Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24426154-3971-3be5-8887-3bc4a7dc51ff.roa
File:                     24426154-3971-3be5-8887-3bc4a7dc51ff.roa (raw, json)
Hash identifier:          C8WDgPhFGRaCMR6gLwpX02nTQdjBsqqv55V8mS0HxSQ=
Subject key identifier:   B3:08:2F:ED:5B:00:E0:95:C7:84:38:8B:6D:94:3C:9F:E9:43:52:7D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E44B6DDEC6524692C86ADEF00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24426154-3971-3be5-8887-3bc4a7dc51ff.roa
Signing time:             Wed 15 Jun 2022 12:00:00 +0000
ROA not before:           Wed 15 Jun 2022 12:00:00 +0000
ROA not after:            Sat 18 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:44:b6:dd:ec:65:24:69:2c:86:ad:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 15 12:00:00 2022 GMT
            Not After : Jun 18 04:00:00 2022 GMT
        Subject: CN=ae2ec51f-90d5-4e7f-bb8f-158656e97d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:ab:75:b1:51:be:d9:5a:54:28:fe:3c:18:
                    d4:dc:47:4d:2e:b9:3d:27:98:87:85:17:1a:44:5f:
                    c8:09:48:cb:6d:b7:9c:06:87:b7:0b:17:d5:8b:f6:
                    13:e4:8a:dd:07:b0:89:fb:ab:c4:56:a5:e9:b4:7e:
                    f7:49:94:80:0a:f8:95:a1:e4:1f:b2:ec:57:06:93:
                    cf:f4:1b:72:cb:4b:39:9d:5e:35:2c:f9:59:38:05:
                    1a:4b:18:0d:09:e8:ce:92:91:aa:a5:fd:4c:d1:32:
                    22:db:cd:f4:c4:a1:1e:d9:8e:27:17:12:70:34:a2:
                    e6:a6:2a:2e:77:17:27:2d:91:90:94:f0:f6:a3:5a:
                    5b:1a:21:cd:e2:ae:f8:f5:fb:4f:49:e7:81:6a:1e:
                    f5:f9:6d:42:39:63:57:c1:17:b7:30:26:66:e6:99:
                    de:14:dd:b6:71:2b:f5:6c:5e:56:fe:e7:b2:90:06:
                    6a:aa:a7:d2:90:8c:49:d9:38:d1:17:2e:b4:6c:32:
                    18:76:86:5e:4e:d0:96:4d:44:40:ea:fd:a5:6e:62:
                    2b:2c:77:fd:3d:6c:8e:d4:10:e8:9c:0f:31:02:a3:
                    0f:b3:12:bb:00:c8:91:96:a0:9d:82:ec:7f:72:00:
                    f8:ad:37:97:69:e4:9e:32:ab:bb:44:32:5f:be:0e:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:08:2F:ED:5B:00:E0:95:C7:84:38:8B:6D:94:3C:9F:E9:43:52:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24426154-3971-3be5-8887-3bc4a7dc51ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:26:64:3c:e2:72:97:6b:9e:87:7d:bc:1c:ba:a5:9b:a2:da:
         0a:b9:78:2e:ca:44:a4:ff:c6:ec:9e:9f:9d:17:eb:54:98:1b:
         e2:02:28:fe:78:a0:4a:90:9b:cf:c8:45:6a:7d:78:e7:1c:2c:
         a1:e8:b2:30:3a:75:65:80:40:32:82:45:94:74:de:73:44:6c:
         d9:84:62:5f:31:43:e6:64:04:c3:ee:91:5d:6c:4d:b0:67:e0:
         90:41:88:d6:3e:5f:c4:a9:5a:5a:60:5f:9f:0d:24:4c:a9:e6:
         d1:86:53:0b:ae:03:d4:45:bb:66:b4:d8:1d:5c:b4:c1:8e:21:
         29:9c:22:89:36:b6:ff:81:a6:88:84:d3:a3:c4:ed:ff:70:4b:
         9f:c9:ea:44:d9:55:7f:80:3f:91:d0:00:53:c1:ce:c4:c0:4e:
         ba:5d:6c:0b:6a:5e:87:97:39:5c:c6:d6:08:d2:0f:0f:43:76:
         2f:86:9b:09:f6:a4:6c:20:d1:20:74:69:07:fc:7d:36:32:ee:
         27:37:fa:d1:0b:73:11:da:48:52:fd:98:0f:f2:bc:d1:75:77:
         ef:b8:59:3d:cb:55:f2:14:9c:97:aa:e8:54:b2:04:0d:3e:2d:
         1e:75:8e:ce:1d:3c:8e:37:44:ec:3a:e0:b5:51:84:0d:48:70:
         a6:b4:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----