Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3ce3b8c2-b0ac-3e83-a7db-b3404531693c.roa
File:                     3ce3b8c2-b0ac-3e83-a7db-b3404531693c.roa (raw, json)
Hash identifier:          qpLfep/FnKjNQ5dJ+E2rLlFadUCofODN6uyUi2TO9tQ=
Subject key identifier:   3E:1F:6D:D0:03:30:92:84:98:74:DA:00:62:0F:04:0C:50:E5:6A:45
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EA5B979F79420118F378C40C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3ce3b8c2-b0ac-3e83-a7db-b3404531693c.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Fri 26 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:9cc0:402::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a5:b9:79:f7:94:20:11:8f:37:8c:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Aug 26 04:00:00 2022 GMT
        Subject: CN=c489353b-1d64-45de-95bb-95842b4fff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:0a:95:59:86:ed:a3:69:68:c0:12:6a:2f:
                    b4:2e:58:86:41:73:72:8b:53:07:a7:ac:b3:02:3a:
                    47:15:01:22:17:c2:d5:01:91:e0:4f:6a:79:35:2e:
                    f8:f5:c3:c1:ea:4f:55:95:78:23:10:00:1b:f0:4d:
                    b5:21:9d:eb:7c:81:d3:b3:13:e2:fe:02:09:92:59:
                    05:7b:d4:6a:60:42:69:a4:23:a5:83:68:2b:52:e2:
                    f6:af:46:d1:a5:38:be:96:3f:5b:b6:5f:11:41:72:
                    8a:5e:05:f1:b4:64:9a:6c:5c:6a:04:a7:ff:ac:46:
                    d5:de:03:a2:3f:6c:f2:9a:bc:d0:15:56:0a:b7:26:
                    d6:8d:4b:bc:83:10:f0:37:fa:5d:d4:fc:78:e6:6b:
                    89:5f:fd:8a:1d:7d:a5:11:96:eb:19:3b:73:5f:cc:
                    ac:05:c4:25:42:f4:fe:b2:36:0c:76:40:a3:af:83:
                    db:89:36:76:e3:52:14:01:ed:4d:c4:e7:59:42:fa:
                    26:63:49:ac:20:74:80:91:1c:5f:07:5c:04:b3:62:
                    1d:dd:c2:dd:a2:26:06:42:be:5c:59:d8:fa:c9:90:
                    ac:c9:ea:eb:78:b5:30:b4:ed:60:46:fa:31:22:df:
                    63:8c:e1:03:1a:d5:94:d2:11:90:e1:cf:07:b7:4d:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1F:6D:D0:03:30:92:84:98:74:DA:00:62:0F:04:0C:50:E5:6A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3ce3b8c2-b0ac-3e83-a7db-b3404531693c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:402::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:eb:e3:32:68:5f:ac:98:c4:ba:26:cc:5e:fe:81:f9:1e:
         b5:60:6d:4c:3f:e8:cf:f5:0d:b4:44:29:67:bf:00:7b:72:94:
         08:0a:fb:e4:c7:70:25:36:b8:6b:4a:04:22:33:ae:5c:d0:93:
         17:da:81:c8:d6:8f:fc:d6:4e:56:01:92:2d:0f:81:8c:26:89:
         17:b3:58:3a:c1:7e:c6:dc:00:ce:fc:4d:7a:73:dd:7e:58:b8:
         72:52:6f:c1:c5:55:8f:be:d5:5e:80:e4:05:b3:2b:67:f2:12:
         91:75:55:82:54:b4:76:2f:ea:91:9c:35:26:55:96:18:ed:ad:
         78:78:f1:94:2c:2a:56:40:c3:c3:03:db:02:de:fe:21:18:96:
         aa:06:a5:48:65:9b:aa:05:d1:83:f8:d0:ff:b0:8a:d1:49:e7:
         11:0f:f4:04:c8:49:9d:18:63:4b:6e:d4:4b:86:b9:14:68:43:
         ec:6e:da:79:16:44:7f:51:55:f4:78:82:68:34:4f:94:83:95:
         8d:e8:ee:9c:a4:2f:c2:99:7c:11:d2:eb:a5:45:48:4c:60:4d:
         4e:24:75:03:89:00:ce:b2:f4:6a:c6:2f:d9:ff:c4:33:5e:49:
         c9:46:42:8d:3a:0d:f6:c1:d6:99:55:e6:a8:1c:f1:5d:4f:07:
         02:6f:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----