Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/82445cb3-d0fd-3bb0-b6e3-5e911fdd54fb.roa
File:                     82445cb3-d0fd-3bb0-b6e3-5e911fdd54fb.roa (raw, json)
Hash identifier:          RTEoKqofj64zCtHLc3lJXVM9uOzzHx43LpX+ytSG57s=
Subject key identifier:   F6:DC:4F:A4:8C:99:CC:C5:15:BB:6B:AC:10:09:94:45:20:11:51:C4
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583C971BA6FCFB363A9819384C80
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/82445cb3-d0fd-3bb0-b6e3-5e911fdd54fb.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:97:1b:a6:fc:fb:36:3a:98:19:38:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=920081da-48df-4d14-a62d-f3157858ab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d3:b5:9f:05:9f:c1:bc:79:8e:1b:8b:d0:82:
                    89:06:4c:6f:e7:b2:70:ba:1f:17:77:ed:79:66:4e:
                    cf:de:ac:4a:1e:de:da:15:9c:9d:a7:10:79:7c:4b:
                    53:a2:f7:fd:e4:74:0a:42:67:32:a5:31:28:fd:ff:
                    67:51:a4:5d:2e:6a:5d:e1:11:f3:22:b9:13:b4:6e:
                    2d:51:39:85:41:34:92:0e:40:1a:0f:40:cb:e6:e7:
                    b1:ec:d8:5b:cd:70:74:6f:f4:8a:cb:21:d1:98:ab:
                    e3:13:ab:fe:06:b4:39:cf:db:72:42:02:21:c9:e8:
                    2e:75:4d:b3:44:66:98:e5:f6:66:c9:eb:b1:82:ab:
                    d2:f2:93:0e:c7:dc:fd:a2:c4:91:2c:22:f9:9b:0d:
                    c8:ef:ca:00:d3:42:9d:b9:cc:38:c1:75:48:e6:a7:
                    14:78:cf:50:d2:5f:56:8f:8b:36:3d:fe:8d:51:61:
                    34:43:59:c1:e1:e1:25:ce:c9:68:bf:c6:1e:3d:ea:
                    98:62:7c:76:cc:8c:8f:22:c1:5a:8d:01:35:ea:c0:
                    c9:57:da:2e:3c:df:00:e6:9f:19:6b:fa:c0:15:f1:
                    83:5b:67:45:1a:b8:c3:ad:3c:92:f3:04:cd:7e:8d:
                    b2:04:19:12:bb:40:85:b5:5b:03:d3:d2:a9:ae:66:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:4F:A4:8C:99:CC:C5:15:BB:6B:AC:10:09:94:45:20:11:51:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/82445cb3-d0fd-3bb0-b6e3-5e911fdd54fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:78:13:23:e3:6d:30:32:f5:8f:01:dd:f0:9a:19:1a:4b:
         c9:9b:bb:89:ef:42:12:da:d0:d5:ee:c2:10:03:f2:d9:ab:55:
         72:1c:cd:0d:20:50:e2:8f:ec:21:1e:a3:76:f2:96:e6:c6:19:
         8e:2e:e8:df:79:dd:f3:e0:df:e6:da:63:72:db:54:7b:ec:49:
         cc:a9:c6:23:81:05:75:f0:82:d3:bb:5d:ac:53:02:a2:8c:66:
         ae:74:44:d4:36:c9:59:5e:2b:da:5e:dc:e9:80:8d:7c:c5:57:
         fe:47:ec:fd:97:53:fa:60:69:91:c1:6f:bd:99:2d:cf:90:fe:
         68:76:51:9d:2a:6b:22:d4:cd:30:70:af:f0:e7:3d:98:f1:7f:
         2a:16:f9:a2:f5:77:bc:4d:62:ac:03:c3:a0:9a:7e:91:16:4e:
         e1:73:36:7e:83:8b:62:40:ad:a0:63:c2:34:b5:d3:0e:3d:be:
         de:88:12:b3:84:65:4a:78:b2:11:86:70:21:a3:d4:f7:ea:6c:
         77:cb:be:7a:e5:76:fa:49:8d:23:c5:0a:83:eb:42:3e:dc:c2:
         45:f2:f7:7c:85:91:74:0a:71:bc:64:a2:1a:13:fc:04:a4:ae:
         13:95:39:85:79:c5:11:40:89:35:b6:60:c8:62:c7:66:12:59:
         82:28:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----