Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3e91bf13-802a-382e-97ce-0d61e0cab3fe.roa
File:                     3e91bf13-802a-382e-97ce-0d61e0cab3fe.roa (raw, json)
Hash identifier:          nHyd1VtZsDQAtzeH7StFVIG+KL0rJCqfOPYx+zTUbqs=
Subject key identifier:   EA:1A:A4:40:5A:AE:88:A5:0C:52:20:DE:14:D8:2F:73:FE:A9:70:6A
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583FA5849D5718007ABF1952C280
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3e91bf13-802a-382e-97ce-0d61e0cab3fe.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a5:84:9d:57:18:00:7a:bf:19:52:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=360c3ecc-e227-4148-94d1-8b7355771c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:80:f8:6b:80:2a:17:b0:83:46:5b:34:c8:
                    60:7b:1e:84:95:7b:80:96:d1:4f:5a:74:b0:9a:b2:
                    b2:4a:60:65:c3:27:8e:54:9d:74:6a:a8:d8:40:0b:
                    81:db:e7:81:d4:fb:e4:f4:50:22:6e:ee:de:da:5c:
                    f9:8b:9d:cc:65:d5:a5:02:26:37:e6:77:e4:31:58:
                    72:d7:43:8f:21:3f:d2:05:90:22:c5:8f:51:c4:1d:
                    7c:04:1a:23:fb:d1:fc:21:5c:35:65:a0:32:1f:f9:
                    df:15:03:d7:fc:ea:46:41:18:52:0f:a8:69:28:2b:
                    b3:bb:32:d0:eb:b6:9f:3d:4d:49:fc:5b:70:7f:d8:
                    47:0b:41:6d:56:3f:d1:fc:f4:27:ee:fa:39:c2:b9:
                    83:4c:85:32:19:9b:c8:61:1d:6c:0b:c9:46:70:73:
                    e6:39:f6:02:4c:d9:3f:4e:ff:48:7e:54:82:2f:0c:
                    13:47:0b:cf:86:71:f7:52:67:a8:15:b2:8c:c0:c4:
                    f5:f8:c6:c3:44:51:c5:76:f0:e7:74:af:a5:d0:80:
                    30:73:2f:84:3b:ce:a4:c8:d6:d9:cc:9b:53:b9:c7:
                    a3:2b:fa:ae:55:ba:80:a8:f6:71:8a:08:5e:09:11:
                    75:b3:78:68:6a:46:80:83:c5:b9:41:ea:cf:8a:11:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:A4:40:5A:AE:88:A5:0C:52:20:DE:14:D8:2F:73:FE:A9:70:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/3e91bf13-802a-382e-97ce-0d61e0cab3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:6d:b8:93:40:9b:2e:fa:eb:2a:d4:43:71:44:98:0b:ce:
         4a:58:e2:74:34:7f:1e:50:a0:fd:01:ab:61:48:20:11:45:e5:
         49:89:99:97:cf:1e:56:5c:52:8d:d1:b5:09:15:67:8f:6f:22:
         66:3b:00:5c:52:03:81:5d:a2:91:bc:cd:54:39:6e:78:26:e0:
         33:7c:a9:5b:5b:58:78:3a:42:9a:eb:62:ab:f4:39:e2:5b:88:
         f0:a2:7b:91:3f:7b:77:b2:67:8b:e4:dc:5a:f8:14:91:18:a4:
         84:85:01:71:7d:99:88:43:46:46:2d:cf:8c:d8:ed:46:12:7a:
         c6:08:09:23:b6:80:7d:d2:35:ff:87:67:51:6e:79:7b:99:a3:
         64:1f:bb:3e:10:b2:a5:a5:16:85:9b:43:ab:8e:b0:d0:ed:68:
         0f:d8:21:ed:9e:6e:e5:38:31:f2:10:88:d4:69:35:7f:26:05:
         cb:5c:5a:a1:5d:ab:2d:d7:f0:8e:31:53:59:db:3a:5f:ef:07:
         8d:44:eb:82:3b:aa:ed:36:8a:0e:be:85:fd:a7:c4:7e:52:a9:
         fb:bc:01:63:51:39:36:e5:3d:7b:64:5b:26:c1:ff:8b:d5:ed:
         ca:0d:f4:46:f9:39:7b:27:7c:46:96:34:74:34:1e:16:54:76:
         61:22:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----