Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/349fdee3-7ce1-3525-a2ee-9addcab89f64.roa
File:                     349fdee3-7ce1-3525-a2ee-9addcab89f64.roa (raw, json)
Hash identifier:          Mo0sNz005ZUM35f98sxPt6g+nGTsNFpaGw6Uca9BV/s=
Subject key identifier:   0C:92:E0:CF:D8:8B:59:99:B9:67:A1:69:AA:A5:5F:5E:60:B7:F8:ED
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583F09804969B6771A1B1C578460
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/349fdee3-7ce1-3525-a2ee-9addcab89f64.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Fri 30 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:80:49:69:b6:77:1a:1b:1c:57:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Sep 30 04:00:00 2022 GMT
        Subject: CN=c6da2852-bdfd-4f8f-abf8-895ee07624bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:69:4b:77:c9:d8:9b:49:8d:94:a0:1f:d1:
                    d2:90:fe:91:c8:61:b7:94:ac:d9:c8:a7:47:d9:09:
                    6d:17:c4:1b:82:13:c2:b5:be:61:2f:70:0e:05:4f:
                    5e:95:bb:6d:fa:8c:62:18:93:7f:51:17:77:17:b5:
                    36:72:f1:46:d5:1a:24:19:0f:c9:20:93:78:68:39:
                    15:2c:c5:44:4d:76:00:19:c0:4d:b4:f0:f3:c2:b8:
                    40:d9:00:1c:63:f9:ab:33:e5:f3:73:30:6c:f3:e7:
                    26:77:28:f0:54:55:41:f5:12:5d:8f:4d:89:5a:67:
                    f4:53:0f:0c:bb:c9:4b:92:b8:38:6e:5c:77:86:99:
                    f5:80:e0:67:29:2b:9f:31:e4:a2:b7:51:5d:56:0b:
                    0c:6f:7e:dd:9a:a2:9e:5c:10:72:d7:ed:46:3a:12:
                    34:e4:e8:54:f6:4e:49:6b:5f:b6:9d:2c:2f:dc:5d:
                    dd:f0:ba:e5:4a:b8:2a:84:7b:de:c0:53:b1:de:42:
                    75:9e:34:f7:2e:75:5a:2f:29:8e:46:af:d8:3d:36:
                    2e:dc:c1:1b:b3:ee:a7:d5:8f:a4:45:72:9c:78:df:
                    b3:2e:e4:23:f1:91:20:29:02:a6:78:2f:20:9d:27:
                    4a:5d:9a:0f:bf:c0:53:ca:c4:70:09:d2:1e:fb:d7:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:92:E0:CF:D8:8B:59:99:B9:67:A1:69:AA:A5:5F:5E:60:B7:F8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/349fdee3-7ce1-3525-a2ee-9addcab89f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:08:15:55:e0:05:5c:30:9f:cf:ef:84:1c:2b:fa:88:bc:
         84:d7:93:e6:63:c7:9b:33:74:10:04:8e:9b:25:d0:0b:f6:d0:
         f0:9c:90:05:7e:f6:10:f0:aa:8f:1f:63:c5:f1:4c:1e:94:ff:
         6c:01:8c:57:40:dc:a8:dc:c1:6d:60:f2:fd:71:f9:0a:95:b2:
         78:fb:fa:5d:b4:72:86:0e:23:b3:5c:ba:87:2a:00:a2:c1:b5:
         d0:62:9a:7a:b9:54:fc:53:40:6f:20:34:ec:d9:54:4f:0b:5e:
         84:7f:57:40:4a:6c:8e:ab:fe:59:aa:69:fa:1d:ab:77:a0:07:
         9d:04:53:a1:b1:12:9d:36:cc:82:e4:32:41:18:26:cc:07:12:
         c2:e8:76:fb:0e:bd:e6:fb:d4:32:58:aa:79:72:39:8c:36:bb:
         e1:9d:eb:45:b2:dd:35:21:ff:74:07:b1:8d:4b:98:ac:d2:b2:
         eb:7b:5f:7c:51:73:13:18:a7:3a:df:57:45:03:36:ef:66:e5:
         5e:b6:e5:6d:65:da:4f:d0:dd:0d:6d:b6:27:78:53:c0:1b:e4:
         5a:ae:bc:18:fa:19:83:46:05:33:ee:01:c0:73:e8:e6:de:ed:
         89:79:47:70:75:5f:5f:36:2e:b8:d3:3a:07:4a:7f:36:78:f7:
         05:f9:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----