Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22627655-bc7d-305c-845b-2d6dcfd1a632.roa
File:                     22627655-bc7d-305c-845b-2d6dcfd1a632.roa (raw, json)
Hash identifier:          exCn5s1YtUC8PKTBm9Mdw9MEdwcAvZ9iR/jG50onIrg=
Subject key identifier:   3B:59:B9:99:B3:40:3E:01:BA:33:65:DC:4E:63:9C:5F:C3:48:2C:88
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DF68764230D4A96BA7F293F80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22627655-bc7d-305c-845b-2d6dcfd1a632.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Sat 21 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:87:64:23:0d:4a:96:ba:7f:29:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : May 21 04:00:00 2022 GMT
        Subject: CN=06179e6f-61f2-40fe-96c9-d88b89ec2a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:0f:65:33:5e:74:f8:e7:4c:84:86:fc:59:
                    e8:fe:45:c6:9b:b9:1b:b3:0c:08:c8:5c:41:2f:9a:
                    27:37:ea:a5:d5:5d:67:a6:45:03:65:bd:c6:22:d5:
                    0e:c0:9f:d0:7d:4d:b3:ff:15:75:7c:18:e2:99:11:
                    49:d0:77:5c:91:57:a4:92:ed:bd:f0:69:9f:48:a0:
                    9e:52:10:ca:35:eb:48:77:1f:68:f3:28:ad:e1:b8:
                    68:85:16:7b:c9:d1:1c:6d:77:93:6f:67:dd:36:05:
                    89:cd:1d:eb:59:b0:bd:4c:d9:ee:71:8b:ab:c8:98:
                    40:d0:53:7d:67:61:fe:0f:9e:27:4f:9c:12:bd:58:
                    0b:1c:f5:34:3a:9b:1c:26:eb:63:cd:18:de:e2:c8:
                    54:b8:d7:ed:3b:f1:01:bd:63:14:3b:8c:21:74:dd:
                    ab:97:c7:2d:90:1f:c1:ff:8e:c8:56:c9:db:1a:8e:
                    c4:01:0d:88:4a:3d:1d:0b:ba:b7:92:60:c4:1f:7a:
                    77:7a:a2:72:e2:c1:d4:ef:ba:9b:b8:24:77:f2:75:
                    69:20:6b:48:fc:c4:38:f5:8a:fb:c5:4c:32:89:31:
                    bb:71:85:af:53:c4:51:16:50:3c:d7:b1:41:c2:f0:
                    8a:dd:06:89:36:5d:81:ff:34:59:22:5a:86:1e:50:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:B9:99:B3:40:3E:01:BA:33:65:DC:4E:63:9C:5F:C3:48:2C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/22627655-bc7d-305c-845b-2d6dcfd1a632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d0:59:dd:f2:e7:2b:4f:61:79:66:fa:8e:4f:48:0a:b9:61:
         26:db:a2:cc:60:de:db:c7:36:e1:d8:89:c7:42:d9:e1:09:05:
         81:72:7f:b0:f8:5d:05:d0:16:5c:6c:95:be:86:91:40:1c:f8:
         96:89:a7:a7:74:9a:c4:65:59:18:26:67:e1:13:8d:8f:79:26:
         c5:74:5e:85:a8:17:65:7e:f4:08:b2:72:81:7c:9a:83:ef:d9:
         7c:8d:a3:a6:92:1b:16:3c:4c:e8:dd:1d:af:66:e6:34:96:a1:
         01:fd:79:60:c5:ac:69:01:6d:aa:6a:99:61:db:ef:fb:3d:e1:
         ef:47:68:7d:0b:e6:69:61:81:16:4d:bf:e0:ca:84:61:4e:db:
         f4:94:24:79:8e:ce:97:f7:1d:56:bc:1d:16:30:34:41:f5:33:
         74:33:28:5d:a3:78:f6:87:b6:a5:53:0f:e0:91:80:a5:f1:43:
         da:b2:08:f7:fe:f9:b6:64:b8:60:0a:d5:29:df:27:45:87:66:
         9a:b3:a0:5b:48:fa:58:e0:c5:b6:0b:39:59:15:bf:04:79:81:
         d7:74:70:90:76:de:32:3d:05:f2:80:0c:58:9e:5e:94:57:02:
         a1:cd:7f:7b:f7:9c:4a:52:b0:bb:bc:44:4b:00:46:d8:09:f2:
         2e:da:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----