Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/47403128-d436-3d9a-8377-b888139e0f5c.roa
File:                     47403128-d436-3d9a-8377-b888139e0f5c.roa (raw, json)
Hash identifier:          v7EG03xSZYSy5O3PcEFtAxd1qs5bb5TiL3FW9f3tdno=
Subject key identifier:   97:8A:34:FA:49:B9:AA:09:21:72:CE:F5:3C:B5:58:3C:8A:A1:3B:5C
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583D5AACE1EF79DD1177F0CD9540
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/47403128-d436-3d9a-8377-b888139e0f5c.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:ac:e1:ef:79:dd:11:77:f0:cd:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=071e0ac1-24d9-49fe-8ac5-11d59958544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:74:e1:c7:e1:e9:c2:d8:98:2d:42:6a:23:
                    72:9e:88:86:f1:55:6a:54:69:42:af:22:d8:77:ce:
                    d4:ea:b5:57:5c:b0:3b:59:0f:fc:b6:97:38:8f:b9:
                    42:08:5f:6c:0c:59:8e:24:22:95:0e:db:78:20:84:
                    41:75:ad:4e:3c:a7:dc:f6:94:9a:af:f3:e0:8f:b4:
                    88:b7:2d:fe:e7:c6:2d:3d:60:ef:24:40:d8:6e:c4:
                    d6:0b:c1:88:5f:32:c8:a9:8d:5e:98:c3:e6:22:91:
                    ab:9f:7c:22:d0:f1:ac:81:40:89:d2:12:78:e7:d4:
                    b5:63:a1:81:22:67:b9:5c:68:6d:e0:17:28:13:f9:
                    e4:9f:27:fc:a0:08:7d:26:8f:32:93:df:07:8c:7a:
                    e0:46:75:02:13:0e:04:a3:8f:57:f8:67:05:bf:20:
                    97:ce:6d:53:8b:70:9c:97:c5:3f:d1:97:e0:bb:71:
                    a5:9d:4e:b7:bd:7a:d0:44:5f:44:8f:d0:00:08:db:
                    03:8f:72:e4:75:65:52:b3:38:c6:b5:99:c0:88:04:
                    12:99:94:97:7b:3e:80:be:7f:e7:80:94:39:12:c9:
                    c6:62:4b:24:8d:49:2e:12:2d:46:c4:d7:8f:f8:13:
                    95:c3:01:e1:b7:ec:04:df:f6:99:bd:89:bf:f1:83:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:34:FA:49:B9:AA:09:21:72:CE:F5:3C:B5:58:3C:8A:A1:3B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/47403128-d436-3d9a-8377-b888139e0f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:22:d2:1a:42:e8:fc:26:33:70:3d:b3:23:f6:ff:b0:44:94:
         7b:33:ba:8a:bd:73:76:37:bd:74:c7:ce:96:55:b7:5a:07:54:
         77:df:01:07:df:11:a1:fe:71:41:d3:16:f9:c3:e7:3d:41:e1:
         dd:2f:e6:8a:18:47:d9:ba:a0:7b:b7:83:57:61:91:cc:05:43:
         44:5f:77:38:45:0e:20:08:93:53:b6:88:05:b2:4b:5a:31:b5:
         75:3c:36:b1:7b:47:30:4c:6e:eb:bd:8f:a6:63:0d:9d:7a:63:
         62:50:f0:2c:93:e8:3f:2a:34:11:2a:a5:fe:b6:46:26:05:62:
         93:05:fc:bd:ab:a3:cc:d0:1c:b3:39:1a:4e:ee:9b:cc:e2:e7:
         cc:1b:f0:65:fe:91:db:f7:df:7e:d6:7b:c7:38:7d:f4:d6:d5:
         f8:ff:c6:b8:1e:31:f5:f9:5c:b8:fa:aa:63:70:39:ce:4d:03:
         05:1b:6c:15:7c:ad:83:b1:ed:a3:46:6b:b9:01:03:3c:8e:09:
         7c:87:20:98:2f:f3:ba:53:fe:a3:45:67:64:7e:ee:9e:64:c3:
         73:f8:0e:cc:e9:94:2f:df:57:1b:a3:fe:17:01:57:6a:6c:27:
         3c:55:5c:45:03:43:4a:dd:51:b1:8a:70:a9:b8:ae:61:6e:9e:
         ab:b7:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----