Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3f871fc1-539a-3a5f-9485-e1909a0571c0.roa
File:                     3f871fc1-539a-3a5f-9485-e1909a0571c0.roa (raw, json)
Hash identifier:          f05bVExAq9jItIZulYmOJuqM19R5EjVDKCeD89oXGJU=
Subject key identifier:   4E:CA:AD:77:FD:A5:9C:EE:42:A5:78:11:E3:D0:0E:59:3D:5F:93:6A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CFD21A22BDE0D567EF1885900
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3f871fc1-539a-3a5f-9485-e1909a0571c0.roa
Signing time:             Sat 19 Feb 2022 05:00:00 +0000
ROA not before:           Sat 19 Feb 2022 05:00:00 +0000
ROA not after:            Mon 21 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:fd:21:a2:2b:de:0d:56:7e:f1:88:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 19 05:00:00 2022 GMT
            Not After : Feb 21 05:00:00 2022 GMT
        Subject: CN=2c3b4d79-ecc2-496e-a0eb-1a081b56bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:cf:1a:f3:b4:dd:9f:29:64:fb:50:0a:01:
                    4d:f2:86:5e:81:65:17:a0:ee:84:a3:e3:3e:eb:53:
                    00:c8:eb:ca:31:bf:b9:1a:8f:2c:4a:38:d5:b5:93:
                    42:7d:6f:06:0c:3e:5f:cf:a2:e3:3b:dc:16:b1:dc:
                    e6:3e:55:ae:95:2d:2e:d5:e5:78:b0:04:bd:b4:cc:
                    a9:fc:84:bb:0c:31:f2:b7:c7:5e:60:03:19:ca:d6:
                    da:00:07:b8:67:a2:93:ab:38:f4:69:12:aa:e6:0b:
                    25:cc:f7:f9:cf:c0:6b:18:5c:ae:63:b6:82:7c:c9:
                    58:81:91:f7:89:3a:bf:8f:b5:1b:25:95:27:d1:68:
                    00:65:7f:bd:91:23:62:35:b7:3a:d4:7c:a1:48:ac:
                    40:b7:68:56:d7:12:ba:b3:ce:3b:f1:f4:ad:60:92:
                    7e:56:2a:7c:22:30:19:32:93:70:d7:9d:a3:07:49:
                    03:5b:59:45:d8:1b:f0:b4:61:69:a1:84:d0:69:01:
                    85:d7:cb:20:99:95:bd:c2:94:0c:81:53:02:5b:7b:
                    7a:de:d6:53:30:df:36:fb:ed:ea:d0:ec:94:71:27:
                    4c:6d:3c:cd:4f:08:f1:71:9a:40:33:ed:36:7c:4e:
                    8c:c8:1a:f0:2d:58:d1:96:29:bf:d5:78:34:f4:76:
                    a6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:AD:77:FD:A5:9C:EE:42:A5:78:11:E3:D0:0E:59:3D:5F:93:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3f871fc1-539a-3a5f-9485-e1909a0571c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:eb:56:48:80:4c:95:1b:99:62:d1:98:a7:70:88:f1:c3:56:
         69:70:80:55:62:3e:24:ab:d0:79:cc:05:60:e4:8f:bf:63:6b:
         f1:07:5c:5f:35:86:de:e8:70:2e:03:ca:b1:1f:71:81:c4:72:
         a4:86:4c:2b:3d:fa:be:35:d8:28:bb:ac:dc:e3:68:4d:56:9e:
         e3:47:ee:ec:f4:4b:48:c3:56:94:f9:4e:ac:01:ca:3d:47:1c:
         4f:58:0a:52:c2:b1:84:28:ee:48:ac:21:8c:df:6b:0f:3a:5b:
         9c:33:a5:cb:00:b5:17:f0:4c:c7:f6:62:88:58:0e:28:11:5b:
         45:52:a7:2a:7a:01:65:08:c7:b6:ab:1e:5d:3f:19:f0:2f:e7:
         c5:2a:c0:38:9c:56:fe:18:c0:09:42:c8:92:2c:58:2e:65:a1:
         93:ca:6c:25:c5:bc:a0:33:4c:98:e8:d7:7c:b9:9d:d1:b9:14:
         98:84:5a:c8:b3:d6:30:f6:4b:b8:25:e4:f4:f3:d7:44:ae:01:
         46:da:68:26:d4:bb:f1:b1:a7:ac:0f:80:d7:e6:5c:f0:a5:34:
         39:30:2c:e9:49:8a:50:89:7d:86:4b:1c:5c:85:00:f7:f2:0f:
         96:74:6e:65:88:56:4d:b7:b2:c0:99:96:f6:50:78:95:82:13:
         9e:45:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----