Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0ab9e307-3bb0-3e52-b84c-bd1762f8f989.roa
File:                     0ab9e307-3bb0-3e52-b84c-bd1762f8f989.roa (raw, json)
Hash identifier:          +iE68Iu75nj5RDpDFejamTH5xSnRUowmnC2dPn2n51w=
Subject key identifier:   9E:74:BB:68:39:15:60:82:E6:56:D0:34:7A:ED:22:52:ED:C9:14:74
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583EBAB14C3215A1A9F41B2C2900
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0ab9e307-3bb0-3e52-b84c-bd1762f8f989.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ba:b1:4c:32:15:a1:a9:f4:1b:2c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=cddf0658-3ac5-4650-8a70-1c8907c18f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:40:00:9b:34:19:1a:b8:b3:f6:ba:3d:af:
                    a0:51:0c:39:81:68:9e:fe:a8:fc:85:1f:a6:b1:57:
                    34:d7:bf:e8:3a:51:a3:d2:19:45:dc:ce:63:3d:9a:
                    d7:be:05:e6:44:8a:db:ba:88:23:66:01:6f:af:98:
                    84:e3:c0:58:f8:da:b5:e5:6d:73:a2:1a:d7:94:ea:
                    38:51:13:6b:13:81:ef:f6:07:f1:0d:cf:29:2c:ba:
                    bf:bc:b2:40:d7:22:67:2e:57:c8:c7:ff:14:dc:50:
                    bb:2c:a3:e8:a3:c5:c2:95:6b:f0:66:bc:ee:a4:57:
                    01:d4:79:cd:d2:9d:35:62:cc:88:bb:7d:3f:31:d1:
                    9d:ea:20:7f:88:24:ac:2f:bd:7b:d9:95:6a:7c:8c:
                    e4:56:dc:15:34:27:2a:f2:8b:7e:06:85:1e:1c:e8:
                    1d:b7:31:5d:05:07:f7:d9:c3:2d:1c:75:f9:e8:d4:
                    24:61:86:2f:99:90:60:29:d3:86:76:9d:f5:ac:dd:
                    e0:53:43:6a:6e:2f:96:b7:87:18:26:dd:52:fd:0a:
                    56:bc:84:2e:34:40:70:a9:93:3f:d1:7e:cc:97:c5:
                    c9:45:56:b9:33:bf:93:4b:76:5b:76:c6:68:76:3b:
                    1b:cf:4b:89:e2:65:9b:d4:74:4a:fe:9a:d7:d0:4c:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:BB:68:39:15:60:82:E6:56:D0:34:7A:ED:22:52:ED:C9:14:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/0ab9e307-3bb0-3e52-b84c-bd1762f8f989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:44:ea:59:a5:ce:41:55:8b:30:02:8b:23:95:c3:dd:a7:28:
         98:6e:44:14:6b:73:cf:2f:19:6e:6f:6d:5c:b0:07:c1:7b:26:
         a5:d1:d9:25:66:10:d2:a8:c8:8d:ad:2e:8a:e1:72:03:65:6b:
         4b:97:db:03:4b:35:3c:0d:e7:12:04:ee:8e:30:26:35:fa:67:
         ad:c9:33:a3:da:11:83:f3:cc:0c:b5:ba:d2:2b:cf:d0:1d:be:
         d3:6f:bd:6d:23:c8:6a:0f:a1:91:db:7e:8c:a3:80:dc:17:d6:
         3d:9c:9b:03:39:78:e1:f2:82:42:c9:4b:a5:a9:e7:f3:06:57:
         37:90:83:97:77:65:41:6d:96:09:18:86:5d:11:a0:3e:6c:27:
         41:c9:f9:00:ac:a0:58:cf:bb:ea:34:37:eb:23:1e:20:73:a7:
         fc:2d:c4:04:23:26:6b:f2:3f:2c:16:07:0c:1a:2b:88:87:71:
         dc:69:c1:41:fa:18:92:43:7e:f1:e2:43:8d:2a:6d:60:44:16:
         09:d7:a7:3f:94:5e:0f:d7:61:65:02:a0:7f:52:de:6b:f1:5f:
         c4:7a:69:0a:dd:74:d5:33:76:c4:cc:f7:79:6c:b8:3c:7b:65:
         06:57:b5:27:a4:ca:35:44:e9:5a:09:17:d8:25:3b:01:73:92:
         cb:f5:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----