4:7B:0A:86:5C:3F:B6:3F:86:CB:37:99:43:FF
Certificate issuer:       /CN=7b7224c0-abb1-4387-9b24-b77e802833d4
Certificate serial:       010D0C9F4328583F570EDF6580D400FA17B91770
Authority key identifier: 0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/c1332eb1-0efc-3029-aef2-b5f668cb1604.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     801
IP address blocks:        2606:8140::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:0e:df:65:80:d4:00:fa:17:b9:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7224c0-abb1-4387-9b24-b77e802833d4
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=70cdd62f-47ea-48cc-86e4-06e53e2770d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:ed:d7:79:c0:11:b1:05:d9:c3:28:3a:c7:
                    6d:27:62:82:89:c7:94:53:e8:e5:61:29:93:2c:e4:
                    31:3c:24:9b:d4:ed:6e:8f:4f:7e:09:c3:1c:09:53:
                    c0:65:0f:52:6f:e0:e2:88:19:cf:97:ec:53:a1:7d:
                    83:ee:c0:6d:7d:56:bb:28:d0:fe:82:cb:08:dd:18:
                    25:01:f9:eb:9b:55:8f:37:52:2f:29:96:17:06:3a:
                    ba:76:7d:9c:34:03:32:93:c4:02:12:45:0f:63:0e:
                    8e:ac:04:2a:43:24:8d:14:5b:5d:79:6d:28:58:6e:
                    be:57:51:d1:39:f5:ae:f4:39:80:0c:a6:ae:e7:c5:
                    84:a2:a4:31:e7:0e:97:3e:d2:9a:aa:c8:61:54:be:
                    53:bc:02:e9:4a:fc:a0:dc:1e:7c:3f:62:88:c8:0d:
                    02:c8:ed:2e:45:75:2a:94:59:05:c3:f0:0b:ba:19:
                    11:a7:b8:bc:bb:1f:ed:d8:7c:b2:fa:ec:75:e5:a7:
                    a0:77:81:25:b8:8a:d9:b4:83:4b:7e:3a:64:ce:81:
                    fc:a2:48:46:94:a7:bb:7c:94:57:e7:76:26:45:5e:
                    f6:34:f1:31:48:6f:11:8d:79:55:83:08:90:37:4f:
                    24:e9:7c:cc:77:44:f1:cc:7d:9f:79:20:05:ea:29:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:67:A6:BB:66:B4:7B:0A:86:5C:3F:B6:3F:86:CB:37:99:43:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/c1332eb1-0efc-3029-aef2-b5f668cb1604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4/7b7224c0-abb1-4387-9b24-b77e802833d4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:80:01:D9:BB:09:B5:67:3F:F3:CD:2D:B2:98:9F:BB:94:50:9E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7b7224c0-abb1-4387-9b24-b77e802833d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:78:bd:67:25:2e:38:36:5f:05:16:0d:e5:40:fb:f6:37:
         b3:d0:f1:5c:4e:31:60:74:e0:67:01:48:7f:8a:a1:d4:5b:d1:
         14:ec:30:98:b0:c5:91:a0:71:9d:b8:c3:47:07:20:ca:ab:cf:
         e9:d2:69:0e:e8:50:1f:38:ba:30:ba:80:6b:3b:9f:b3:56:74:
         87:7a:21:16:f5:ad:fd:3e:00:1b:e5:3f:c5:a5:61:e7:9d:a2:
         6b:b9:e9:d0:ed:57:fc:87:36:33:4b:5c:b5:88:be:12:c3:ce:
         22:62:f7:6f:57:02:20:49:2e:c0:05:c4:4d:58:25:9e:b9:c2:
         89:70:a9:70:e8:ea:97:27:fe:a2:df:a1:1d:d7:61:d2:5c:5a:
         67:0d:07:17:97:c5:c2:44:b6:02:9b:4b:ed:4d:cc:73:ee:2b:
         24:b3:17:8f:0e:28:e3:1b:dd:a7:55:cf:67:e4:f5:22:40:25:
         3a:09:42:c4:72:8b:dc:fd:4e:ae:14:b1:b3:11:5b:1f:5b:cf:
         8f:41:22:7d:14:73:bd:08:7a:c9:9f:75:d9:87:3c:2e:30:11:
         22:7a:ad:36:54:e2:45:08:61:76:77:3b:76:81:4b:bd:86:6c:
         ed:2e:f1:00:e7:63:23:21:cc:e3:55:69:f7:17:74:85:f3:87:
         ae:5a:47:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----