Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/5f1e01a3-6f36-326a-81f7-92d86dc59b35.roa
File:                     5f1e01a3-6f36-326a-81f7-92d86dc59b35.roa (raw, json)
Hash identifier:          YKU24Db9p95p2TTep6eRRrsqfkx3stHvWLBQ+iRFnJw=
Subject key identifier:   44:5A:CE:35:00:0D:2B:27:48:B1:69:E4:EC:64:E5:8C:54:2A:ED:C4
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583F578631DF211024D7864837C0
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/5f1e01a3-6f36-326a-81f7-92d86dc59b35.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:86:31:df:21:10:24:d7:86:48:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=d4de53e8-fe23-47d9-998b-39d334c949f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:ca:e9:9a:10:5b:9b:ab:6a:6f:7e:87:f7:
                    55:fe:39:d3:2f:56:2d:17:3f:7d:7d:bf:e1:34:dc:
                    74:18:26:cf:9f:8c:37:aa:46:33:b3:cd:fd:b0:eb:
                    b3:9f:60:67:95:69:5f:2e:d6:1f:84:1e:e8:1c:64:
                    01:18:a1:64:56:5e:17:70:a6:08:99:84:9f:7a:12:
                    6f:7e:e8:10:34:09:7a:9f:8d:56:77:2c:53:ea:4b:
                    33:78:98:33:eb:1b:6b:ca:dd:2c:98:e2:f1:fb:de:
                    22:df:9a:c7:15:c5:55:7c:67:b7:bb:50:4b:ac:17:
                    23:ac:c2:74:e1:7a:ff:c4:85:97:a2:e3:c5:f2:42:
                    7b:ac:b4:1a:e2:86:12:3b:eb:c5:12:e2:6c:59:3c:
                    3e:71:f7:ed:64:2d:f5:5e:aa:55:af:46:7d:ef:b2:
                    a0:21:15:7d:3f:8f:b1:b2:eb:26:cc:d3:2e:3b:2a:
                    a0:15:ec:da:08:82:7b:ed:bf:39:20:ef:21:3c:58:
                    a8:12:12:3b:3c:ce:24:11:d8:b2:ad:6e:7a:08:fa:
                    93:ac:87:00:6e:0b:80:39:43:82:cb:1f:8c:4b:b4:
                    13:c3:2f:5e:e9:94:be:22:15:cd:fc:69:8b:6e:5a:
                    56:53:c8:d1:37:dd:17:0e:5a:f4:b5:67:82:e4:99:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:CE:35:00:0D:2B:27:48:B1:69:E4:EC:64:E5:8C:54:2A:ED:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/5f1e01a3-6f36-326a-81f7-92d86dc59b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:0e:70:b0:56:90:4a:f2:95:d5:be:2f:f9:ea:52:21:2d:
         3b:0d:7f:57:08:56:3c:c6:c6:45:91:de:ad:01:bd:f8:ad:50:
         e6:60:39:e7:48:7e:e3:ad:7b:72:05:d1:2d:fc:c7:f7:5e:54:
         5d:f5:e9:1f:b8:0b:8e:17:9e:18:c6:96:81:39:c2:83:2d:61:
         da:f7:e1:87:a0:e0:6f:f2:fc:bb:83:f8:aa:4d:f5:4d:dc:e7:
         21:7e:36:2c:c7:0d:02:86:b7:9c:19:0d:33:fe:1f:45:de:a8:
         f2:67:f7:49:5b:a8:d8:b0:5b:0c:07:2b:42:ac:05:90:e2:dc:
         0f:b0:7f:44:7a:0a:29:45:8f:73:d7:90:cf:35:b3:92:c2:1c:
         43:1b:a4:e9:bb:8d:6d:01:f2:65:fd:fd:f8:a1:fc:95:1e:3e:
         d7:b5:b6:79:ac:75:1a:37:64:ac:61:0e:ce:80:98:bd:8d:6d:
         1e:a1:b6:a1:92:63:82:f6:3c:82:72:33:a5:0f:27:6d:4e:c8:
         ee:63:aa:83:1d:1b:71:b2:6c:a1:59:ca:e1:4a:23:89:b2:ed:
         66:8c:2e:dc:bd:85:ec:c6:4c:2f:96:c2:54:73:19:c4:47:c0:
         d5:64:9a:73:7b:61:12:5d:4c:35:d4:80:08:48:9b:63:ca:65:
         33:45:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----