Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/04af2eb8-c91f-3eae-8e80-929bc4371491.roa
File:                     04af2eb8-c91f-3eae-8e80-929bc4371491.roa (raw, json)
Hash identifier:          a0+7ug2oM+0Lq0kdgXJuXlMA5UvmyhsCu9J17thirvQ=
Subject key identifier:   5F:1D:85:77:6D:FD:25:B1:59:60:24:83:B0:07:76:A7:EB:AE:D1:65
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583C971BC06FEC14AE40BED659C0
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/04af2eb8-c91f-3eae-8e80-929bc4371491.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:1b:c0:6f:ec:14:ae:40:be:d6:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=ea806b0f-ac94-41ee-aa69-f1d641abe60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:74:d5:f0:e0:d8:89:76:d4:fe:8a:4f:3f:
                    dc:2b:9b:39:e3:9e:e3:51:0a:b0:b5:09:6f:18:64:
                    9c:77:17:4f:7e:b6:09:40:f0:6f:24:b0:5a:9e:17:
                    88:64:2d:1c:1f:84:57:0a:bb:d0:1d:fc:3d:3b:84:
                    6b:52:d3:93:46:48:88:ed:22:6b:4f:e8:e6:db:ae:
                    ec:94:9b:84:a5:df:3a:ce:20:3e:04:30:47:be:c2:
                    e1:4d:f2:e2:7f:c0:d5:e0:15:a6:f8:e7:2c:11:87:
                    5e:1f:ec:24:28:b8:63:36:a3:4a:ad:49:8a:23:47:
                    08:d8:c2:dc:62:fe:e1:e3:93:a6:ae:d6:e2:c0:36:
                    04:9d:54:b3:ad:56:47:6b:93:09:b6:43:dd:cb:48:
                    78:1a:b8:18:45:c3:b2:fc:05:eb:a7:81:2f:7c:72:
                    7b:c3:3d:e5:0e:75:fe:a6:b0:1f:f8:64:2e:b4:54:
                    2d:67:ec:8b:48:97:26:6d:5c:ad:d5:22:a6:2b:b8:
                    17:79:dd:86:91:fb:60:e1:10:f3:50:ae:f9:4c:6b:
                    fc:65:34:c7:12:7d:fc:ac:85:66:9e:c0:f3:7c:dc:
                    3a:ea:42:15:65:61:6e:de:b6:a1:a4:16:14:5e:47:
                    f3:ba:74:3f:91:6d:ca:48:4e:99:8e:a2:7d:9a:f7:
                    d3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:85:77:6D:FD:25:B1:59:60:24:83:B0:07:76:A7:EB:AE:D1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/04af2eb8-c91f-3eae-8e80-929bc4371491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:e3:c1:fd:6e:9b:1a:45:27:ce:d4:31:40:24:51:c4:ac:
         14:63:32:dc:df:00:d2:e2:4b:1b:1d:c3:9b:5f:f5:4b:67:1f:
         f7:e9:74:cf:20:46:1e:ed:e8:9f:74:c4:47:ce:56:97:34:95:
         ac:3f:bc:60:6c:cf:ea:c7:ae:d4:32:74:e1:90:e4:41:f6:3d:
         70:e4:e6:ef:24:27:26:ca:40:bd:b5:b5:9d:96:0c:ae:a3:22:
         23:88:d5:bc:5c:20:44:c8:db:30:19:1c:5a:28:22:57:8b:8d:
         6e:62:42:f5:9c:dc:29:ec:f2:3f:36:7d:f7:66:b1:d6:00:2a:
         be:c3:35:f0:6f:b9:d3:09:29:97:35:3e:a5:5d:51:ad:d9:76:
         1d:06:30:8b:84:3a:ef:39:95:a6:2e:cf:1f:d1:97:cf:b0:e8:
         c7:d5:9a:8a:3c:88:27:85:a0:9d:e0:01:4f:70:06:b9:51:83:
         d1:18:7f:b3:8d:40:73:63:94:18:c7:35:b0:9b:41:c6:e9:cc:
         8f:c9:d5:dc:c7:29:00:5b:bf:bb:00:ae:78:0b:66:49:ff:31:
         9b:5d:8f:ee:4d:31:84:a8:58:90:2b:a4:2c:23:f6:ae:8c:65:
         d5:01:7f:ba:9b:f0:c5:2a:86:e6:26:14:00:bf:1b:e5:a1:d2:
         fd:dc:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----