Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/67d18b85-0049-3831-aef0-52c6e45095d6.roa
File:                     67d18b85-0049-3831-aef0-52c6e45095d6.roa (raw, json)
Hash identifier:          KVGE9Id1fG0qLD6ZNXGs1AQhDM6TiCBbHJrfunzIgUk=
Subject key identifier:   97:C0:5B:D6:91:8D:98:A8:BA:D2:2E:8C:FD:0C:81:67:E1:CA:50:5E
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F300864E564449738BEBBE460
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/67d18b85-0049-3831-aef0-52c6e45095d6.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:08:64:e5:64:44:97:38:be:bb:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=c206bd7f-4e21-4ebb-8ccb-e9f8ad39cf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:7d:74:71:89:d0:65:ef:30:56:68:9c:45:
                    93:26:41:da:3d:3c:f4:eb:59:2a:c6:c7:41:e8:74:
                    9a:aa:c9:1a:f9:35:0a:96:2e:ce:ed:44:66:6d:b9:
                    d9:aa:a3:0b:1a:ce:ef:df:7c:64:20:03:30:ce:9c:
                    1a:b7:91:e3:ae:87:40:c5:1d:f9:69:70:f4:a0:8f:
                    ef:93:b1:b6:f0:92:c8:f2:b3:f2:64:8f:07:00:29:
                    2c:85:91:dc:80:a5:cd:94:d1:1c:c5:d8:b4:a9:8a:
                    f7:81:46:5b:22:7d:94:1a:71:01:16:59:e4:1f:68:
                    84:53:08:66:98:65:af:f3:3f:ef:b9:27:8b:f8:96:
                    85:4b:70:3b:52:21:54:42:59:02:e6:da:74:7d:c6:
                    98:f2:aa:08:f8:b7:f4:af:c5:26:a5:38:4b:21:5d:
                    2e:7a:e6:74:33:9a:db:48:d8:36:9e:9e:d9:85:b2:
                    42:52:10:b7:8c:aa:b1:98:3f:b3:51:f2:46:a2:ae:
                    22:1d:e0:54:62:01:c4:b9:ff:de:ed:a7:58:bb:48:
                    b0:5f:a5:ba:b0:8d:29:15:f7:88:94:29:e6:3e:20:
                    7c:08:b5:84:2d:63:ab:3f:90:b3:21:5d:6d:98:05:
                    ed:ef:0d:57:52:78:f1:d4:a9:3b:cf:54:fc:70:51:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:5B:D6:91:8D:98:A8:BA:D2:2E:8C:FD:0C:81:67:E1:CA:50:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/67d18b85-0049-3831-aef0-52c6e45095d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:a5:f6:40:91:62:63:2d:39:d5:2b:54:11:b8:90:dc:0d:
         0e:d3:76:98:22:29:c3:e8:7d:f6:45:9c:f2:d4:bf:ab:ca:c6:
         1d:1b:d4:9f:7c:8a:ad:26:1e:94:7e:b4:95:68:08:c0:6e:66:
         1c:8d:df:cb:7c:6f:94:1e:95:7e:6f:0c:04:c0:c2:4b:6a:06:
         be:7f:67:8d:3e:78:42:e7:d9:59:60:a2:25:5c:8d:83:c1:6d:
         39:c0:54:d5:80:44:73:4f:d3:0d:7a:84:93:e7:09:d4:ad:53:
         4f:f8:2f:29:26:be:6f:b2:78:9b:de:99:1a:06:03:6e:f9:a9:
         d9:69:37:5f:b1:b6:90:9c:08:bd:cc:b9:dd:99:20:2e:45:5f:
         11:e4:0a:d3:f8:d1:f0:b1:56:c5:c4:98:b2:ba:ef:a7:46:67:
         c2:6c:c2:76:6c:73:03:5f:e9:cf:d3:05:cc:7d:d8:bb:08:f7:
         9a:d8:5f:22:eb:ca:93:6b:b5:23:9d:71:5c:19:2d:95:6e:40:
         93:58:03:aa:b6:64:59:c6:ee:31:a8:c9:07:5a:74:f7:04:e6:
         66:af:f1:ba:bb:17:63:61:77:60:52:df:4b:ef:92:7a:da:9f:
         7e:54:7f:2f:8f:28:9a:bf:95:a3:51:25:e3:02:3d:8f:0b:11:
         59:9b:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----