Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/07a25676-64fd-3e4e-852c-0ae44d24e105.roa
File:                     07a25676-64fd-3e4e-852c-0ae44d24e105.roa (raw, json)
Hash identifier:          2pc/thXei20q2w6XBIJitpncLNfTdNy8oPLfNYe+fn4=
Subject key identifier:   DE:E9:01:00:83:A4:C1:BB:17:D3:22:84:E1:9F:19:07:27:8D:39:DB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EA832F4E2BA00D1DEBCFE1540
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/07a25676-64fd-3e4e-852c-0ae44d24e105.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a8:32:f4:e2:ba:00:d1:de:bc:fe:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=3f2cd7b1-da86-4762-89d9-cf576d2f793a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:d1:16:57:29:ca:74:57:15:7f:45:40:3a:
                    c2:b6:65:90:5b:ac:72:8f:34:17:81:32:a5:db:9a:
                    98:a0:b6:78:1f:9d:78:60:30:81:d4:03:ca:6d:89:
                    83:20:a0:f0:a3:25:9a:97:55:c7:62:3d:12:19:f5:
                    d4:d0:aa:80:aa:05:af:8f:03:7b:45:02:21:fd:ea:
                    04:51:a8:36:ec:d9:15:57:2c:e5:01:51:e1:b9:7e:
                    d5:81:d8:f2:af:75:1d:3e:51:f8:95:97:60:88:18:
                    d3:53:c7:77:a0:65:a0:83:5c:55:e3:1d:d5:30:23:
                    16:9b:22:26:1c:a8:da:e6:45:06:a7:d6:68:f4:44:
                    32:54:c4:49:c0:48:39:c5:9e:48:d2:51:88:ca:b6:
                    37:44:03:cb:39:98:a0:a7:78:b3:3f:b1:8a:a9:d1:
                    1b:e7:04:de:e4:a2:2f:0c:f2:3a:e6:ca:9a:cc:fa:
                    f9:ac:08:19:00:05:11:54:3e:4b:e0:84:6d:b9:fa:
                    35:f8:05:a0:e4:f6:0d:4b:74:80:dd:ea:89:17:7c:
                    b9:d4:27:db:1f:97:6f:15:80:99:7d:75:5e:19:0e:
                    86:1b:f1:0a:21:b0:83:d7:fa:4c:17:8a:a4:89:67:
                    bf:47:a5:c2:22:a1:39:30:00:34:d3:4d:bb:18:8f:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:01:00:83:A4:C1:BB:17:D3:22:84:E1:9F:19:07:27:8D:39:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/07a25676-64fd-3e4e-852c-0ae44d24e105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:23:5b:15:6e:c2:f3:a1:de:af:c0:93:21:5d:14:a4:f6:
         83:6b:fb:8f:b6:3c:97:b4:f6:d5:48:00:a9:f8:5d:c3:c9:9e:
         1f:ae:e2:b4:70:d5:0f:60:16:84:ed:07:e7:eb:db:0f:f2:e7:
         53:03:49:5c:a3:de:16:a9:53:59:2f:b6:7b:43:de:8e:34:78:
         64:1b:7f:e7:e9:3a:ea:74:03:58:cb:e1:d0:5b:d9:db:bd:5f:
         81:40:1c:10:50:94:8d:28:f2:37:c3:4b:fc:f3:11:47:a6:bc:
         f5:a8:f8:54:05:1b:0a:ee:a6:b8:7f:32:3e:55:2f:eb:b9:5f:
         d9:b7:f7:a5:91:6b:57:b3:b4:a5:d8:29:24:fa:a4:f8:d2:ad:
         b4:a7:8d:bc:a3:1f:86:bc:20:9a:60:0d:e8:7f:da:c4:19:7a:
         76:75:1d:64:ec:d7:35:bc:a0:e6:45:37:0a:a7:5f:1c:b7:63:
         b3:5f:80:40:79:fe:6c:a6:20:a0:be:97:84:ed:15:2a:6d:83:
         f6:74:07:7d:ea:74:af:1f:80:58:08:08:48:fa:a1:6b:af:4a:
         f4:43:67:de:0d:2d:d8:79:7c:37:82:3a:7c:d0:89:e7:65:2f:
         51:fa:fc:d1:c8:2f:f2:68:d4:08:bd:82:c2:40:5d:18:0c:6a:
         5e:66:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----