Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e3bb8d0-02c4-3eb4-a7fb-9beecd88ce48.roa
File:                     4e3bb8d0-02c4-3eb4-a7fb-9beecd88ce48.roa (raw, json)
Hash identifier:          NblhSn3Jc1qtgwKpavFbBxiVWBCS8FDXpSnVhK8mAsY=
Subject key identifier:   7D:F2:D2:80:83:A4:F0:42:74:A5:62:52:42:F1:1B:2D:35:AF:07:94
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DC2E6B1635423C1A3EFDA9380
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e3bb8d0-02c4-3eb4-a7fb-9beecd88ce48.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Mon 02 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c2:e6:b1:63:54:23:c1:a3:ef:da:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2022 GMT
        Subject: CN=a770752f-5e7b-4a2a-aad7-80f6404d0099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:95:38:a4:23:3e:a3:9f:db:66:86:62:a6:
                    a8:b2:64:ab:b2:f8:98:55:8f:bb:c7:7e:cf:db:99:
                    ae:44:8f:f9:32:28:0e:d7:dc:f5:4d:89:9b:e1:35:
                    5f:7b:5b:3d:cb:f8:6c:75:63:78:a8:1c:bb:65:ff:
                    3d:af:00:7e:10:51:f6:1b:45:67:4f:b4:e6:e9:f3:
                    5f:97:ba:5c:be:fa:1e:84:13:fb:89:b3:48:0e:5f:
                    ca:61:b0:69:4d:75:0e:8f:fa:98:0d:c4:58:81:46:
                    68:8a:9a:2f:bc:83:5f:d9:30:72:33:30:89:0f:54:
                    8c:5b:03:9c:bb:42:28:ba:e1:12:0d:87:2c:7d:6b:
                    da:af:cf:2f:4d:37:aa:8a:a0:26:38:1d:cb:b7:33:
                    91:7d:ef:91:6e:a0:3c:3a:d9:d9:cc:78:a4:cd:bc:
                    ee:3f:e4:a7:f0:27:90:bd:e5:63:9e:95:f9:b9:d1:
                    8f:ba:ce:53:db:cc:b1:90:72:39:a0:85:5f:8e:4b:
                    57:fd:83:f7:1d:3d:a9:a7:7d:ed:9c:40:8b:31:7c:
                    08:43:24:7c:9a:b7:2d:1f:b1:f6:fe:b1:0c:e5:b5:
                    05:2e:0d:f6:96:9c:12:5c:c8:59:9a:40:81:05:f6:
                    af:25:19:f6:8a:d7:e2:17:12:9b:5c:e3:ab:59:32:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:D2:80:83:A4:F0:42:74:A5:62:52:42:F1:1B:2D:35:AF:07:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4e3bb8d0-02c4-3eb4-a7fb-9beecd88ce48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:32:01:df:9f:68:d8:f9:56:9e:03:64:66:40:7c:a8:9d:
         4f:b8:69:e7:bd:e9:e5:54:ab:a7:10:f2:54:d4:06:9d:4c:8b:
         a2:93:a3:aa:ac:39:fe:19:c7:02:71:4c:0a:73:6a:45:2d:52:
         76:8f:21:34:0e:68:5d:ea:bb:90:3c:4c:74:3a:36:d0:fe:f5:
         11:48:1c:fe:fd:eb:fd:f0:eb:20:c8:1f:cd:db:fc:c4:eb:30:
         2f:e0:24:cf:f3:79:cb:cf:67:84:eb:32:64:e0:31:f2:f4:92:
         11:53:e0:d9:00:8d:be:f5:d8:6f:92:53:d4:f8:67:3b:07:e4:
         37:8c:37:bc:44:03:17:06:59:f7:b7:65:a3:1b:ac:8a:ed:f5:
         2b:f4:c0:bd:df:2e:d2:18:42:79:ef:04:41:41:94:c2:d3:0a:
         25:1c:0f:f4:90:2c:f6:96:5b:82:c8:65:db:a8:2d:ca:eb:a8:
         3b:97:b0:2a:5b:03:39:b3:9e:3a:c9:04:f2:32:11:32:a4:c1:
         80:61:17:8b:93:c2:e8:7c:56:c1:57:3e:83:b6:52:54:ad:11:
         87:e6:d7:ae:b3:cb:93:69:90:1a:8c:55:78:87:b3:1e:cc:d1:
         58:f1:6c:ca:b4:1a:7f:b8:67:cf:ac:bc:39:df:24:8b:09:44:
         39:a8:75:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----