Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/effb2645-4ec1-3136-8677-a3e76720bf17.roa
File:                     effb2645-4ec1-3136-8677-a3e76720bf17.roa (raw, json)
Hash identifier:          U6ElI29oslxmAkaHj1d+7OABMDfdBskDP2DWKOr6hrw=
Subject key identifier:   8E:BF:B3:35:AE:3A:14:D6:3C:8C:DF:17:71:91:DF:10:D4:3C:DF:59
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583FA5B888295B0AE144FA985940
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/effb2645-4ec1-3136-8677-a3e76720bf17.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2620:108:d000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:b8:88:29:5b:0a:e1:44:fa:98:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=9dcf3cda-7bd6-4dec-87eb-027a42e1ff3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:2e:68:e4:14:1c:f1:76:48:be:f0:8b:56:
                    28:c9:d0:84:76:00:e9:01:6c:26:09:69:49:3b:42:
                    8a:7b:64:76:06:0e:d5:f1:1f:92:ec:8f:f0:86:27:
                    53:19:72:3d:d7:31:0d:3f:f7:83:fb:96:5b:21:2b:
                    78:fd:1d:f3:c9:a7:54:41:83:9e:e1:21:86:c1:be:
                    76:37:6b:c6:66:9e:43:b5:ba:83:61:1c:ac:a9:18:
                    ae:cf:32:34:3d:30:36:70:a8:87:a0:1e:f4:c2:6b:
                    86:73:cc:cb:66:51:67:db:73:e5:b1:ab:4b:11:e2:
                    b7:dd:44:85:f8:c7:78:73:55:32:62:e6:a8:58:14:
                    6f:a0:69:67:f7:57:92:cb:46:de:98:8a:d4:7a:b7:
                    db:84:aa:1a:be:7a:16:c6:12:a8:5b:75:44:29:6b:
                    80:70:85:05:32:21:28:20:37:2f:98:76:ef:ed:07:
                    cd:a5:98:ef:3c:96:22:de:ca:a5:72:f9:23:34:63:
                    49:a3:51:3b:f6:31:ea:7d:a9:10:d3:8b:72:96:8b:
                    b8:73:73:8b:3b:fe:4e:5a:9f:f3:89:6c:b6:a0:54:
                    14:a4:f7:3c:08:b1:fe:a4:d2:84:02:04:d7:1c:04:
                    46:fd:51:69:b0:a1:6b:09:a1:28:38:ee:f1:df:80:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:B3:35:AE:3A:14:D6:3C:8C:DF:17:71:91:DF:10:D4:3C:DF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/effb2645-4ec1-3136-8677-a3e76720bf17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:c7:fb:d5:0f:72:99:d3:bf:8e:6f:51:00:ac:6c:d0:36:
         4a:36:66:b7:3a:16:6c:6f:75:79:c6:a8:6e:9d:b9:74:7c:52:
         14:fd:9d:1b:fe:7b:bb:1e:dd:7b:c9:1c:4f:96:e5:30:73:00:
         97:72:44:38:6b:b1:c3:7f:0e:e1:8f:ff:c7:3b:2c:49:9a:69:
         53:ed:96:be:b5:34:d8:04:56:69:78:04:99:18:18:0b:4f:e7:
         04:70:99:17:6b:c6:d6:e0:75:ae:68:51:5a:2c:2f:69:2b:be:
         e2:9a:8b:09:b3:72:b5:59:69:1b:6b:8c:5d:aa:0d:a0:41:87:
         1a:69:39:ba:eb:01:68:f3:94:db:16:7d:f9:2e:29:22:ab:24:
         1a:13:2e:1e:cd:12:6c:df:a5:96:d4:48:ca:16:26:18:f9:48:
         0d:8d:2d:c3:c2:19:d1:ea:b4:de:62:0a:f6:f9:1a:3d:1a:66:
         5f:79:5c:f6:bf:09:a3:7c:7d:f1:d6:b0:3e:75:ee:21:0d:5c:
         3a:ba:78:37:df:13:d2:50:42:59:1f:96:d3:c3:4c:78:de:0d:
         bd:c2:ff:88:f2:5d:97:dc:9c:8d:17:a3:94:a2:15:a5:13:cb:
         46:ba:6e:e2:f6:b6:62:71:13:61:9b:56:13:c1:21:2c:23:93:
         d9:c8:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----