Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/3468d34b-cad0-3576-b46c-857989fd9840.roa
File:                     3468d34b-cad0-3576-b46c-857989fd9840.roa (raw, json)
Hash identifier:          z7eUUgkK8ucB+wq26Vo7SYh2nrrhxRyEjbrLypgmLUQ=
Subject key identifier:   B1:59:A4:3E:9A:19:85:22:FA:4E:44:96:5E:28:90:DF:BE:D6:82:27
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583CE554E65C030DC9D21313FC80
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/3468d34b-cad0-3576-b46c-857989fd9840.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:54:e6:5c:03:0d:c9:d2:13:13:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=ef92cc8a-aed0-448b-a867-0fa370bd01aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:24:9e:3e:b7:83:7f:d5:84:06:c7:ca:06:
                    c5:29:03:97:9b:d1:6f:c6:d9:4f:99:0b:cb:39:ce:
                    c7:9b:f7:f1:32:64:79:b3:f0:53:76:45:9d:d0:39:
                    d3:6b:2a:9b:36:db:95:c8:b4:76:fb:0d:2d:b6:8f:
                    84:ec:b0:a6:b0:c7:50:b3:95:6e:a1:5c:ce:c3:c7:
                    16:2b:90:c0:26:49:a2:f7:e3:39:30:ae:5c:c6:33:
                    53:43:95:68:44:75:59:a5:c7:f5:98:f9:1b:f6:c4:
                    a5:72:57:58:b8:a3:3d:b7:d1:c5:b9:cc:c4:92:ad:
                    e8:1d:da:27:4d:5c:47:94:98:06:0a:91:5f:c1:be:
                    0d:e3:9e:4d:80:b3:7d:77:a2:e7:2d:ee:02:0f:12:
                    d9:03:82:3e:ba:03:80:1c:34:ce:83:c3:e1:af:0e:
                    47:12:16:dd:0c:85:0e:de:e7:55:33:0e:26:aa:7d:
                    c5:75:43:fe:5a:9b:83:4e:82:0b:f0:25:c1:05:73:
                    91:04:d2:09:90:a4:8d:21:dc:c8:9d:31:36:4a:2b:
                    2a:a9:50:36:a1:8e:f1:9b:3e:8c:0e:ff:2d:2e:bb:
                    11:1a:74:92:06:5c:da:00:de:2f:7a:21:8c:1f:a0:
                    81:28:41:0e:38:be:2f:b9:77:b8:6b:ab:51:84:d8:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:A4:3E:9A:19:85:22:FA:4E:44:96:5E:28:90:DF:BE:D6:82:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/3468d34b-cad0-3576-b46c-857989fd9840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d2:8b:2d:c9:ef:76:b9:0b:e0:69:50:ca:cc:c4:65:98:d2:
         57:1e:1e:98:8c:18:8a:6f:1f:22:b3:ce:9b:90:91:7d:90:22:
         4d:02:ab:dd:ef:0f:e9:2f:e4:b5:76:90:01:36:5b:44:67:6c:
         e4:27:8e:38:5e:02:81:fa:99:c7:76:16:f1:be:f5:27:e4:b8:
         f5:63:f2:cd:7b:23:72:1e:10:5d:06:8d:d5:c0:f2:af:27:50:
         cd:54:fe:2c:ca:e9:57:2f:24:8f:e6:47:3d:a7:20:e6:e6:ae:
         20:ce:40:61:a9:08:e7:70:28:82:18:37:1d:45:f2:78:56:59:
         e4:24:8a:f1:05:c6:f9:89:e5:77:0b:5e:87:9f:07:e1:7a:93:
         65:6a:84:7d:3a:2a:ba:f7:dc:a7:f8:56:e5:b8:eb:3c:98:68:
         16:ed:87:f6:4c:e2:40:7a:b5:58:f8:b6:93:73:88:3c:b3:56:
         82:fb:5c:2e:43:8b:11:d0:40:87:80:86:33:59:38:f4:c7:bf:
         57:05:3d:21:db:57:02:46:26:9c:da:5d:c5:5f:8e:8d:7c:47:
         d0:8b:76:30:0a:25:ee:7d:71:29:ce:b3:1d:0f:d4:f1:cb:f2:
         39:2b:4e:86:31:4b:14:f4:15:9d:73:71:b1:cb:72:1d:45:9b:
         7c:f2:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----