Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/51893ab1-9be6-3749-8bc7-37615d2ee0a6.roa
File:                     51893ab1-9be6-3749-8bc7-37615d2ee0a6.roa (raw, json)
Hash identifier:          Mx+pHsbsOXG9HBLdXTqA1KqM5UECEdVDcbCgvnRpQ90=
Subject key identifier:   D4:F7:99:00:2F:9D:DD:1B:73:27:C7:C8:72:0F:72:20:5C:D1:85:67
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583E6C773CB07EB410C949DDAD00
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/51893ab1-9be6-3749-8bc7-37615d2ee0a6.roa
Signing time:             Thu 30 Jun 2022 12:00:00 +0000
ROA not before:           Thu 30 Jun 2022 12:00:00 +0000
ROA not after:            Fri 05 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:77:3c:b0:7e:b4:10:c9:49:dd:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Jun 30 12:00:00 2022 GMT
            Not After : Aug  5 04:00:00 2022 GMT
        Subject: CN=10b12a4d-aea2-4634-acdb-7da01cda0e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ed:6d:0f:10:f8:cf:8f:f4:3d:b8:36:4e:31:
                    5d:52:21:10:5b:97:b3:d3:22:7c:08:dc:5f:9d:b5:
                    bd:bd:08:48:dd:1a:b4:b0:d9:b4:c1:57:ab:da:d0:
                    af:c7:46:de:c1:5a:5a:46:cb:70:10:8c:16:80:21:
                    c1:a2:e4:c0:26:9d:96:4c:1f:f4:df:8d:88:13:fb:
                    1e:38:47:6f:88:ae:ec:d2:7c:12:d9:61:a2:1a:21:
                    ba:c1:79:9c:f4:7e:fd:41:97:5b:58:1f:8a:7d:dd:
                    54:bf:aa:d7:f7:a9:15:b7:d9:cf:80:62:e5:04:7c:
                    d9:2e:e7:94:62:30:ee:b8:4f:23:22:b5:90:e0:e1:
                    94:18:d7:22:cf:0b:19:b0:ae:16:51:91:cc:c1:2b:
                    cf:3e:84:58:47:06:be:1b:76:ec:be:18:26:b8:8e:
                    86:16:dc:b8:c9:65:f2:c8:cc:dc:e3:d7:10:70:cf:
                    92:db:c1:ed:da:52:8e:d7:77:28:02:f0:66:73:7a:
                    ae:90:4a:d7:ea:50:4c:a4:a6:e7:30:a8:e7:0b:65:
                    95:7a:f6:8f:07:30:35:00:80:d4:ce:00:9f:ca:85:
                    c8:47:22:c1:e1:e9:65:a0:57:d6:01:48:b5:7f:19:
                    af:97:d9:97:35:b5:84:b2:c5:a2:15:e6:c7:d6:d9:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:99:00:2F:9D:DD:1B:73:27:C7:C8:72:0F:72:20:5C:D1:85:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/51893ab1-9be6-3749-8bc7-37615d2ee0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:01:ad:c4:f1:23:7a:9b:db:2a:a5:a3:b8:ec:65:24:12:
         6e:65:cb:77:7b:62:e1:df:d3:aa:d0:d2:50:0e:0e:06:e8:88:
         0b:f1:a7:fa:37:5f:88:9c:f6:0a:d8:6f:87:11:ec:11:17:23:
         6e:d0:90:30:51:23:78:04:fa:2d:51:ff:4b:68:61:fa:b3:21:
         18:a5:66:95:7c:5e:68:d9:cd:62:2b:88:9e:23:76:69:37:21:
         7f:c0:e5:69:3f:4a:ee:ea:94:fe:15:3a:52:fd:98:72:f7:3a:
         8c:1b:e6:7b:45:3c:7b:b7:7c:b2:11:09:26:f1:8b:df:14:b9:
         73:1b:4a:f5:2f:20:21:0c:f4:6c:98:db:88:4c:28:2f:3c:6e:
         4f:6a:3c:5a:82:93:91:54:f6:3e:e4:ed:90:9b:64:11:34:19:
         a1:ef:bb:ca:b6:51:87:db:1d:62:76:e0:13:1c:a2:92:cc:21:
         0e:41:a5:82:ba:c8:25:96:0b:93:7b:29:d1:79:d1:15:f2:1d:
         ed:32:a0:4e:f3:5a:4c:ef:b8:95:8a:7c:5f:5c:e4:3a:70:c9:
         fe:51:3f:00:73:b7:16:95:67:a2:ea:02:52:2d:4c:58:79:c9:
         ea:d2:5e:19:15:e8:bc:e0:aa:8b:33:78:92:65:ca:60:e8:cc:
         61:1d:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----