Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/05b87ae2-a9f0-3eb3-a487-74be5dbf2f26.roa
File:                     05b87ae2-a9f0-3eb3-a487-74be5dbf2f26.roa (raw, json)
Hash identifier:          fsLKFus6tWthJMQx9My3FVlKjNBSIy9JmewZADHVB0s=
Subject key identifier:   95:C5:EE:8E:68:37:15:F3:C3:C6:F4:FB:26:F9:C6:3E:6F:31:2F:57
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858391216A8126D9CCFEFF087C700
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/05b87ae2-a9f0-3eb3-a487-74be5dbf2f26.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Wed 31 May 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:398::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:12:16:a8:12:6d:9c:cf:ef:f0:87:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : May 31 04:00:00 2023 GMT
        Subject: CN=ec8d4497-6c1d-44cc-93e5-8a1b04fff1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:b0:6c:a6:0d:c1:63:2a:43:4e:21:3c:0d:
                    22:42:b9:18:75:f3:bf:f6:46:4f:b5:f1:b3:14:88:
                    fa:da:c2:61:4d:9b:90:29:d4:13:32:22:90:a5:76:
                    e1:70:ee:dc:ed:07:e7:83:16:87:86:18:a3:55:25:
                    7a:f1:2a:74:42:c1:bc:d2:46:eb:07:2a:a9:d9:11:
                    88:f5:7b:68:20:dd:76:d3:22:38:78:6a:b9:2a:39:
                    5d:51:d8:d4:2b:05:16:fb:1f:a0:ca:1f:f9:94:d3:
                    b0:92:37:de:20:36:7c:af:fb:78:a9:cc:ac:aa:b9:
                    3f:b3:b1:b8:3f:74:56:bf:a8:f5:5c:aa:14:ad:a7:
                    dc:75:87:b1:bc:61:02:81:23:2e:dd:8a:50:b9:d3:
                    9b:2e:a1:a3:06:53:e1:7a:b6:ab:cb:5b:99:af:39:
                    c9:ef:e0:4b:5f:89:32:c2:b1:b6:e2:f7:09:76:86:
                    ee:7f:34:b3:5e:65:74:5e:a0:98:6c:e0:2f:96:f5:
                    c5:ee:d3:f6:e2:ae:84:5c:ee:b7:00:d1:f1:54:d5:
                    6c:64:66:a0:59:e4:89:f6:78:d8:c0:bc:d4:98:f6:
                    00:f5:6d:07:8b:40:0d:5e:9a:cc:48:ac:2b:e0:c4:
                    26:9a:a3:02:c3:86:dd:b8:bd:8e:a6:ee:21:23:4b:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:EE:8E:68:37:15:F3:C3:C6:F4:FB:26:F9:C6:3E:6F:31:2F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/05b87ae2-a9f0-3eb3-a487-74be5dbf2f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:398::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:e5:f6:63:29:13:23:50:45:20:be:b3:e9:a7:05:aa:b8:31:
         e6:ab:d4:67:80:bf:fb:d3:6b:1d:1a:c5:9c:65:32:72:23:10:
         9d:41:c7:18:30:3a:0c:a6:43:ad:40:8b:8c:66:83:51:5c:2f:
         4a:b9:74:dd:8a:6b:b4:51:84:d7:c7:32:af:c0:d4:0a:e9:39:
         cc:32:d1:25:61:c9:82:44:e8:07:23:f1:4d:15:27:4c:d6:aa:
         34:25:f6:49:d7:a4:a4:62:e0:2c:78:99:1c:8c:2d:4e:ce:0f:
         cd:cd:ac:b1:9a:b2:df:c2:89:2b:63:f0:d5:b8:9a:13:99:42:
         e8:7f:b3:f0:74:74:34:e3:a6:bf:f8:68:d0:82:f4:d9:1d:79:
         22:a5:f8:77:3d:33:5f:5f:55:39:bc:58:88:4d:92:f3:d2:be:
         04:ce:01:7b:67:c1:c6:ad:0b:35:4e:ae:83:a7:d6:7c:26:70:
         82:ce:9b:77:1c:79:90:b7:57:87:61:57:e7:97:e2:74:9b:de:
         2d:8a:9e:6b:18:ac:5c:2f:13:f4:45:12:ef:76:49:c4:a5:73:
         78:0b:6e:b6:91:15:0a:ab:7b:f8:ce:ee:51:99:f7:4a:24:2a:
         a8:8f:f0:65:49:1d:36:78:d9:65:e9:34:47:45:cd:dc:60:d6:
         6a:dd:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----