Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6f6c7999-3b85-3611-aab4-839fa3508c9c.roa
File:                     6f6c7999-3b85-3611-aab4-839fa3508c9c.roa (raw, json)
Hash identifier:          fMTXwZL2kPmVHFOmhk5cZj7j95kNCMIFf1OAIBDCQto=
Subject key identifier:   C3:68:B5:37:FE:A7:54:6A:2C:89:9B:CB:39:13:4A:00:4C:D9:EC:21
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583DA8E6086538FEA9A86C924460
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6f6c7999-3b85-3611-aab4-839fa3508c9c.roa
Signing time:             Thu 21 Apr 2022 12:00:00 +0000
ROA not before:           Thu 21 Apr 2022 12:00:00 +0000
ROA not after:            Fri 27 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a8:e6:08:65:38:fe:a9:a8:6c:92:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Apr 21 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2022 GMT
        Subject: CN=2702d9f3-4cb9-446c-851d-a12aac0041bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:f4:b1:c1:45:b0:13:98:36:35:01:b2:b6:
                    f4:68:d0:63:86:2f:cf:a1:99:19:fe:e8:d9:67:3b:
                    56:34:3a:45:76:b9:19:b7:2e:2a:10:af:36:47:e8:
                    82:ce:dc:81:16:25:9b:3d:91:18:3c:b6:78:ec:94:
                    24:cf:63:2a:98:43:5c:81:a6:2a:85:9c:3e:50:3d:
                    3a:a7:65:ec:9b:16:7c:f1:7f:16:6d:e5:58:20:83:
                    3a:16:fc:a7:19:c6:7d:b7:95:08:de:97:73:c6:af:
                    45:14:b3:7e:c2:da:88:54:a8:aa:5a:fc:39:9f:14:
                    4c:18:f7:e0:ec:43:1f:b9:34:1f:a5:c1:1b:1e:90:
                    87:02:f1:9b:ec:15:46:ba:73:bd:9f:cb:54:1f:de:
                    26:9c:82:64:29:7f:66:55:c0:61:9c:9d:7b:ca:55:
                    5f:e9:b7:3b:8b:62:00:0a:d1:1c:43:3d:d7:77:5c:
                    77:21:6d:c7:81:a5:79:73:47:1c:cb:57:1a:2f:78:
                    f7:bf:74:a3:33:69:2a:42:a1:16:d0:94:ca:73:f2:
                    f1:3e:1d:b6:6d:5b:17:46:db:2c:b9:15:10:2a:99:
                    cb:a1:f4:1a:50:da:f4:03:87:bc:bf:83:2f:25:01:
                    61:c0:43:47:0a:2e:4d:11:1d:c4:d0:c7:b7:44:fa:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:B5:37:FE:A7:54:6A:2C:89:9B:CB:39:13:4A:00:4C:D9:EC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6f6c7999-3b85-3611-aab4-839fa3508c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:02:d2:fe:37:89:3a:75:5e:c8:26:38:38:b2:c1:99:87:
         63:65:72:20:6f:ec:1c:a3:eb:9c:a1:40:b9:d6:23:6c:7e:fd:
         7a:68:a3:85:69:ff:3e:a6:67:40:a4:5d:40:a8:e3:20:4a:25:
         7a:07:9d:6e:06:2e:4b:33:03:68:5d:8f:00:6b:04:82:89:c0:
         c2:97:a2:39:fd:93:b4:7f:2b:5b:bf:92:1e:00:86:33:a1:d1:
         f4:46:26:d8:55:f5:d8:77:84:1e:60:40:eb:47:d4:92:56:d3:
         e3:04:df:93:5f:e1:2e:b7:ab:74:de:19:6f:22:30:b2:a9:93:
         b7:f2:ce:f7:bd:56:c4:9f:0b:af:c9:36:cc:5c:73:f0:05:35:
         b2:71:51:f2:85:c1:46:64:b2:bf:0b:8f:0c:d5:f1:71:56:0f:
         18:60:92:b8:c8:47:27:b3:bb:76:6c:4b:09:80:f6:bb:f0:5d:
         bc:e6:25:9f:f4:5d:08:9f:2f:02:4d:74:93:9e:3b:58:94:59:
         46:34:d9:08:9c:5f:c7:3f:f3:96:9a:10:66:88:98:cf:60:d4:
         a0:c6:a3:44:54:61:13:cd:c7:01:a7:7c:95:5b:75:30:1b:62:
         bb:21:3b:e4:4d:9d:6b:6a:d6:56:c1:38:92:d9:c9:5e:06:02:
         37:93:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----