Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b8daf582-273f-3b00-916a-fc264aa8dfdb.roa
File:                     b8daf582-273f-3b00-916a-fc264aa8dfdb.roa (raw, json)
Hash identifier:          gtn3KlIlRC1iidqGlYPcY0QX6VDP2UO/D3636mum6Lk=
Subject key identifier:   52:6C:B7:99:53:A1:A8:84:C7:7A:15:11:8E:38:4F:2F:60:57:7E:75
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583EA46A76650F6291638AEA8680
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b8daf582-273f-3b00-916a-fc264aa8dfdb.roa
Signing time:             Wed 20 Jul 2022 12:00:00 +0000
ROA not before:           Wed 20 Jul 2022 12:00:00 +0000
ROA not after:            Thu 25 Aug 2022 04:00:00 +0000
asID:                     19047
IP address blocks:        2605:b940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a4:6a:76:65:0f:62:91:63:8a:ea:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Jul 20 12:00:00 2022 GMT
            Not After : Aug 25 04:00:00 2022 GMT
        Subject: CN=8e342455-27a7-40b8-93b5-1ec80ad2b66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:55:1d:81:e7:ff:82:06:1d:96:38:20:9b:
                    c4:ca:cf:c8:ca:37:24:66:5e:96:ee:72:f1:0c:c3:
                    4c:4c:d1:94:13:6c:7f:64:fa:a4:1b:3b:91:49:8e:
                    32:bf:2f:43:25:03:a6:b1:f1:0d:ba:55:dd:92:4b:
                    8b:07:99:57:e7:3a:c2:c3:ef:18:c3:bf:bc:b1:e3:
                    16:98:69:2e:67:83:82:85:ca:f6:b2:d1:70:5e:c7:
                    5f:f4:28:94:88:09:8a:47:5d:44:a7:96:46:a1:12:
                    32:c0:c1:35:f6:f9:37:bb:44:2e:9f:c3:11:7a:86:
                    b2:ab:21:a7:ef:f9:21:a7:77:92:d5:0e:53:cf:f4:
                    b8:96:fa:52:00:99:c9:06:d2:6f:49:5b:f6:b7:c1:
                    cc:2c:93:0b:71:4b:bb:ef:8e:bc:bb:03:04:19:f2:
                    5c:ad:38:39:2c:20:b7:c5:2e:c8:67:d8:98:e8:1c:
                    9a:2f:54:db:d5:b1:0b:c0:b7:17:c2:f8:7f:cd:ba:
                    68:9f:54:23:ea:25:e2:bc:90:7e:e0:29:26:73:f0:
                    f6:d0:b2:f5:af:41:f7:ae:1b:a8:2f:39:c5:5b:b5:
                    ba:bf:09:a5:81:a8:6d:91:af:d0:f2:14:8d:42:ce:
                    98:2d:fa:3a:35:30:3c:e2:04:05:e6:20:59:35:8e:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6C:B7:99:53:A1:A8:84:C7:7A:15:11:8E:38:4F:2F:60:57:7E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/b8daf582-273f-3b00-916a-fc264aa8dfdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:d7:7a:ab:62:e8:52:95:b0:86:be:b0:a1:7b:f1:24:21:
         7a:5c:e3:c1:12:a2:9d:5a:ca:da:98:04:6e:2b:d2:65:fc:fd:
         8d:3c:8d:82:3c:56:28:e4:3c:61:ca:14:e0:f5:66:e3:d4:58:
         34:ee:d2:17:24:1a:fb:64:3d:fc:72:cc:3e:e5:2e:a9:24:55:
         98:22:2a:ee:41:08:9f:7c:f9:c7:5f:c7:52:4d:52:0e:38:86:
         44:5a:1d:f4:88:c2:32:e5:81:b6:c7:12:42:25:6a:b2:83:7f:
         3d:5e:a7:3a:1f:cc:35:f4:f9:73:66:44:35:8c:6f:01:1a:11:
         bb:fb:a1:e6:0c:a9:48:e6:32:c0:dc:68:97:3c:a8:cc:d6:56:
         e2:5d:a4:9f:f9:4b:54:3c:b3:db:eb:34:83:44:ba:d6:1f:1b:
         9b:02:b4:81:7d:ec:a6:63:35:92:ab:f8:e7:d5:78:dd:94:45:
         5e:8c:76:49:da:cf:f7:fa:52:34:8d:fe:87:72:e4:51:c4:64:
         cf:08:87:71:5d:95:a5:23:bf:b9:3f:09:61:55:d0:0f:c4:a7:
         6b:0a:f0:e0:44:16:c2:01:00:6c:ba:3f:26:1a:e4:06:48:75:
         a1:69:e7:6f:1a:91:32:56:35:01:44:af:70:b6:3e:f4:a6:95:
         db:56:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----