Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/02219842-cee8-39ef-8888-befa1666c7d7.roa
File:                     02219842-cee8-39ef-8888-befa1666c7d7.roa (raw, json)
Hash identifier:          dr0oeS4DVJ5RRaqPpGmqVEckf0JjEc/t8KrNN5cnN7g=
Subject key identifier:   78:C0:6D:83:E1:6D:AE:AC:07:EE:B6:04:9B:27:50:02:1D:B9:F4:0E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F2EBBFC68A61478668B343900
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/02219842-cee8-39ef-8888-befa1666c7d7.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Sat 10 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2e:bb:fc:68:a6:14:78:66:8b:34:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Sep 10 04:00:00 2022 GMT
        Subject: CN=ad765bcc-b1f1-4e9b-92b6-e5dcde103dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:0a:f3:9a:75:fb:60:f2:95:50:5d:ec:22:
                    e8:9a:41:d0:6e:30:96:26:a0:d3:b7:71:91:f9:a2:
                    e8:74:ad:dd:b2:16:30:3c:d6:65:6c:69:d5:e1:58:
                    c7:be:b3:bd:0c:ca:1e:a7:97:a1:fd:97:63:38:f5:
                    e2:f8:07:a7:a5:d2:29:5a:6f:94:6e:56:a5:2e:bf:
                    d8:72:50:28:77:04:3d:01:ed:63:f6:12:77:60:c0:
                    81:12:98:c0:00:30:71:f4:11:5c:1f:4b:6a:ae:14:
                    79:77:cc:81:bf:b6:f9:67:56:f3:1e:1b:7d:ed:64:
                    e0:8a:c8:5c:ff:fc:32:f9:ca:0b:fc:df:64:62:9c:
                    15:dc:3b:49:ce:c2:f1:50:3c:1e:3a:1f:6f:9d:f4:
                    aa:1c:e8:77:12:b9:8f:eb:6e:55:a0:68:77:c3:e9:
                    3b:5f:76:e9:41:6b:ec:b6:63:44:ed:4c:62:48:be:
                    14:38:9e:e1:62:6d:0c:83:0e:b4:bd:45:21:f7:4d:
                    8d:b7:f9:21:2f:21:f3:fc:2a:2d:96:17:91:24:0c:
                    e6:68:95:6e:b0:2b:e6:61:c6:29:62:ee:36:1c:e5:
                    a7:42:e9:5b:f6:e4:2d:d7:13:6a:94:1a:e4:7e:4f:
                    a9:d6:60:8e:7a:9f:07:49:f4:7d:d1:13:e6:1a:46:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:6D:83:E1:6D:AE:AC:07:EE:B6:04:9B:27:50:02:1D:B9:F4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/02219842-cee8-39ef-8888-befa1666c7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:54:9f:48:2f:96:69:1a:ae:70:dd:6a:c0:40:38:24:14:df:
         bb:78:67:f9:b7:04:b5:ab:a5:7c:8b:b5:9f:92:ef:73:c6:14:
         2c:9f:30:10:0e:74:29:d2:5e:8f:93:dd:44:3a:4a:8c:e1:e4:
         38:7d:bf:34:29:dd:85:f3:0a:d6:ce:2f:93:fc:d7:b1:80:61:
         90:59:57:de:c0:29:ad:7e:9a:c4:a6:91:46:9f:71:54:7d:5c:
         45:95:ee:df:25:36:9a:33:8a:94:f0:fb:53:7a:b9:1a:13:52:
         93:f1:9a:a5:e2:f3:d0:4f:38:21:7a:23:1a:7c:ff:76:56:90:
         e0:38:a2:32:d1:e6:4d:aa:92:26:1c:d6:59:8a:eb:2e:cb:a5:
         cb:5e:1a:6b:ab:67:d9:2c:16:2f:85:10:eb:1c:e4:d7:c9:64:
         f3:0b:ff:e4:90:b0:80:46:e5:02:82:24:c0:f7:b8:02:a5:83:
         ca:25:0d:95:4a:e8:2a:5d:90:18:54:ec:ed:03:64:6b:f1:bd:
         09:8c:2b:46:d9:78:04:e7:14:76:67:8b:c1:dc:dc:74:2d:b9:
         a5:24:3c:d8:c6:6d:6b:5d:fb:21:5c:25:d8:11:67:db:b7:cd:
         cb:0a:d3:0d:8c:b4:e3:ca:c5:2c:fa:51:9c:bb:c1:dd:94:27:
         cd:50:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----