Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/4c8ec9d9-bfbd-307c-b3f2-ef6262188a5a.roa
File:                     4c8ec9d9-bfbd-307c-b3f2-ef6262188a5a.roa (raw, json)
Hash identifier:          foKNUyw6I5AsDlh4q2Emyg0cVQh2ZK/V0RbsRe5Pi10=
Subject key identifier:   77:81:18:2A:30:0E:D8:FE:93:FE:3E:DB:71:12:08:F1:89:B4:29:F8
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583D0C72D76B974F4F8CF5728140
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/4c8ec9d9-bfbd-307c-b3f2-ef6262188a5a.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0c:72:d7:6b:97:4f:4f:8c:f5:72:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=ae0d4c05-372e-4cd2-86bb-dd831becd05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:ff:9b:33:fa:4a:c7:0b:d4:24:91:57:ca:
                    d4:c6:c2:0f:19:0d:54:8f:48:3b:b8:c9:d5:98:c8:
                    0d:c2:3c:70:8d:3a:68:ae:a6:e0:c1:0e:87:17:7b:
                    c8:79:c0:f3:53:03:a7:6b:26:0b:fc:9c:1b:b9:3a:
                    b3:bb:eb:ce:21:84:b5:2c:b5:93:cf:09:33:04:f2:
                    2c:46:0a:14:79:a6:28:bd:dd:51:e3:f8:5c:93:1b:
                    e5:d3:42:fb:ce:f0:f8:b9:f8:fc:d6:b8:8f:ac:70:
                    17:02:a0:0a:e0:cb:a9:ba:ea:3b:5b:19:7a:81:60:
                    98:4f:94:c0:48:25:c7:5e:6d:b8:9d:a5:b1:b5:6d:
                    48:4a:9c:4c:25:56:d5:6b:80:69:37:66:42:66:de:
                    4c:dc:5e:03:2a:6e:6f:a5:39:09:5f:50:c5:8d:7f:
                    4e:e0:19:9c:95:02:b0:48:cc:f2:15:8a:d4:fa:e8:
                    9b:b5:2f:f6:23:c9:db:21:1e:9e:62:1c:33:32:82:
                    34:ac:3e:6e:ec:64:3c:d2:93:ab:71:12:74:38:68:
                    d0:e6:b4:e9:01:44:9a:2a:e1:93:fb:b1:8b:57:f6:
                    f9:3d:7d:7a:53:28:c9:40:af:db:92:76:60:02:0c:
                    e5:7b:a0:54:25:29:46:3c:a4:da:f2:d4:03:72:e5:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:18:2A:30:0E:D8:FE:93:FE:3E:DB:71:12:08:F1:89:B4:29:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/4c8ec9d9-bfbd-307c-b3f2-ef6262188a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4d:6b:42:11:c2:8a:36:e1:fb:e2:69:75:9c:44:4f:aa:30:
         51:80:b8:63:a0:20:e9:c3:3f:47:0b:5c:ce:3a:e3:57:5b:74:
         84:59:0f:59:f5:f7:f7:d2:35:4c:e1:75:5e:4e:6a:ca:86:33:
         31:2c:23:da:a9:fe:6b:cb:a9:1c:4f:94:64:ac:69:f0:5d:c1:
         70:9f:00:e2:d0:13:10:77:e5:48:56:6c:b3:09:b7:c6:20:d9:
         cf:8f:53:a0:94:51:cb:ed:70:a6:6e:5e:c4:ad:ac:0c:2f:e3:
         06:9e:be:01:9f:f0:e6:d8:de:6a:92:fa:77:8a:ba:94:bd:a3:
         35:9d:19:e8:26:95:b3:49:6d:5f:40:a0:f5:51:63:16:8f:dd:
         36:a7:c0:e0:0e:c1:5e:f2:2c:69:9f:d1:56:db:af:c5:53:69:
         44:0f:73:e2:28:c3:c8:8e:f0:bb:c2:d5:c1:7f:50:d2:df:ca:
         36:b9:dd:93:78:62:46:87:7a:fb:b3:d8:1b:f8:59:93:d0:02:
         33:dc:62:5e:a7:97:c9:68:2c:5a:98:81:e1:13:8a:1f:1e:80:
         c6:0f:60:f9:54:a1:e3:12:b0:51:65:7f:95:06:ea:86:94:32:
         89:c8:5a:78:00:06:2c:ed:f8:3e:a4:de:dd:59:4e:66:f2:3d:
         14:89:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----