Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fece8107-a074-309d-a4cb-3c89a6d39237.roa
File:                     fece8107-a074-309d-a4cb-3c89a6d39237.roa (raw, json)
Hash identifier:          loxEeI+dBeYgq7Q9sFvA17ygTJ1G/cwCH8Pfb2gPdQc=
Subject key identifier:   7B:35:15:ED:42:E7:38:1D:3E:37:12:5E:BC:2E:1C:09:8D:45:1F:BD
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328583CE5559F04513D9BFBB0C28100
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fece8107-a074-309d-a4cb-3c89a6d39237.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000::/28 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:55:9f:04:51:3d:9b:fb:b0:c2:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=27d276a4-101d-4477-8910-53abb895a3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:b8:9b:cf:f9:53:7f:7a:55:29:a8:e5:03:
                    86:7c:2e:2f:3e:2e:bb:84:41:ed:80:fb:25:50:3b:
                    e6:8c:a4:a7:f6:0f:e3:9e:e2:2d:0c:b9:d0:01:60:
                    60:5d:56:66:fd:8b:14:2e:52:22:0a:2c:7d:2b:2e:
                    b0:7c:cf:a3:ff:53:2a:9a:ad:f2:5a:ca:c1:53:df:
                    a2:4b:6b:e5:57:74:f3:7f:8c:fd:d6:76:9c:cb:d6:
                    9c:07:21:ae:db:aa:d7:17:a6:01:b5:88:85:b0:c0:
                    8d:f3:e6:47:a6:9b:46:1b:ad:88:08:33:c3:cf:79:
                    ea:0b:ab:07:03:2c:e6:aa:9b:f0:aa:0a:52:bc:c0:
                    1e:88:ba:30:be:eb:6d:b1:0e:c8:cd:3b:5b:29:3f:
                    67:20:d2:34:5a:76:96:c9:39:c4:03:5e:cd:ef:3e:
                    48:31:e1:6b:9b:4c:64:dd:e0:d7:f1:18:28:b7:90:
                    bc:c3:d7:df:39:80:58:41:11:e5:28:a9:3c:f3:1d:
                    10:90:38:8b:80:03:1f:34:53:5b:0f:5b:1b:fc:60:
                    e5:fe:12:3e:5a:f5:70:cf:e8:62:0b:b9:8f:29:64:
                    57:5f:8a:79:ec:d3:bd:cc:ad:85:bb:21:7e:03:8a:
                    67:d9:0d:63:bb:25:13:fe:fd:c4:40:94:e1:83:1e:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:15:ED:42:E7:38:1D:3E:37:12:5E:BC:2E:1C:09:8D:45:1F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fece8107-a074-309d-a4cb-3c89a6d39237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:f0:e1:c2:15:1c:af:69:af:84:5b:be:fc:1c:75:a2:d2:
         3e:dd:68:a0:31:a1:ce:92:4b:3f:42:6d:16:7c:d5:37:4b:4f:
         f7:11:82:dd:4e:8e:69:1b:bd:ca:ec:af:74:46:d1:f8:24:19:
         5f:2a:4c:d5:30:5b:f5:d8:e1:8a:2d:c5:81:ff:61:e4:00:f2:
         9e:42:b6:f7:a7:07:30:19:81:51:7b:3d:46:14:2e:ea:75:12:
         d7:09:4b:50:a2:f0:50:f8:92:d4:5c:19:1e:f0:0d:d1:38:e0:
         9d:ae:11:d7:6a:a5:eb:6f:a5:b5:46:c3:86:3d:b6:37:0d:fb:
         72:a1:79:1e:21:a0:c2:77:01:0d:01:9e:cb:3f:12:29:c6:21:
         66:fe:d0:f5:4d:c5:c1:1c:bd:5b:bd:9b:70:a3:ef:f3:6c:0e:
         da:ab:be:b5:b0:7c:38:0e:d1:bf:08:8a:e5:8b:3f:b2:3e:f3:
         ce:21:8b:e0:f2:ca:09:3b:80:43:e3:0a:c5:4f:81:66:96:1f:
         f7:a3:42:b5:b7:79:62:6d:fe:a8:70:3b:d6:f5:88:9a:9f:4e:
         97:e2:35:75:54:08:af:b8:be:72:90:9e:e5:86:5d:16:b1:1b:
         dd:f9:ac:97:e6:e9:8a:0e:13:68:3f:bf:fd:6f:ac:8e:34:76:
         88:1f:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----