Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/43a3566d-3815-318d-9de0-d5163d522e7d.roa
File:                     43a3566d-3815-318d-9de0-d5163d522e7d.roa (raw, json)
Hash identifier:          BFvxGnMftZDdZkwOnT/pnPvrvn6f31bf2eI08vnewSM=
Subject key identifier:   ED:CC:E5:E8:73:AD:91:5A:C7:3B:EA:1E:B5:12:18:4D:04:BF:93:91
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D169BD060BDE4B9DF46AAB340
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/43a3566d-3815-318d-9de0-d5163d522e7d.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Wed 02 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:9b:d0:60:bd:e4:b9:df:46:aa:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Mar  2 05:00:00 2022 GMT
        Subject: CN=0d2c9d52-9f7f-4557-90fc-16b9a62d17bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:a4:f6:21:f5:0b:7f:fc:44:db:34:63:87:
                    46:38:92:1d:7f:fd:a5:0e:ca:a8:de:0b:38:a3:99:
                    2e:5c:41:5e:c9:7b:cc:f8:3f:00:84:79:a0:e8:09:
                    37:2a:35:0e:1e:8f:f4:24:73:22:d7:e1:ff:c6:c9:
                    79:48:78:24:f2:47:43:cd:3a:3b:d5:49:bb:74:53:
                    f1:5a:9e:1c:14:47:2a:bd:09:69:54:47:81:4a:74:
                    27:41:4c:95:a8:45:84:a8:59:e7:45:d7:65:0d:28:
                    b9:9d:ce:aa:1f:0a:d9:c6:99:82:fe:9e:3f:c6:22:
                    a3:e7:19:d4:f2:95:ef:19:eb:7f:39:48:f7:38:5d:
                    6f:d0:38:b7:01:b6:b1:73:bf:4a:e9:4a:ed:df:40:
                    b6:cc:82:41:fa:a6:8a:53:52:ab:20:83:c4:16:ff:
                    a5:79:e7:32:60:72:d5:82:5e:de:28:b9:0e:21:cc:
                    4a:ff:c1:4a:59:8d:3f:71:bd:09:3c:13:0f:69:4e:
                    a3:f4:f3:e5:ad:f6:70:12:10:13:f2:b1:4d:18:8b:
                    dd:c4:71:04:7a:d9:f4:3d:3f:a3:cb:ea:97:93:c5:
                    b0:45:b4:17:83:92:94:36:64:5b:89:f8:79:7e:71:
                    e3:ab:0f:7d:71:04:e7:89:b1:c6:e9:ce:10:a8:92:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:E5:E8:73:AD:91:5A:C7:3B:EA:1E:B5:12:18:4D:04:BF:93:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/43a3566d-3815-318d-9de0-d5163d522e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:d5:b9:a2:d8:71:82:a1:de:70:bc:2b:d1:88:79:37:54:
         ca:7a:c2:ff:1d:d1:23:d6:36:a2:a4:3e:09:7c:24:e6:a9:e6:
         b5:b6:d3:7f:2c:d2:bf:93:55:62:9b:1f:23:b1:e1:b6:5a:ec:
         6e:8a:be:d6:6b:a8:a6:8c:72:5e:d2:4d:21:0f:ff:2f:62:cc:
         a6:54:cd:cf:a1:a6:97:7a:af:0d:42:f4:3f:be:0c:77:cc:6d:
         6b:b4:ee:30:42:27:57:2f:28:ab:c5:92:da:5b:24:ff:7f:d1:
         51:36:32:00:c2:e9:44:c5:68:36:ed:8d:6c:e1:26:68:33:fc:
         62:74:6e:e5:ad:44:7d:a0:1a:ee:f0:95:56:65:e8:88:8e:4d:
         37:74:80:38:2c:88:33:4d:b0:8c:5a:62:31:2f:2c:87:37:12:
         ec:02:d7:41:59:aa:96:b9:03:32:dc:da:fd:87:61:b3:80:0a:
         38:9a:8a:d0:78:dd:78:94:73:a9:ef:89:31:13:f5:67:f6:d9:
         e1:3e:77:13:6e:49:50:a6:dd:d8:64:88:2e:37:83:fb:ad:4b:
         43:79:ca:c8:09:65:f5:e3:be:8a:a0:35:16:3d:bd:bd:90:30:
         eb:51:ae:2e:3e:ef:fb:b8:72:68:b7:41:1d:20:cc:a9:3d:87:
         e0:a1:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----