Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/70f4ff13-46eb-3b48-ba26-c067449a0996.roa
File:                     70f4ff13-46eb-3b48-ba26-c067449a0996.roa (raw, json)
Hash identifier:          MlRamhEaSral8biMdsqYCJCEcga7y8XGvVD3RctaM7M=
Subject key identifier:   14:6D:8C:8A:81:C5:36:B6:11:7B:28:F9:BC:F0:4A:42:2F:EE:D0:9D
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583D5AAC1DFE4F9B39FB9E6F4BA0
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/70f4ff13-46eb-3b48-ba26-c067449a0996.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:ac:1d:fe:4f:9b:39:fb:9e:6f:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=833257d6-8988-428d-be7d-fc9fcda8ecd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:57:12:a0:f0:70:3a:4e:4f:71:f7:d0:87:
                    f7:ba:ca:6d:c9:d1:b9:72:bc:8b:1f:a3:ac:72:c8:
                    43:9f:d5:49:ce:1b:37:ba:1a:5b:73:f2:cc:bf:e1:
                    10:e2:dc:47:96:56:81:9a:16:64:6f:10:28:59:0c:
                    3c:9b:ca:10:6f:cd:a6:64:19:d5:4f:24:37:77:9f:
                    cb:bf:9d:0a:49:91:47:24:6d:bb:95:6f:6d:93:5e:
                    1f:1a:9c:9f:7d:d2:6c:1e:bd:45:c5:e8:3e:39:ac:
                    25:22:76:be:5f:ec:61:52:e8:fa:a8:60:bd:ca:45:
                    26:35:2e:dd:58:38:9b:f3:c9:9d:f5:25:b9:58:21:
                    cb:1d:b6:48:3b:56:3f:87:17:db:89:d9:0e:92:dd:
                    49:9e:b9:d7:5c:81:be:82:12:cd:d3:38:aa:50:ee:
                    c9:35:25:d3:76:a0:18:8f:27:94:90:a7:19:a9:14:
                    5d:9d:9d:71:36:b2:cd:58:7b:6f:51:d9:fa:8c:0f:
                    b9:00:f0:e5:ec:14:f4:c2:c8:3f:8b:fa:b3:c6:d3:
                    fb:d3:bf:b4:24:b9:e8:64:d7:41:15:fe:64:df:8d:
                    d7:db:d5:5c:2f:01:e2:c0:92:36:59:cf:33:84:89:
                    12:d7:fe:11:d9:76:1b:05:38:43:ee:3f:3b:88:6e:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6D:8C:8A:81:C5:36:B6:11:7B:28:F9:BC:F0:4A:42:2F:EE:D0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/70f4ff13-46eb-3b48-ba26-c067449a0996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:9c:bf:74:cd:fa:6a:7c:3d:6d:f0:97:ca:91:e7:cb:57:
         10:56:a0:3c:9d:b2:c5:c6:08:5e:92:3d:2c:3f:15:2a:1f:f6:
         38:4c:e2:52:ac:a2:d6:1f:9a:0a:b6:0a:cd:fb:8f:9d:65:80:
         7d:3f:3c:ad:2e:a7:c0:2f:3a:f6:a0:cf:06:db:9e:05:cd:b3:
         32:8e:1f:76:34:66:cf:ca:03:35:5f:c6:b5:d1:92:11:22:92:
         cc:1b:7e:14:02:8a:fa:63:09:9a:a4:c7:e9:3a:f3:25:b4:43:
         63:17:af:d0:8e:7c:6a:8c:c0:58:f9:63:a4:ff:99:0f:c0:46:
         56:73:bd:7d:ed:34:30:00:f2:b2:a0:24:56:73:51:53:37:a6:
         0f:dd:2b:5b:83:1d:77:32:5d:24:f2:91:ed:db:8b:05:86:55:
         89:ef:91:b8:c3:47:dc:3b:df:89:a0:06:82:c5:14:dc:63:94:
         b1:12:84:d9:37:ca:03:61:fb:de:ab:45:a1:35:56:21:46:40:
         97:20:47:4b:f1:85:bf:ed:49:1e:a5:8e:0d:9a:c1:83:db:e5:
         1e:05:78:64:cf:a1:c0:bf:6f:4e:75:8d:eb:36:4f:71:d9:66:
         b7:6e:25:87:87:d0:21:05:ee:5f:43:f8:ef:48:62:d8:04:06:
         9b:3f:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----