Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2665b5bc-f5e5-3f65-b6bf-a79a21cf3993.roa
File:                     2665b5bc-f5e5-3f65-b6bf-a79a21cf3993.roa (raw, json)
Hash identifier:          tS3UpJcBCiOSLeXP8dj5HD55XXA4+swg483legfTemg=
Subject key identifier:   32:3E:AC:D5:76:2E:D4:FA:EA:29:CC:23:7D:6C:6F:D7:3B:69:84:65
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E96ED74C8CD5E9DAC7953C180
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2665b5bc-f5e5-3f65-b6bf-a79a21cf3993.roa
Signing time:             Thu 14 Jul 2022 12:00:00 +0000
ROA not before:           Thu 14 Jul 2022 12:00:00 +0000
ROA not after:            Sun 17 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:96:ed:74:c8:cd:5e:9d:ac:79:53:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 14 12:00:00 2022 GMT
            Not After : Jul 17 04:00:00 2022 GMT
        Subject: CN=1c87b54b-4b65-4e0e-b1e8-c5c756ce660b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:6b:b1:83:da:ee:b0:07:0d:49:22:33:d8:
                    fa:cd:9e:ae:a0:e2:76:17:87:52:4d:92:ac:b1:94:
                    9d:d7:54:89:70:e5:cf:a4:a0:f2:10:ad:e3:4f:19:
                    08:89:db:9c:a5:28:fb:34:bb:cd:02:b3:25:db:f7:
                    ed:cc:f6:aa:95:52:ff:74:05:b0:1b:39:2d:72:a5:
                    a4:8b:d1:59:2e:bc:3d:9d:2b:73:83:dd:66:df:fa:
                    2d:1e:ae:91:ea:cf:b7:4d:04:01:6a:16:93:17:2a:
                    8e:61:06:1c:bc:89:20:04:de:97:50:5d:1e:af:36:
                    67:c8:b9:e5:d1:1f:e7:8f:f7:7b:57:cb:24:65:05:
                    08:ad:62:68:97:74:f1:25:28:ce:b2:11:25:84:0c:
                    d2:88:20:66:91:ac:6f:a6:9a:aa:78:a7:24:4f:39:
                    45:69:fc:00:1e:b7:d7:57:64:31:33:19:08:39:32:
                    33:7a:7a:71:ae:cd:c6:eb:5f:d5:50:40:5f:7e:be:
                    f2:6e:e9:ff:78:6b:3d:9c:64:4d:14:14:92:b0:25:
                    c6:0e:d6:e2:1b:22:b1:da:e9:a4:72:31:b9:df:94:
                    5f:94:3d:ba:72:7d:74:24:00:48:af:5a:ed:20:44:
                    88:95:b6:35:fb:5f:44:e4:22:90:87:81:52:22:d2:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:AC:D5:76:2E:D4:FA:EA:29:CC:23:7D:6C:6F:D7:3B:69:84:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2665b5bc-f5e5-3f65-b6bf-a79a21cf3993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:b1:e9:42:5a:00:05:ca:cc:52:e7:38:22:6f:25:bc:a8:
         e6:b5:e9:d3:13:da:6a:86:38:02:70:89:72:12:f4:de:db:f9:
         08:17:35:6f:2f:dd:26:a2:a9:e8:05:a7:b7:e1:6e:7a:66:a5:
         0c:21:59:4d:2a:68:15:ce:79:18:77:17:26:69:c2:cb:4a:aa:
         67:a5:ae:08:c3:ba:5a:1e:e6:83:82:1d:c5:99:62:3f:e8:ce:
         02:0a:66:ca:b7:03:fa:fa:b8:f9:a6:c9:4f:d2:ee:49:08:05:
         ea:ba:d7:1e:cd:2f:41:75:98:99:ec:2c:82:25:82:1c:7c:f4:
         0a:f2:9a:1c:f2:b7:ae:47:21:ac:69:75:d3:18:a0:81:3d:ad:
         25:2b:b7:b9:87:cf:b6:b9:d6:54:f5:46:ac:57:95:f1:8a:23:
         34:33:38:b9:f2:cc:74:c5:fe:b3:a3:d3:76:83:1b:1c:54:d3:
         64:56:a1:2a:57:ce:d3:65:26:68:a1:5d:df:f9:14:5f:8c:9b:
         ea:19:25:cc:41:7d:82:64:15:bf:2b:b6:3d:69:69:b7:4e:c9:
         e1:9d:e4:99:4f:7b:58:18:a8:13:e6:88:6c:5b:a2:d7:7c:0a:
         fa:77:c6:c8:32:d6:33:2b:b9:23:ee:c4:cd:e7:95:51:25:ca:
         12:0b:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----