Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9f1d4b29-6a61-3e15-8cc8-daf7aeaaf836.roa
File:                     9f1d4b29-6a61-3e15-8cc8-daf7aeaaf836.roa (raw, json)
Hash identifier:          jw/VHqcP0psEIdhbFdvW2OV0maFm5eRGSbS6ChMkOis=
Subject key identifier:   F5:F1:FF:8A:38:77:F2:8F:81:E6:27:94:F5:2A:66:36:62:DE:CD:65
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583FA4963F61CCC42851A982BD80
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9f1d4b29-6a61-3e15-8cc8-daf7aeaaf836.roa
Signing time:             Thu 20 Oct 2022 12:00:00 +0000
ROA not before:           Thu 20 Oct 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a4:96:3f:61:cc:c4:28:51:a9:82:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Oct 20 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=8fdf3cf8-476d-4eed-aa78-92ba76423dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:23:fa:8d:e8:7f:85:71:73:24:7e:6c:cc:
                    df:4c:09:55:7e:42:1f:82:ca:cd:09:d8:24:0e:6d:
                    13:f9:fa:11:4e:03:5e:86:87:cc:da:b2:62:77:07:
                    79:63:46:ff:20:6d:74:0d:4f:47:f7:89:f2:9c:9e:
                    19:6c:ec:88:2d:38:2a:89:08:aa:ea:f5:cc:7a:fb:
                    c7:6f:72:4b:f3:d2:51:8e:6a:68:c6:36:c6:eb:7b:
                    0b:73:b3:f9:19:9f:45:c2:db:17:03:a7:6a:9c:74:
                    0d:9f:84:49:cb:77:ab:af:58:8d:44:9c:f3:3b:25:
                    34:96:05:7c:ce:22:e1:6f:76:70:20:b3:5e:88:36:
                    dc:6b:53:1f:8d:05:2f:71:76:c0:03:58:c0:04:97:
                    e8:35:28:c8:e6:60:98:96:0f:90:bb:23:a4:5e:e1:
                    a8:3e:d7:7b:ab:e9:1a:33:77:df:66:89:dc:a2:59:
                    81:f4:a5:ea:4e:32:ac:7d:85:c3:10:9c:ba:21:e1:
                    44:1f:ea:3a:d3:14:3b:f4:47:86:6f:92:af:d3:7e:
                    ae:0e:61:6c:45:b4:23:7e:3a:f2:1c:d7:29:44:fe:
                    16:72:24:10:5c:b1:56:d7:38:a0:01:ed:cd:f1:21:
                    e3:18:50:fe:49:f4:ac:60:e7:8b:7b:df:45:bb:ac:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F1:FF:8A:38:77:F2:8F:81:E6:27:94:F5:2A:66:36:62:DE:CD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/9f1d4b29-6a61-3e15-8cc8-daf7aeaaf836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:24:89:c8:b0:18:08:27:68:b6:cf:9f:a9:5d:2a:a3:67:
         d2:de:e1:46:1c:ab:2f:3f:54:e8:3b:ad:10:bb:81:5f:84:5a:
         bb:b6:3f:d8:0c:d2:3e:95:54:4d:af:62:a2:c7:37:56:76:7a:
         e5:5c:d7:5e:78:d1:89:08:77:e0:a0:4d:0d:93:12:d7:2a:8b:
         50:b9:65:0f:54:e2:08:96:fb:13:ac:62:26:a1:5f:e6:11:37:
         5c:ca:4d:48:07:c5:3f:be:4d:20:95:b5:15:8c:13:47:3b:3e:
         1e:e9:4b:1f:64:32:f5:a5:33:b7:2c:ea:e6:b6:13:07:8b:c9:
         cb:17:13:68:35:b3:f6:cd:65:21:29:10:80:9b:d5:23:eb:58:
         bd:bf:4b:30:a3:f9:eb:1b:f3:27:7d:44:21:3b:86:10:c9:5a:
         bb:d2:bf:1b:f7:d4:5f:20:be:08:cb:fe:85:f7:77:af:56:eb:
         37:f5:9c:55:41:ec:a7:5b:fe:de:a6:e2:6d:b7:0d:b2:fe:fe:
         96:eb:b4:4e:c1:74:fc:a5:f4:64:06:95:c8:e6:0c:a9:68:90:
         c5:67:c0:55:23:25:11:9c:28:f4:91:6d:9f:b7:2e:ef:83:d3:
         47:aa:62:dc:33:51:43:86:f6:89:c5:ff:f6:ac:be:a1:d3:6b:
         56:10:e4:60
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWD+klj9hzMQoUamCvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM0M2U5NmQtMWM5Ny00MmE2LWEwYjUtMzg4NGRmZmFi
ZjQ0MB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
OGZkZjNjZjgtNDc2ZC00ZWVkLWFhNzgtOTJiYTc2NDIzZGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYj+o3of4VxcyR+bMzfTAlVfkIfgsrNCdgk
Dm0T+foRTgNehofM2rJidwd5Y0b/IG10DU9H94nynJ4ZbOyILTgqiQiq6vXMevvH
b3JL89JRjmpoxjbG63sLc7P5GZ9FwtsXA6dqnHQNn4RJy3err1iNRJzzOyU0lgV8
ziLhb3ZwILNeiDbca1MfjQUvcXbAA1jABJfoNSjI5mCYlg+QuyOkXuGoPtd7q+ka
M3ffZoncolmB9KXqTjKsfYXDEJy6IeFEH+o60xQ79EeGb5Kv036uDmFsRbQjfjry
HNcpRP4WciQQXLFW1zigAe3N8SHjGFD+SfSsYOeLe99Fu6wkTQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPXx/4o4d/KPgeYnlPUqZjZi3s1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MzQz
ZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0ZGZmYWJmNDQvOWYxZDRiMjktNmE2MS0z
ZTE1LThjYzgtZGFmN2FlYWFmODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjM0M2U5NmQtMWM5Ny00MmE2LWEw
YjUtMzg4NGRmZmFiZjQ0LzYzNDNlOTZkLTFjOTctNDJhNi1hMGI1LTM4ODRkZmZh
YmY0NC5jcmwwHwYDVR0jBBgwFoAUJcS4u+LBh5GZA4R33hQJUtyfIZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MzQzZTk2ZC0xYzk3LTQyYTYtYTBiNS0zODg0
ZGZmYWJmNDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxxySJyLAYCCdots+fqV0qo2fS3uFGHKsvP1ToO60Qu4FfhFq7tj/Y
DNI+lVRNr2KixzdWdnrlXNdeeNGJCHfgoE0NkxLXKotQuWUPVOIIlvsTrGImoV/m
ETdcyk1IB8U/vk0glbUVjBNHOz4e6UsfZDL1pTO3LOrmthMHi8nLFxNoNbP2zWUh
KRCAm9Uj61i9v0swo/nrG/MnfUQhO4YQyVq70r8b99RfIL4Iy/6F93evVus39ZxV
QeynW/7epuJttw2y/v6W67ROwXT8pfRkBpXI5gypaJDFZ8BVIyURnCj0kW2fty7v
g9NHqmLcM1FDhvaJxf/2rL6h02tWEORg
-----END CERTIFICATE-----