Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9114fadf-a23f-329c-9a88-5a932a92545f.roa
File:                     9114fadf-a23f-329c-9a88-5a932a92545f.roa (raw, json)
Hash identifier:          ii3h8XSVCqhBwTxQXIu6ZGw1lYIayS7xhDxI/D8iX7g=
Subject key identifier:   C6:80:56:29:07:9C:32:D0:45:8F:6C:F4:AE:3A:99:74:26:74:42:9E
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583DF7203F7B48FEC6257BC28180
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9114fadf-a23f-329c-9a88-5a932a92545f.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:20:3f:7b:48:fe:c6:25:7b:c2:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=084e0a38-becc-40dc-8de3-0336c127864b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:54:ac:b0:38:81:f1:67:94:a4:40:1f:99:
                    3e:98:b1:94:0b:44:39:2b:39:26:c0:45:a2:13:2b:
                    d3:34:3d:68:d3:12:5e:fb:15:4c:46:6e:a7:75:a8:
                    5d:59:84:d6:30:6e:d3:c7:74:57:cf:f2:35:57:01:
                    b8:10:c7:8d:5f:39:77:6d:2c:9f:bf:4a:aa:aa:c0:
                    25:19:ce:2e:32:c6:4c:b9:53:aa:b3:f8:c7:66:84:
                    ca:7b:95:af:37:e8:64:e1:91:91:84:e2:22:b3:b4:
                    5c:3e:80:9a:38:da:ec:27:ea:f3:0b:03:7d:3e:0d:
                    cf:74:ee:85:94:6a:b3:8e:70:8a:84:09:e6:63:2a:
                    c8:f0:cc:3c:2f:b8:bb:94:45:2f:6d:91:fe:4d:6a:
                    98:9a:6c:0c:4f:f2:33:1c:4c:84:b8:0e:d5:c7:d9:
                    88:a6:3a:2c:59:66:5f:09:5d:c2:e4:1f:e8:a5:63:
                    9b:6f:9a:e1:98:68:98:6e:61:48:39:7e:8d:c9:b2:
                    90:f4:49:9e:20:a3:a7:c3:d6:2a:79:83:57:7a:3c:
                    0c:3c:25:94:9c:d1:7a:d3:93:2f:04:6a:a3:bd:d4:
                    06:ee:12:53:92:4f:89:2e:06:4b:e1:82:99:90:fc:
                    ab:eb:1f:44:cc:91:9d:1f:79:3d:ae:87:55:6f:9b:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:56:29:07:9C:32:D0:45:8F:6C:F4:AE:3A:99:74:26:74:42:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9114fadf-a23f-329c-9a88-5a932a92545f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:09:b0:e5:c8:f0:9f:16:73:46:3c:31:1b:d2:bc:c7:8c:
         6d:97:26:eb:3e:dd:63:63:59:b5:11:6c:a6:69:44:d2:84:44:
         62:3b:fc:02:13:0c:bc:26:ca:98:9b:5e:64:71:93:4f:96:3a:
         36:56:00:1a:26:03:22:25:32:bb:66:32:48:46:a0:d2:19:d4:
         76:de:36:ef:47:63:f3:e7:18:87:f2:25:83:53:cf:57:fa:94:
         60:3b:cc:b4:6d:1a:2f:18:b3:44:67:95:f7:34:39:73:f6:9f:
         61:44:25:3b:16:48:53:39:eb:a7:b5:8c:cb:1d:7b:a3:80:83:
         d4:ca:05:98:62:46:aa:c4:a4:8d:d7:3d:78:b0:92:4b:10:09:
         c6:6f:73:9e:b1:d6:3e:2b:a5:6f:0c:41:a3:56:6a:e2:87:b0:
         f8:c2:8a:42:61:83:35:83:ce:d3:9b:fb:3b:b1:cf:03:f3:7e:
         23:e5:9d:07:bc:e8:b2:bb:5d:6b:ad:8d:8f:2a:b8:03:f2:e8:
         05:78:5e:e6:7b:32:c5:66:5a:fc:a8:ea:8d:9b:26:9a:87:07:
         18:d3:8a:ee:27:13:19:37:a5:40:02:1d:8a:35:f4:ef:03:4f:
         86:71:59:cc:6c:03:35:d7:6a:55:bc:86:61:bc:34:11:91:49:
         a8:78:8d:7c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD33ID97SP7GJXvCgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM0M2U5NmQtMWM5Ny00MmE2LWEwYjUtMzg4NGRmZmFi
ZjQ0MB4XDTIyMDUxOTEyMDAwMFoXDTIyMDYyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MDg0ZTBhMzgtYmVjYy00MGRjLThkZTMtMDMzNmMxMjc4NjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNlUrLA4gfFnlKRAH5k+mLGUC0Q5KzkmwEWi
EyvTND1o0xJe+xVMRm6ndahdWYTWMG7Tx3RXz/I1VwG4EMeNXzl3bSyfv0qqqsAl
Gc4uMsZMuVOqs/jHZoTKe5WvN+hk4ZGRhOIis7RcPoCaONrsJ+rzCwN9Pg3PdO6F
lGqzjnCKhAnmYyrI8Mw8L7i7lEUvbZH+TWqYmmwMT/IzHEyEuA7Vx9mIpjosWWZf
CV3C5B/opWObb5rhmGiYbmFIOX6NybKQ9EmeIKOnw9YqeYNXejwMPCWUnNF605Mv
BGqjvdQG7hJTkk+JLgZL4YKZkPyr6x9EzJGdH3k9rodVb5urWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMaAVikHnDLQRY9s9K46mXQmdEKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MzQz
ZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0ZGZmYWJmNDQvOTExNGZhZGYtYTIzZi0z
MjljLTlhODgtNWE5MzJhOTI1NDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjM0M2U5NmQtMWM5Ny00MmE2LWEw
YjUtMzg4NGRmZmFiZjQ0LzYzNDNlOTZkLTFjOTctNDJhNi1hMGI1LTM4ODRkZmZh
YmY0NC5jcmwwHwYDVR0jBBgwFoAUJcS4u+LBh5GZA4R33hQJUtyfIZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MzQzZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0
ZGZmYWJmNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAu6gmw5cjwnxZzRjwxG9K8x4xtlybrPt1jY1m1EWymaUTShERiO/wC
Ewy8JsqYm15kcZNPljo2VgAaJgMiJTK7ZjJIRqDSGdR23jbvR2Pz5xiH8iWDU89X
+pRgO8y0bRovGLNEZ5X3NDlz9p9hRCU7FkhTOeuntYzLHXujgIPUygWYYkaqxKSN
1z14sJJLEAnGb3OesdY+K6VvDEGjVmrih7D4wopCYYM1g87Tm/s7sc8D834j5Z0H
vOiyu11rrY2PKrgD8ugFeF7mezLFZlr8qOqNmyaahwcY04ruJxMZN6VAAh2KNfTv
A0+GcVnMbAM112pVvIZhvDQRkUmoeI18
-----END CERTIFICATE-----