Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c2722fed-75af-3261-a89a-c3d4d8c51a5b.roa
File:                     c2722fed-75af-3261-a89a-c3d4d8c51a5b.roa (raw, json)
Hash identifier:          kuVOZRO2tp3dSKTfpRozJ99ZrLypbsyRUWZVW0cyAgA=
Subject key identifier:   29:4E:23:15:BB:1C:86:DE:1F:46:FD:A8:BE:73:1F:7E:7C:5E:C2:1A
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583DA973AA3AB766E738C44D36E0
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c2722fed-75af-3261-a89a-c3d4d8c51a5b.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:73:aa:3a:b7:66:e7:38:c4:4d:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=80ee2af0-f6ab-4e46-aad8-380e1fc70418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:29:40:b3:d9:cd:55:c5:56:46:46:4b:5f:0a:
                    5d:a5:29:1f:bc:d5:a2:e2:02:44:e8:e4:d3:19:c0:
                    3c:cf:3e:c3:d1:6c:4a:84:aa:b4:10:32:39:66:77:
                    08:9f:d2:ef:22:18:04:f5:24:31:db:1b:e9:5a:be:
                    e3:bc:19:13:04:a7:56:70:a5:15:62:54:64:40:b2:
                    c2:35:5f:74:9e:e3:fd:cd:89:f2:e3:60:06:24:0e:
                    bd:ad:ee:fb:20:f4:59:28:23:6b:31:c5:8c:0c:44:
                    1b:bd:1e:c0:d3:7d:5c:ee:ce:63:24:cf:42:13:68:
                    ce:e2:a4:f1:9c:b1:5f:78:2b:8e:f1:9d:f4:e8:c7:
                    40:08:b1:ca:a1:3f:08:4b:c2:36:9c:b0:2b:4f:7f:
                    03:0f:f4:5c:ab:c1:64:5a:c4:90:74:0f:28:3b:b2:
                    b0:b9:c6:0d:ab:4c:59:3a:ff:ff:f9:b1:1c:23:d7:
                    d0:82:c0:16:3e:4f:05:5f:e4:d6:55:c0:61:e1:01:
                    da:13:c5:3e:11:a5:2a:c4:57:9d:18:90:13:4c:d2:
                    87:e9:5c:3e:fa:d3:e7:c3:54:87:eb:cc:99:69:8a:
                    6f:3b:49:54:eb:09:9e:66:5b:76:0d:f7:9a:8d:70:
                    cc:fc:4b:76:0a:c4:ab:a4:55:90:0d:e0:29:fb:9c:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:23:15:BB:1C:86:DE:1F:46:FD:A8:BE:73:1F:7E:7C:5E:C2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/c2722fed-75af-3261-a89a-c3d4d8c51a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:5d:33:3d:3a:11:98:10:bb:55:7f:aa:fa:30:a0:4e:ee:
         e6:8f:6b:bd:22:4d:eb:c1:26:8b:b3:68:86:42:a6:33:3f:84:
         8d:d2:ac:e6:13:83:73:83:87:cc:0b:94:05:51:cb:c0:13:08:
         2f:75:d6:2e:5b:ea:28:3b:bd:14:f6:f2:6e:b1:b8:6b:51:69:
         6b:48:ac:15:28:e7:ee:d2:82:fd:a1:43:bc:2f:74:a7:ce:20:
         fd:eb:45:6e:35:44:8f:92:5e:60:07:02:96:de:cd:df:e7:58:
         f1:43:88:88:05:93:2c:9e:c3:84:c9:65:92:2e:90:90:34:f6:
         de:48:42:47:e0:3f:2d:d5:b0:ed:d6:89:cf:19:3a:33:97:22:
         35:0a:51:28:3a:65:d6:08:39:8a:08:e6:4a:26:e5:17:e6:2f:
         16:de:76:c8:28:e2:d0:05:63:1b:03:b7:2d:f8:e8:60:aa:40:
         27:07:bb:96:f9:62:5a:64:b5:2d:8e:d7:ef:7d:13:bc:f8:fa:
         b5:72:76:0e:f1:cf:0a:e5:02:73:9f:b8:8e:c6:af:f8:8d:7c:
         ca:26:92:e7:aa:c6:5f:ef:0b:ae:96:d3:56:d3:1a:3d:fe:8c:
         bc:f1:01:73:de:79:aa:ea:91:d5:53:a1:25:03:80:5e:2e:86:
         db:30:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----