Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1cdaa211-5221-37e3-b50d-92675f30a932.roa
File:                     1cdaa211-5221-37e3-b50d-92675f30a932.roa (raw, json)
Hash identifier:          NKLD8A0koCanEpPZC9rcHsJ7qgkKvDUpAbfgvXAPb4A=
Subject key identifier:   46:E4:73:14:11:E0:A6:73:02:5A:87:EC:63:3F:EA:C7:74:D0:E8:0D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D09072C61AC3302EE144D6AC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1cdaa211-5221-37e3-b50d-92675f30a932.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Fri 25 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:09:07:2c:61:ac:33:02:ee:14:4d:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Feb 25 05:00:00 2022 GMT
        Subject: CN=eae1b397-2f0f-4950-bfbf-0fa2b444b99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:38:f0:60:79:02:42:f8:a2:a8:4e:87:2b:
                    29:2f:9f:bc:94:aa:ad:5b:89:c7:af:6f:44:80:18:
                    e5:db:e0:84:0b:ed:0a:cd:47:66:34:e3:b4:15:30:
                    ff:6f:94:1c:32:9d:d6:a5:22:8a:f2:f6:25:8c:1d:
                    8b:4a:a9:1b:03:dd:cc:c2:ab:b7:04:2c:16:d1:c1:
                    fa:e6:79:d4:10:2b:49:de:f7:46:ca:e8:b5:aa:7d:
                    39:5c:cd:b6:bf:ac:00:7d:dd:54:8a:b6:9d:b3:9b:
                    25:06:d2:09:08:7e:de:4f:53:01:0e:df:d6:96:cc:
                    c4:0f:e1:20:98:15:99:1f:45:18:6e:86:91:1f:f6:
                    43:67:fd:f9:34:9a:a9:96:5e:a8:1e:fe:61:2a:c8:
                    97:73:b9:96:d0:2d:bc:42:8d:69:b4:23:24:3d:3c:
                    42:8b:c0:59:e9:13:d5:40:cd:4d:a6:b9:f5:93:26:
                    c2:ce:9a:37:6f:5d:6a:f0:27:c6:bf:0b:47:74:d5:
                    3e:d4:a0:9f:a9:fd:09:d4:01:95:d2:bc:b0:2e:4b:
                    b4:3e:6c:80:7b:8b:ab:b4:6b:9d:10:81:9c:d7:a7:
                    c5:b4:da:22:bc:3b:09:5c:91:ee:2b:99:88:83:50:
                    b6:17:7f:04:69:07:4c:bc:0e:43:0a:14:3e:a0:d0:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:73:14:11:E0:A6:73:02:5A:87:EC:63:3F:EA:C7:74:D0:E8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1cdaa211-5221-37e3-b50d-92675f30a932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:82:e8:2d:05:c4:7c:d9:87:54:e7:b1:71:dd:07:1a:92:6e:
         80:07:05:1f:57:36:c0:d1:77:67:be:dc:82:c6:b6:b1:f2:6f:
         96:e1:29:bf:74:b1:0a:f0:28:d1:d5:33:77:e1:f4:3c:c0:5b:
         ea:da:22:50:74:62:3e:15:64:f2:76:55:9a:d3:cd:0d:1f:6f:
         2f:4d:46:4f:fe:d0:f1:39:37:cc:e3:39:09:8f:c6:9b:2c:d8:
         c8:7c:a9:47:a7:5c:90:c4:4e:5b:24:fc:b3:87:45:a5:4d:a5:
         32:57:3e:da:40:b3:be:9f:39:c9:34:24:09:58:ed:c6:cf:00:
         8d:63:67:6a:37:75:e3:f0:85:a5:c4:15:ca:c1:f9:c1:b5:34:
         6c:c5:7f:e1:cd:ec:31:28:29:20:a4:e7:e4:93:3d:88:b4:56:
         82:ea:7f:74:94:62:bc:0a:fb:b5:46:14:b4:53:78:87:b7:29:
         5c:46:19:d4:ad:e7:54:57:47:c4:9a:9a:64:de:b9:cc:f8:6f:
         8c:f7:73:df:4b:91:2b:ca:27:f1:12:17:54:58:86:92:c3:5b:
         3c:64:5f:e2:9c:78:9a:82:8d:c9:1f:10:8e:f8:da:bb:78:20:
         20:08:b5:65:b9:8a:b7:35:99:a9:9e:1c:55:e4:3e:c9:da:2f:
         dc:71:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----