Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16eb9771-a762-345f-be8b-3224a14dd445.roa
File:                     16eb9771-a762-345f-be8b-3224a14dd445.roa (raw, json)
Hash identifier:          2Flh5jInb7zQ2RP0Gy6eBGcbF6+VQHtWadjSBEnnQhQ=
Subject key identifier:   29:6B:24:76:2F:F2:C4:60:28:43:A8:C4:14:91:13:E1:F3:82:6F:63
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DC8BDC96CAD11500BCE4B8960
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16eb9771-a762-345f-be8b-3224a14dd445.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Wed 08 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:1f01:4800::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:bd:c9:6c:ad:11:50:0b:ce:4b:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2022 GMT
        Subject: CN=963e8d44-efe0-4453-a60e-9a227219148b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:c0:a7:bb:f7:36:a2:28:8a:91:09:dc:dd:
                    ad:a4:58:1d:30:65:6b:2e:79:67:a0:e7:e0:38:04:
                    88:06:cc:7f:b9:5f:39:5a:97:21:a1:5b:78:87:38:
                    c4:64:11:80:a9:a0:48:ff:11:df:99:50:16:ae:db:
                    60:a0:1c:ff:e8:c3:c7:2b:b2:ec:f9:ca:0e:9d:5d:
                    42:aa:46:81:d5:b6:fd:10:b8:55:89:7e:71:64:ff:
                    32:bc:74:2c:3d:a4:e1:4a:5c:f3:c1:11:5b:31:94:
                    a0:e4:87:7c:5a:84:ef:66:7c:7c:db:ce:2c:b1:22:
                    fc:1c:61:08:23:75:03:4e:e5:b2:c8:c1:c6:3b:c9:
                    62:16:d8:31:c2:85:b7:af:43:09:cd:0c:c2:bd:83:
                    68:a2:c3:e4:62:34:b7:2d:b2:f0:67:96:df:0c:8d:
                    e1:c1:11:e4:88:f2:23:dd:62:ec:93:eb:5c:b1:0b:
                    64:ce:25:7d:ed:12:4d:63:38:79:8e:d2:df:8f:18:
                    97:3e:91:8a:f4:65:e5:0a:cc:e4:e7:7e:23:05:31:
                    1f:9d:60:7d:a2:f1:1c:85:d0:d8:29:b1:25:b2:3a:
                    e9:0d:4e:7e:14:63:bf:02:b4:22:b9:2b:d5:8d:5c:
                    5f:63:9d:c6:b7:15:a0:88:fa:4b:2a:1e:84:b2:81:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:24:76:2F:F2:C4:60:28:43:A8:C4:14:91:13:E1:F3:82:6F:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16eb9771-a762-345f-be8b-3224a14dd445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f01:4800::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:90:69:67:bc:9b:82:d7:42:61:45:2a:13:4a:0c:a9:1b:
         b1:ea:39:7d:b5:ba:d1:ce:b9:b2:78:68:2a:42:8f:e7:45:5c:
         bb:da:b7:a4:1e:07:a9:90:5b:d5:46:a1:c0:be:3c:08:ac:5a:
         17:f7:85:82:7f:37:b8:60:9c:4a:fb:a9:93:22:f4:04:d2:e7:
         55:f9:25:41:50:49:4c:60:75:63:0e:c8:03:d3:9a:c5:eb:8a:
         e9:c0:90:bb:ae:2c:ba:46:e4:38:07:19:1a:c1:bc:7e:53:17:
         ba:0f:ef:d2:54:e1:48:55:5a:70:01:6f:6b:81:98:a2:13:a5:
         23:4a:f8:e1:2b:4a:96:c7:ed:aa:de:9f:ec:31:aa:01:d8:09:
         8b:00:5b:de:d9:a1:7c:3b:c9:81:2f:86:75:2a:da:ac:2b:d4:
         fd:ee:e4:a1:66:a6:b8:54:77:9f:16:dc:9f:38:46:80:4d:99:
         6f:27:bf:f9:a2:da:13:02:41:dd:fc:c7:d0:3b:86:4b:00:fb:
         89:39:93:df:d8:89:8a:66:ac:e4:37:8a:da:0f:6a:25:ff:c3:
         65:c0:a9:77:dc:d0:bf:43:50:97:cf:e5:73:94:28:3f:06:1a:
         23:82:97:f9:02:ff:38:1e:ba:a2:22:01:50:b3:85:65:91:63:
         73:69:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----