Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4bc105d9-5624-32a1-b668-8c28a8f0d777.roa
File:                     4bc105d9-5624-32a1-b668-8c28a8f0d777.roa (raw, json)
Hash identifier:          RcJvYza9s5NiBXGYr/wB6+4L1xh10oVNbAPzcFH6veY=
Subject key identifier:   0B:F7:5C:73:7A:B8:60:15:62:E8:E3:6B:26:BB:21:DB:C7:B3:73:02
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583F7E67B6196FB12B22E1D36880
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4bc105d9-5624-32a1-b668-8c28a8f0d777.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7e:67:b6:19:6f:b1:2b:22:e1:d3:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=cf400825-d376-4ddb-8dbb-17b47d4fa4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:82:48:c9:d0:e5:d0:34:c6:a5:d3:44:f2:
                    b7:fb:e4:e5:e5:5a:88:04:3b:94:7f:6e:c1:8c:e5:
                    55:d5:19:d6:65:90:2b:9e:7e:8c:49:95:fc:ee:ea:
                    30:23:5e:2f:c5:95:dc:30:25:2c:17:cc:2b:24:68:
                    90:d0:b5:37:15:9c:c0:0e:22:11:a3:30:be:93:0c:
                    58:25:44:6d:69:ee:67:06:85:1a:cd:c0:6d:8c:1d:
                    b9:d3:1d:5e:75:da:75:d3:65:96:64:ce:bc:e4:be:
                    3b:ee:03:1e:f7:e1:83:4f:87:b7:aa:70:cf:55:28:
                    9f:c4:e9:ea:68:d0:34:be:6e:70:16:35:ed:7d:a5:
                    2f:6f:8f:11:b2:72:f2:d0:70:a4:1b:54:ba:4f:2d:
                    16:2d:34:20:f4:01:9a:9e:84:7b:1c:92:7d:cf:cd:
                    96:7d:ab:64:ab:1c:42:e6:6d:5d:23:36:ca:ab:fa:
                    92:42:2b:5b:53:4d:21:8a:37:84:b0:40:56:d9:69:
                    d0:e4:86:6b:a7:c7:6a:4d:13:4e:b6:76:fe:83:15:
                    8f:c5:87:6d:00:dc:7d:82:fa:84:6d:99:84:d0:57:
                    0a:b6:e3:6a:5f:c8:de:89:ee:21:66:bf:ce:52:52:
                    c0:19:53:ad:08:77:e7:d9:f5:8d:33:2f:b3:ac:c8:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F7:5C:73:7A:B8:60:15:62:E8:E3:6B:26:BB:21:DB:C7:B3:73:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4bc105d9-5624-32a1-b668-8c28a8f0d777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:7c:98:06:ba:d1:5f:e6:a7:6b:1a:8d:92:13:63:60:21:
         ee:d2:55:47:e7:a9:1e:b6:2e:21:8b:2b:71:94:16:2a:fb:ff:
         5a:e6:16:2c:54:0d:bc:05:05:99:58:a8:40:10:34:d1:3c:d0:
         a2:15:37:f7:8e:61:a4:27:30:b1:26:41:b6:1f:c9:60:3d:a9:
         9f:2d:10:5a:b3:ef:bd:2e:e7:48:f3:cd:9e:7f:89:42:47:2e:
         4c:9c:b9:10:ca:16:5b:e6:32:f8:d0:14:ef:ab:78:8d:ad:b1:
         91:81:71:62:bb:c6:87:6c:b4:96:8f:64:d1:c6:c4:b5:1e:0a:
         4f:8d:23:88:d8:8b:fc:ce:c9:7f:5c:53:80:a0:30:f2:1c:e4:
         eb:e6:eb:e3:92:c7:fc:96:56:74:78:8e:18:5b:0e:28:47:ad:
         20:6c:90:14:dd:fb:b7:c2:5d:0c:1a:c3:20:a6:dc:4c:c6:8a:
         a8:36:f7:aa:ac:f9:fc:1c:a3:b8:14:fb:f1:86:ec:88:eb:8d:
         6d:81:27:f5:72:65:27:f7:37:e1:35:3c:f7:9f:ef:cc:38:8c:
         2b:28:1a:13:13:67:5d:e1:b2:0e:14:76:b2:c7:b0:c0:05:ac:
         ea:14:63:89:8c:59:67:04:6f:ec:19:88:2c:13:36:e7:c5:07:
         49:f1:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----