Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2b1e3bec-3ccb-3c1b-a474-7c0e7ae664c9.roa
File:                     2b1e3bec-3ccb-3c1b-a474-7c0e7ae664c9.roa (raw, json)
Hash identifier:          UymNeNA/QRjWnyh9auQ8eaiELz4R02ubt3JZrR0VwSs=
Subject key identifier:   56:4F:5D:63:AD:87:93:82:EA:6A:BC:FF:6A:4D:3B:F1:C3:F0:B4:EE
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F7E67AFB18C039E618446BF80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2b1e3bec-3ccb-3c1b-a474-7c0e7ae664c9.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:67:af:b1:8c:03:9e:61:84:46:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=b716e69e-8660-41a1-a140-a5e35ea6c2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:28:6d:91:a5:09:7c:cd:a5:ae:90:35:5f:
                    9f:eb:f2:c9:03:a0:95:12:47:35:fb:70:f1:b5:2a:
                    21:6b:fc:f7:57:8d:4b:54:53:eb:2f:26:8a:3d:3a:
                    ce:62:8a:68:cf:78:78:3b:dc:d5:18:f3:90:1e:83:
                    fb:ab:5c:9e:ff:35:7c:c5:be:ae:20:df:1f:90:e8:
                    25:7a:4d:f5:b8:b1:aa:58:ba:d8:04:71:75:ee:26:
                    2e:39:20:ee:cb:f5:a2:0e:cb:bc:0a:44:45:18:3c:
                    d2:07:a2:cb:6d:2f:c6:e5:7e:2c:f0:b7:a7:d7:c8:
                    2a:b7:03:1f:42:a8:db:34:66:43:43:d6:18:2e:95:
                    a9:97:b0:2d:de:3a:c2:9d:30:2e:6a:a5:c8:1c:82:
                    d6:00:a3:d0:40:e8:14:b6:42:87:19:5a:8e:78:46:
                    54:a1:4d:12:6e:ef:f6:92:97:bf:de:28:a3:13:71:
                    3e:c7:69:e2:45:25:ef:20:89:dc:59:01:f7:56:e7:
                    58:5a:d6:3f:51:67:5b:6f:db:13:26:f8:c3:76:bb:
                    43:35:be:66:a5:dc:37:6c:7b:db:01:2d:f6:88:bd:
                    06:57:6a:10:eb:fa:f5:f2:b9:41:a0:27:92:96:10:
                    35:a9:29:22:50:67:11:a2:3d:fc:17:eb:53:68:f5:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:5D:63:AD:87:93:82:EA:6A:BC:FF:6A:4D:3B:F1:C3:F0:B4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/2b1e3bec-3ccb-3c1b-a474-7c0e7ae664c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:fe:aa:74:f0:28:af:3d:d5:1d:12:0a:50:2c:93:6d:8d:
         b3:79:b0:e8:31:2d:8f:d2:4e:60:54:14:20:9f:55:23:aa:c6:
         ce:ff:36:80:c8:a0:0e:d2:54:dc:ec:40:e6:ff:3d:20:1d:39:
         52:7b:d9:5c:92:61:8c:50:99:23:22:f2:18:44:39:d8:f0:91:
         f3:29:fd:30:b7:e5:b3:24:50:3b:58:0e:4b:1f:35:5e:dc:79:
         73:cc:cd:53:86:93:cf:f2:af:a4:4a:36:d4:13:1e:1c:10:09:
         38:27:5b:6d:32:ea:de:40:a6:df:10:c8:09:a8:a9:46:62:e0:
         32:d0:ad:34:a6:64:22:f6:69:ee:4e:ad:1b:b9:53:72:fb:7c:
         dc:89:fe:68:40:68:87:98:c2:1b:76:a1:a7:2b:a3:01:05:80:
         9e:46:98:1e:55:47:c4:28:21:7a:60:35:f1:f0:f0:48:05:5b:
         dc:f5:be:7f:33:79:89:27:35:44:c8:b5:b9:f7:a6:a7:40:ac:
         5c:76:86:91:30:ab:83:a7:76:11:eb:b0:35:af:88:3f:8e:6a:
         b6:47:f3:ff:c4:2f:37:4e:3b:af:7b:3b:60:74:68:18:b1:97:
         ae:98:87:5e:91:8e:c2:f1:ab:c7:ea:88:47:97:a5:45:df:b4:
         6c:3d:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----