Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/48079032-84cc-3644-b3c8-29fe04cce538.roa
File:                     48079032-84cc-3644-b3c8-29fe04cce538.roa (raw, json)
Hash identifier:          TBltuwFm77DWskiW/0BfN1cxIGfdsItsk6IAZlNIB7w=
Subject key identifier:   07:B5:0D:6B:71:7F:8D:0C:29:F7:F4:ED:58:03:49:3D:E9:D9:D9:73
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DF6E0B8855B674DDA30276B00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/48079032-84cc-3644-b3c8-29fe04cce538.roa
Signing time:             Wed 18 May 2022 12:00:00 +0000
ROA not before:           Wed 18 May 2022 12:00:00 +0000
ROA not after:            Sat 21 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:e0:b8:85:5b:67:4d:da:30:27:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 18 12:00:00 2022 GMT
            Not After : May 21 04:00:00 2022 GMT
        Subject: CN=7cbc60ff-c7be-43e6-bed7-eda05453de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:24:94:98:e2:c3:a2:d7:3a:c5:ee:88:b1:
                    ae:37:15:d5:f0:57:9f:f2:a0:6b:3a:ce:d7:ab:ca:
                    f9:0e:c6:bb:fb:b9:ae:a6:f9:3a:62:81:80:5c:f0:
                    ad:42:39:be:2f:7b:f1:be:18:89:f1:a6:31:81:96:
                    de:7f:15:38:52:43:d6:4f:5a:3c:3f:a5:05:2e:0c:
                    c4:8b:40:6d:86:1e:78:a8:35:9c:82:07:45:11:83:
                    be:9a:ab:82:ef:17:59:23:42:fe:44:8f:18:fa:71:
                    94:b7:f3:47:4b:a6:c8:50:71:9d:12:7d:e8:bd:2b:
                    5e:6c:5b:a4:24:6d:e8:cc:0a:8a:77:1e:79:21:a7:
                    03:e7:04:14:da:2e:20:ae:0c:8d:53:7e:91:14:36:
                    78:4f:01:51:06:66:f4:6f:c2:b2:ea:e2:04:54:2d:
                    72:81:d3:97:a1:0f:f0:f0:1b:d6:4f:5c:99:9e:ae:
                    bf:83:57:f8:c3:8e:54:f9:e8:84:6e:85:2f:bd:31:
                    4a:45:8b:92:c7:19:2d:fa:52:94:4d:90:f6:85:a0:
                    d7:6d:e5:7a:70:94:9f:fe:96:03:2f:a0:50:a4:2c:
                    79:15:66:1d:fc:a1:02:d5:f2:c2:67:a8:ca:c6:0c:
                    2f:61:c7:d5:4a:5f:82:78:7c:74:e1:d1:78:a1:9d:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:0D:6B:71:7F:8D:0C:29:F7:F4:ED:58:03:49:3D:E9:D9:D9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/48079032-84cc-3644-b3c8-29fe04cce538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:dd:fc:0d:c4:c2:60:31:a4:cb:18:73:37:ee:55:8a:17:d4:
         5f:c8:40:80:c9:5c:23:f6:9b:03:32:dd:30:5c:a4:35:47:13:
         fd:16:80:26:84:b1:6f:6b:90:b3:d5:2e:d9:65:af:9f:31:bb:
         c5:15:75:62:20:4a:bb:3f:1d:c2:f4:74:cb:1a:19:e4:68:a8:
         03:10:37:38:f2:fd:ea:c4:46:e1:d5:40:02:da:4b:89:9b:59:
         dd:ba:02:74:f6:77:50:cb:b9:87:93:67:7b:f6:b6:87:6b:67:
         90:b0:66:92:45:b9:6c:78:0f:3f:08:86:d2:1b:dd:2a:1e:b3:
         ca:90:80:ce:5d:5c:b8:c2:cb:85:b1:02:28:b2:11:81:fe:00:
         88:03:cb:ef:f7:21:10:d1:70:0a:a4:ca:e5:6e:d4:8b:d3:d1:
         30:e1:c1:9a:cc:77:18:be:2f:50:2f:1e:ed:f5:43:e2:fb:21:
         2d:6d:a5:e9:08:90:58:15:a7:bf:0e:bf:85:47:8a:a0:17:8b:
         de:7e:b4:d8:bf:cb:41:e3:e4:1f:35:ae:51:1b:b6:4a:fb:95:
         8d:0b:0b:b3:a1:97:95:97:80:93:be:0e:16:c2:34:e9:3a:ff:
         3d:91:99:ff:4a:db:ee:2d:a9:b0:0e:3a:5d:7f:ee:ff:52:d2:
         4e:c2:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----