Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/6179da95-f9a8-3faf-9fcd-71c4c7b6c972.roa
File:                     6179da95-f9a8-3faf-9fcd-71c4c7b6c972.roa (raw, json)
Hash identifier:          S81H3m32o3quKVvknfK24cIDcUBzHkxZwrJpp2XYw4k=
Subject key identifier:   F1:57:C8:C8:B1:EA:CF:7B:A1:B7:8E:86:78:5F:E7:D6:78:C7:E6:E0
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583DD0980796C7057D32894D3300
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/6179da95-f9a8-3faf-9fcd-71c4c7b6c972.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:98:07:96:c7:05:7d:32:89:4d:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=cefe9a71-5b27-4f06-9ffe-24f49a922d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:09:bc:1e:4f:41:d4:0f:15:c8:2c:fe:e9:77:
                    0c:2a:e7:fb:0d:16:aa:a1:ba:26:d1:a9:38:c1:24:
                    cf:ec:c4:ec:47:78:7e:ab:1b:bb:59:c5:aa:8e:9b:
                    55:f2:6c:d3:13:4d:eb:76:8f:50:05:f4:6e:57:d5:
                    42:0f:ca:21:35:1e:83:7a:2b:71:90:cf:e0:a2:b9:
                    15:ed:68:21:7d:c0:66:2c:48:7a:40:45:2c:ac:ec:
                    e1:6b:81:4a:4b:63:04:e6:e4:2e:e8:41:c3:a7:70:
                    4c:df:db:1d:3c:71:bc:06:63:e4:b7:e5:3c:16:64:
                    8a:d3:2c:92:9a:ad:fb:c3:2b:7f:41:9e:77:43:11:
                    81:5e:df:b1:05:0c:db:49:a4:64:eb:e5:97:03:86:
                    a9:d4:b1:21:03:49:a6:12:b6:20:89:e7:20:26:4c:
                    77:fa:7f:9b:be:8b:b6:76:8a:97:bd:f0:22:46:3f:
                    6c:84:03:11:db:f8:52:0a:53:b0:bf:49:4e:2d:a2:
                    da:a1:46:e9:60:b8:74:56:50:2a:ef:0a:20:aa:87:
                    5e:50:a6:80:3a:95:9e:19:11:60:f2:5d:c4:00:fa:
                    b6:1e:a4:8e:98:88:cc:20:d7:9d:68:1f:db:b9:1d:
                    2b:8a:fe:ea:a5:16:1c:29:29:5d:9e:45:13:e1:0d:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:C8:C8:B1:EA:CF:7B:A1:B7:8E:86:78:5F:E7:D6:78:C7:E6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/6179da95-f9a8-3faf-9fcd-71c4c7b6c972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:93:5c:84:98:c7:a9:ee:15:de:f8:79:d2:5f:dc:db:6a:
         8d:12:e9:c8:58:5d:ce:24:c6:a3:ab:ac:ee:7a:ef:2a:42:1d:
         42:1c:5c:7f:43:e5:f1:42:a1:54:54:da:d1:fe:0f:00:5e:72:
         4c:65:c9:97:07:5b:60:b4:2f:60:81:3f:49:2f:a8:bf:98:a9:
         d7:dd:12:38:2b:9c:fc:41:d0:4c:63:55:69:88:5a:5a:40:c0:
         00:99:9c:76:36:46:11:f9:3c:56:a0:a2:78:01:36:43:75:4b:
         20:28:fd:e7:20:33:25:69:23:09:79:e0:7e:34:ba:d8:a9:a9:
         66:5d:59:b8:97:de:de:56:d9:91:be:c3:ea:42:b9:a0:d3:a2:
         e9:55:52:c7:53:d5:ca:8e:69:bb:05:f3:63:ab:48:bd:da:7c:
         ff:ce:73:66:05:1c:0c:5f:54:86:ca:d8:b3:88:60:03:75:3d:
         bc:39:a5:6a:64:aa:bc:61:61:d7:4b:e8:c7:10:f0:4e:a1:3b:
         b5:6b:a8:f7:14:a4:7a:9b:ac:7e:8e:f4:4c:43:c8:3d:d6:d1:
         bf:d5:70:21:05:a8:1a:39:a4:f5:06:61:36:34:19:59:dd:e2:
         c7:34:a8:1b:8c:57:1a:8a:91:74:a3:59:41:11:6e:19:e0:39:
         2f:ed:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----