Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/c41ece1d-3961-3bd2-a898-325c56e564e8.roa
File:                     c41ece1d-3961-3bd2-a898-325c56e564e8.roa (raw, json)
Hash identifier:          zb1Z56ujB8C+Pab3nRYWH4FCKqWP29eMkcfb3HZ6iiY=
Subject key identifier:   83:B0:39:F3:71:52:AF:F2:58:F7:D2:60:DF:A5:2C:E0:C6:F8:88:BC
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F566B3D5BDE28AE192B3945C0
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/c41ece1d-3961-3bd2-a898-325c56e564e8.roa
Signing time:             Thu 22 Sep 2022 12:00:00 +0000
ROA not before:           Thu 22 Sep 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:56:6b:3d:5b:de:28:ae:19:2b:39:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Sep 22 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=e5b5df41-84fa-47c8-bb1e-2fac81efc4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:28:71:0b:48:d1:ae:4c:69:45:b1:83:2e:
                    d7:b6:00:9f:77:65:58:a1:41:b2:20:30:c6:17:0f:
                    b3:c8:d7:02:98:1c:eb:c0:b0:12:3d:6b:3e:86:53:
                    5a:c4:0a:6a:5c:97:95:13:5a:bd:e2:48:e9:59:99:
                    36:02:18:ff:a6:73:df:b5:f0:a9:fb:ef:fb:e0:b1:
                    e3:20:37:ea:8a:9c:18:0b:5c:dc:8e:d0:e6:82:60:
                    30:bc:20:51:88:7d:1d:25:df:00:d0:11:6c:4b:f0:
                    90:59:85:ca:fd:b3:19:9a:84:dd:69:d3:d7:29:b4:
                    23:13:4b:c3:81:0b:be:04:f2:90:82:ce:11:dc:9b:
                    83:db:e2:21:ce:d0:04:7c:d8:a2:5e:a3:25:7c:f1:
                    99:1a:67:54:3d:7a:31:67:d4:99:e5:af:73:e7:be:
                    42:b0:1f:35:eb:b3:f5:8c:8c:85:78:b2:b9:ef:ce:
                    3b:c7:83:1d:49:c8:04:9e:a8:b7:f1:ab:0c:d2:4f:
                    fa:d9:4e:27:83:3f:a6:4c:03:78:86:d0:c2:0b:f1:
                    cd:56:e1:24:78:30:35:50:2e:63:74:ab:6d:db:db:
                    4f:51:9d:0e:fb:02:e8:55:a2:8d:af:6c:bf:63:0a:
                    8c:bd:7c:86:2d:a9:2c:ea:56:18:5f:9f:2c:88:fd:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:39:F3:71:52:AF:F2:58:F7:D2:60:DF:A5:2C:E0:C6:F8:88:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/c41ece1d-3961-3bd2-a898-325c56e564e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:70:bd:99:7d:80:83:d3:79:40:ac:14:d7:fa:a1:82:d1:
         c5:58:ff:70:f1:82:85:b3:b8:7b:0f:db:2b:ed:d9:79:47:41:
         f7:17:c0:98:52:68:f6:4f:ca:4a:19:aa:ef:f9:8f:ba:e8:dc:
         9b:ec:53:81:92:7c:fe:ff:82:27:1d:79:ce:46:90:f3:07:0c:
         36:b9:a3:c5:d7:9a:9d:ca:71:4a:b0:2b:4b:c9:e8:cc:8b:f6:
         64:83:87:c3:6d:ac:2b:a7:ad:7a:ac:44:e1:86:5e:fa:fd:0f:
         60:83:6f:70:fa:0a:32:98:3c:1c:27:15:0d:d1:e1:38:59:eb:
         6c:e6:c8:8f:a7:14:aa:44:9f:f2:e4:60:a6:60:ac:23:15:32:
         04:b7:27:20:d3:d7:22:41:f2:e0:58:c6:65:dc:74:36:a3:93:
         b3:c5:6d:7c:a5:b5:fb:d2:9c:d2:42:0e:aa:c6:26:55:1b:5a:
         11:d5:f4:cc:9a:77:cc:33:d3:54:8e:b7:b9:08:73:e6:97:f1:
         f7:8b:47:53:1a:bc:2b:47:80:d4:b2:71:9e:84:2c:30:97:44:
         a0:cf:56:cd:db:a3:99:ac:9e:f9:ed:fb:d2:07:90:03:38:23:
         43:aa:6b:4c:7b:91:d5:35:ee:0b:1f:5e:12:b7:d2:96:a7:98:
         39:4a:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----