Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9066d083-ed03-39bb-9136-05706eea2bba.roa
File:                     9066d083-ed03-39bb-9136-05706eea2bba.roa (raw, json)
Hash identifier:          DmUctkVw55SXyg5g8UUwpirHdwUpq4BCgSiI/839AaA=
Subject key identifier:   F1:C0:A3:83:9E:6C:9B:31:78:88:1B:8B:B9:A2:22:49:5E:83:DC:40
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F7D8097F450ECC4724052E200
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9066d083-ed03-39bb-9136-05706eea2bba.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:80:97:f4:50:ec:c4:72:40:52:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=cc7cf245-57e4-4cba-8674-cfdd4ded73bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:bd:25:2a:2e:97:66:68:26:96:12:c9:b7:
                    f9:a3:c0:68:07:5c:55:d7:52:a6:91:8e:9f:44:c8:
                    45:e2:a7:6d:7c:34:f8:68:f0:8b:d8:65:b3:44:6b:
                    41:13:b6:4b:2a:2a:39:7e:19:df:de:d2:cb:21:e4:
                    d1:78:4c:c6:ea:3d:59:3c:77:05:7e:62:42:85:1b:
                    2e:f0:9e:db:f3:09:29:3b:11:37:c1:da:e9:05:1c:
                    95:30:fd:c7:3e:47:ab:0e:18:0d:7c:6c:67:9a:32:
                    ba:02:a1:f5:46:b4:87:6b:02:c2:c5:ba:9a:e1:95:
                    8f:e2:2d:d4:d0:67:21:71:8b:0e:7b:1d:d9:35:8e:
                    a2:5a:f5:52:f1:5e:c9:5c:86:44:44:eb:3c:d1:84:
                    2b:be:45:9d:9f:04:1a:9f:18:82:b8:5c:e0:c3:54:
                    37:c9:99:d5:a1:45:40:53:f8:dc:c8:8f:eb:ac:88:
                    39:36:3d:43:64:cb:1a:a8:56:8b:db:4f:db:6a:96:
                    fe:59:0b:51:0b:ae:c4:5d:7c:69:d3:07:16:3f:5c:
                    cd:57:c6:b3:a0:f7:94:a9:bc:af:31:73:5c:01:29:
                    7a:2f:f2:0b:30:2c:f1:d2:e3:a9:cd:6a:9e:0c:3a:
                    03:62:11:7c:6a:7a:10:94:3a:0d:7a:f0:7a:36:46:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:A3:83:9E:6C:9B:31:78:88:1B:8B:B9:A2:22:49:5E:83:DC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9066d083-ed03-39bb-9136-05706eea2bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:4c:b1:cc:8f:b8:ff:48:d8:2f:b0:53:e2:db:95:87:b4:
         ed:77:52:4f:b9:b3:90:38:77:64:04:d8:b0:a6:fe:97:33:a1:
         62:61:e1:a3:c1:1a:da:b8:b1:d8:09:46:e8:e1:48:2a:11:84:
         20:b1:dc:81:d3:40:6c:08:f6:79:56:50:27:ab:63:69:9a:f8:
         cd:ad:90:18:78:c3:d1:35:60:be:f1:d7:b6:6c:d8:2d:94:0b:
         42:9d:b2:90:4d:27:82:9b:d0:63:92:ec:37:9e:45:41:82:ff:
         f1:98:15:3c:3d:e4:7c:45:a2:db:c1:ef:8e:13:24:18:91:f0:
         fc:a3:2a:ea:5c:84:a4:06:72:c6:1f:b5:bc:1e:94:3e:e1:21:
         7f:58:dc:5f:34:1e:2e:51:2c:f6:07:e5:0a:c5:a8:d0:66:29:
         21:14:e0:fb:45:bd:2d:bb:d3:68:80:64:e5:e4:ad:63:e2:71:
         9f:0f:f8:9b:64:a4:98:0b:29:e5:a9:c0:dc:5a:00:0a:65:30:
         e8:db:1d:8e:cf:48:35:68:9d:04:31:14:eb:e4:ce:52:1c:7b:
         c5:fe:7d:83:96:e1:e9:2e:69:0d:57:21:b0:b4:61:42:ca:0c:
         c5:3c:0a:9e:d6:96:d5:29:85:62:5e:32:66:73:52:03:a2:e5:
         5d:83:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----