Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e34df47-aba2-3ea2-b9a3-ad733f3eab69.roa
File:                     4e34df47-aba2-3ea2-b9a3-ad733f3eab69.roa (raw, json)
Hash identifier:          MA3xLUG6MSLW9AN8/+qpy58Xo/WG86j4HZ4I+s61Z2Q=
Subject key identifier:   86:AA:1E:01:4A:0C:5F:10:DF:49:AC:D8:9E:D9:49:A8:96:A1:00:0A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D27CD5F5C5EAA444C71760D80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e34df47-aba2-3ea2-b9a3-ad733f3eab69.roa
Signing time:             Sun 06 Mar 2022 05:00:00 +0000
ROA not before:           Sun 06 Mar 2022 05:00:00 +0000
ROA not after:            Tue 08 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:27:cd:5f:5c:5e:aa:44:4c:71:76:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  6 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2022 GMT
        Subject: CN=7caa5e5f-718c-4d2c-bd61-3bc1636a6a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:f0:9f:15:39:d6:5a:9e:8b:c2:67:ae:94:
                    b1:bb:eb:f1:55:b4:15:56:0b:ca:0a:ee:cc:42:31:
                    eb:30:f5:95:b0:cf:de:8b:77:a1:2f:b0:ee:0d:e7:
                    1c:9a:86:89:eb:e3:42:ce:7f:87:00:a4:28:96:eb:
                    0e:7f:b6:4c:97:1f:9e:53:15:e0:d0:0b:73:fa:aa:
                    9b:71:b0:d4:ab:d4:63:29:95:ba:b5:6e:e9:f0:d1:
                    42:1d:d3:f7:c4:55:0f:f8:1a:5f:d4:8d:ea:2c:7d:
                    f5:53:e5:ff:55:18:b8:2a:65:ba:6c:5f:8b:36:31:
                    44:7e:52:c0:9d:5e:c0:17:10:f1:59:e0:5b:cf:a0:
                    ed:7b:84:b8:b7:19:12:17:c4:a1:83:51:b4:e8:0a:
                    9a:45:46:07:7a:2b:d1:b1:a4:e6:c9:2f:a6:61:51:
                    a0:29:aa:3e:42:db:a1:5f:4d:dd:f9:9e:e6:da:85:
                    54:de:df:65:e3:c2:08:27:e3:18:90:b1:d2:cc:de:
                    a7:e9:d6:2a:db:1b:bf:d4:eb:7e:c7:b5:00:eb:03:
                    3a:dc:70:13:1c:f0:1b:0d:f5:53:a3:33:37:b9:73:
                    a7:be:85:40:bc:69:e5:f0:ce:41:a2:b9:30:bb:69:
                    cc:8d:f3:f2:28:bc:d7:fb:6d:4e:39:c5:5a:b6:30:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AA:1E:01:4A:0C:5F:10:DF:49:AC:D8:9E:D9:49:A8:96:A1:00:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e34df47-aba2-3ea2-b9a3-ad733f3eab69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:04:9c:27:aa:99:82:fb:f3:69:94:79:cb:47:56:5f:7f:
         5d:5f:84:d6:88:d2:d5:73:60:5d:f6:aa:b2:9b:a3:d3:ce:47:
         33:a6:f8:7f:bd:bf:37:df:31:40:77:25:5e:4d:93:db:d4:bb:
         df:34:5f:06:b2:0e:fd:a9:c1:93:f1:a8:3e:c4:19:06:59:79:
         1d:77:77:96:ca:89:d0:46:1e:52:6f:a7:bc:d7:57:82:3c:ff:
         08:9f:7c:6b:20:a4:c8:94:76:16:15:3a:fe:b2:ac:ea:51:0e:
         d1:d3:d0:d5:61:2e:9a:02:c9:3f:21:3f:4c:64:af:cb:65:97:
         7c:88:1a:26:95:da:c2:6d:4f:80:54:7f:8f:d7:cd:4e:60:2d:
         dc:d7:fd:2c:b8:0c:aa:c8:03:e5:c0:ff:bd:cf:ae:41:cb:48:
         aa:b1:01:05:13:52:b0:53:97:b4:80:51:68:0a:c7:93:25:80:
         3e:21:eb:40:72:fc:bc:2d:f5:3e:8e:b7:e0:67:6a:da:eb:b3:
         ca:5c:50:49:c4:57:03:fd:0f:3e:4b:65:12:ab:83:8f:96:5e:
         af:3a:5d:f0:16:41:a7:d0:27:81:69:0e:16:ac:8d:c7:d4:6b:
         e3:03:28:37:ac:6c:b3:a6:ac:30:10:39:27:25:00:a6:34:b4:
         c4:23:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----