Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/008739e7-1b52-34ac-a019-a73f2fe66bed.roa
File:                     008739e7-1b52-34ac-a019-a73f2fe66bed.roa (raw, json)
Hash identifier:          sACegWwhNrDKf/vchBNxIn6en9o71SjEfQdc9UH6JF8=
Subject key identifier:   14:3E:37:9D:89:F7:DC:85:1A:AB:FB:7E:AB:DD:B6:28:A6:AA:AC:0C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E4FE9AE630B92ADD5AFDFF140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/008739e7-1b52-34ac-a019-a73f2fe66bed.roa
Signing time:             Sun 19 Jun 2022 12:00:00 +0000
ROA not before:           Sun 19 Jun 2022 12:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4f:e9:ae:63:0b:92:ad:d5:af:df:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 19 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=72f6447a-e82c-4c02-ab44-aae5d0d2cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:02:40:95:78:9c:d3:de:f1:cd:f6:f6:8e:
                    6d:56:ac:e4:6b:fd:03:59:10:d5:15:e6:f7:ad:6c:
                    93:64:10:24:e7:27:76:c7:aa:40:39:bc:fb:f7:b2:
                    2a:c1:54:f8:d9:1c:c6:f6:39:ff:7c:13:fc:da:7f:
                    70:de:c4:58:bc:40:50:c4:3d:2d:c4:c8:c9:2f:fe:
                    6a:a3:80:e3:99:dc:ba:9f:f9:cd:48:df:ac:3b:30:
                    4f:26:6f:dc:cd:d7:32:7a:6c:fc:67:fb:25:f2:39:
                    cb:02:10:fa:86:d4:35:56:11:21:4a:94:89:7f:d8:
                    91:7a:81:5b:e9:da:ba:18:77:a6:0d:6a:e4:0f:f8:
                    9b:99:7f:7c:96:6e:ce:7f:02:e8:68:8b:ba:66:c3:
                    35:ee:2a:e0:94:3c:eb:b6:a5:eb:f8:9c:f8:0e:47:
                    3e:f2:fb:3b:2d:9f:37:3c:a3:c4:2e:e1:f2:c9:4d:
                    11:07:4b:f6:1f:d9:35:c1:8c:33:b4:47:95:de:8c:
                    98:cb:92:18:29:5e:30:36:cb:12:26:e5:18:04:77:
                    96:3b:79:97:9a:c2:96:a4:0f:68:9c:26:0a:1b:fe:
                    e8:35:d4:ed:ac:be:47:61:16:ff:ed:d0:ce:73:1a:
                    9f:55:0a:db:9a:48:80:31:e8:2b:be:0d:a9:03:2b:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:37:9D:89:F7:DC:85:1A:AB:FB:7E:AB:DD:B6:28:A6:AA:AC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/008739e7-1b52-34ac-a019-a73f2fe66bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:73:3e:8a:1e:0f:c9:9e:2d:be:c3:1a:40:36:c5:e0:d2:3b:
         ea:b4:f1:c3:da:28:f9:fe:31:58:02:c5:3a:78:44:3b:30:6e:
         66:9b:c2:eb:74:5d:66:da:27:14:c6:1f:c1:27:fa:47:33:9b:
         a4:9d:59:25:ea:50:87:0a:27:a7:e9:78:7f:35:d7:8b:24:55:
         17:1b:97:28:68:07:d8:4b:9c:2f:53:cd:b3:df:72:93:d8:12:
         7d:b5:5a:e2:87:c3:6b:4a:b0:bd:05:3b:f3:21:33:e8:bf:eb:
         bc:5d:ba:19:e0:a4:50:1a:fc:4d:cf:73:95:d1:2c:49:36:f5:
         0b:f8:61:4d:99:b9:90:9f:4b:9e:0a:2b:83:8b:4c:eb:66:0c:
         5e:4b:83:35:22:b9:40:3b:f8:86:44:e1:e3:42:7b:b7:cc:00:
         97:56:23:68:3b:73:5c:81:92:bf:dd:85:87:36:6f:db:c1:49:
         a5:57:37:88:e6:50:5c:69:c5:d4:4a:ef:17:69:7b:fb:1b:5c:
         60:d5:7b:d1:05:22:2b:99:7e:8c:35:2a:1c:63:e2:84:53:c5:
         a1:09:b0:9d:50:c9:e2:72:55:26:7d:28:8e:37:3f:cd:21:8f:
         b9:eb:eb:c9:d0:79:03:9c:4b:0e:67:4a:2a:42:f1:c7:0d:a1:
         d4:59:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----