Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/ce518646-aa5a-39dc-9879-636628ca181c.roa
File:                     ce518646-aa5a-39dc-9879-636628ca181c.roa (raw, json)
Hash identifier:          6KzfPt0t3DruJpm950l9ETYCy7AumuIf4oNBiep7TPE=
Subject key identifier:   AF:A8:92:9B:C1:E1:89:44:7A:08:FF:6B:FF:3E:57:0C:B2:F3:AA:03
Certificate issuer:       /CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
Certificate serial:       010D0C9F4328583F30086B4DCE48EEF41D6BCEC0
Authority key identifier: 25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/ce518646-aa5a-39dc-9879-636628ca181c.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        2605:c940::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:08:6b:4d:ce:48:ee:f4:1d:6b:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6343e96d-1c97-42a6-a0b5-3884dffabf44
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=22a9742d-6428-4b62-aaa2-32a838abd3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:28:67:b3:13:12:1d:f6:57:e3:f5:ee:d5:
                    7e:aa:27:eb:c0:40:13:f7:30:af:37:61:28:f6:e6:
                    1c:a3:55:c1:18:cb:e7:f6:87:8d:0a:2f:24:05:91:
                    ec:7b:e9:63:ba:2b:38:01:ea:c0:7f:90:56:67:23:
                    ad:82:73:f1:34:14:56:b6:c7:93:04:da:ce:ea:30:
                    66:83:62:8e:e7:15:cf:5c:4b:be:e9:37:b6:89:57:
                    12:56:2e:d1:22:9b:23:8f:f0:f4:a6:dd:d2:23:b1:
                    86:ad:c1:e2:c0:e5:67:41:3e:f9:78:fe:0e:92:fa:
                    e3:bb:b2:bf:e3:23:b0:2b:92:13:3e:61:83:94:ce:
                    b9:ef:5a:c8:dd:d5:03:cf:0a:5c:13:2f:df:91:23:
                    3f:3c:d4:f0:f4:c7:f5:71:07:af:9d:3e:8a:27:fd:
                    fa:aa:f7:37:b8:e8:07:78:05:03:a9:bd:6c:9b:10:
                    3c:2c:1d:f5:c8:f3:92:2e:1f:22:25:22:27:4d:aa:
                    d0:5d:f1:2e:6d:3b:71:18:71:b7:80:30:49:7a:52:
                    ed:2f:1f:f7:6d:82:0d:98:44:1b:a1:51:de:6c:55:
                    2b:01:01:b1:03:4c:95:77:09:a6:85:8c:07:84:2e:
                    40:60:f8:4b:e2:f2:89:07:ae:e9:3d:0f:5b:6e:fc:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:92:9B:C1:E1:89:44:7A:08:FF:6B:FF:3E:57:0C:B2:F3:AA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/ce518646-aa5a-39dc-9879-636628ca181c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44/6343e96d-1c97-42a6-a0b5-3884dffabf44.crl

            X509v3 Authority Key Identifier:
                keyid:25:C4:B8:BB:E2:C1:87:91:99:03:84:77:DE:14:09:52:DC:9F:21:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6343e96d-1c97-42a6-a0b5-3884dffabf44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:db:e6:cf:c6:37:94:e7:b1:c4:8b:e3:d4:fc:5a:47:49:17:
         68:29:c5:b6:3d:a2:c0:c9:1b:ce:e6:f9:03:51:27:61:df:2b:
         17:94:a3:5b:1e:5b:9e:69:86:b6:8f:ba:bf:56:f3:75:0b:31:
         20:e7:9a:19:f2:1c:1a:de:07:2a:e9:6c:c3:4d:f9:d7:bb:53:
         65:2d:5f:d8:d2:e4:ee:81:7c:bc:e9:cc:db:64:bb:e6:02:f4:
         67:8d:36:43:db:55:a0:7d:d5:41:eb:d0:16:79:9a:62:2b:52:
         6a:24:bb:35:8f:90:a4:c0:10:9a:2e:01:f9:22:7c:7a:50:e2:
         71:4d:78:a3:58:db:cb:6b:35:cf:ee:1b:89:71:d6:40:c0:17:
         f3:c5:cb:4f:f7:72:13:ad:b2:1a:fd:93:8c:c6:80:05:ab:a2:
         df:82:1a:e6:8d:6a:c0:7b:ed:9b:61:ca:5d:05:fd:2c:48:04:
         e0:1a:ad:ca:7a:b4:c4:bf:47:c7:9a:7f:55:70:a5:5c:59:a9:
         39:70:39:fe:67:7f:ec:99:5a:03:ab:4c:57:dc:32:f4:90:88:
         55:b3:5a:9d:1e:ae:e5:28:95:dd:ff:c0:e7:9b:4d:5f:d0:40:
         43:9a:9a:58:6d:5c:c5:b7:6f:77:86:ad:d0:9a:fd:64:ab:2c:
         9f:74:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----