Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4eafc7eb-56c4-3aa0-a927-4aa7171d7687.roa
File:                     4eafc7eb-56c4-3aa0-a927-4aa7171d7687.roa (raw, json)
Hash identifier:          wHsY8SXwLz4QNa/Zm1QPJuW40A7Mx2HzdSEwGFbREbI=
Subject key identifier:   E8:46:8E:3C:66:45:33:81:F6:9E:EF:F2:6D:A3:9D:50:51:13:7C:7B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D688B76919479137413B0E200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4eafc7eb-56c4-3aa0-a927-4aa7171d7687.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:68:8b:76:91:94:79:13:74:13:b0:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=8d6dbe38-19e5-458f-8440-f3868930f414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:2a:d0:5f:2b:bc:52:31:ea:5f:a4:dd:ae:
                    ed:d9:71:94:23:39:ee:3c:d6:55:a0:4c:b6:bd:1f:
                    2e:a6:da:63:7c:28:2e:a3:86:42:90:2e:82:97:02:
                    9e:b8:ae:50:81:89:6e:aa:b9:a6:63:42:44:22:14:
                    f2:de:ea:ae:a2:45:81:20:6b:ba:73:92:68:fd:67:
                    c8:73:82:19:f2:5e:8a:32:10:d3:33:34:7c:64:7a:
                    f4:6e:ca:46:4b:d7:e2:c9:5c:17:5e:0e:14:43:18:
                    f0:aa:91:63:86:3f:34:83:28:51:0e:09:49:a4:fa:
                    19:d7:31:4a:cf:9c:7c:51:bd:bd:11:33:3d:cb:aa:
                    50:08:71:53:0b:98:c2:fa:4c:f6:02:06:db:94:cd:
                    fa:f3:81:35:5a:bc:ca:08:14:d9:fc:04:01:c0:19:
                    c3:6a:5a:a5:20:c2:86:e9:d4:ac:d3:50:80:ed:b9:
                    44:bd:51:3f:8e:c9:44:82:0d:d7:0e:25:ce:33:cf:
                    3e:9d:31:2d:e1:1f:b9:c9:27:cd:0a:ed:4f:cd:ae:
                    41:8e:28:4e:93:1c:b7:53:0d:8c:17:53:75:42:8b:
                    99:88:65:85:ea:9b:b5:61:ab:c0:76:fc:ce:00:3c:
                    94:26:db:00:28:6b:42:e3:94:63:f2:54:ec:72:56:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:8E:3C:66:45:33:81:F6:9E:EF:F2:6D:A3:9D:50:51:13:7C:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4eafc7eb-56c4-3aa0-a927-4aa7171d7687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:f7:3a:da:77:3f:e8:3d:2f:61:3a:b4:69:03:ed:f6:e7:2e:
         a2:af:35:7b:eb:3f:a5:3d:72:5b:0c:34:e2:ed:d2:ba:28:42:
         f5:b0:58:f1:3f:9c:08:97:b3:26:15:c7:fb:20:03:6a:8e:08:
         67:84:54:d0:91:1e:9a:11:9c:0f:ad:9a:f4:34:94:2c:9d:12:
         9e:47:82:ed:a0:92:f9:69:e0:50:3e:99:9b:66:6e:e9:ae:5e:
         46:95:ca:95:ea:b3:03:e5:2d:30:2a:ec:b0:5c:22:dd:9b:7d:
         30:70:c3:e1:ac:cf:49:20:de:fc:a5:b1:6c:40:b5:ef:ae:33:
         94:81:97:a5:4c:de:d1:67:a6:00:f5:7c:91:c9:33:48:3c:94:
         cf:f8:10:3c:02:35:92:84:3c:b8:f9:4f:e9:46:0b:e8:f0:78:
         cb:ad:df:7a:e7:41:ad:91:51:0f:e2:3e:9a:dc:20:e7:c8:30:
         6b:fc:5a:fa:7b:64:e0:1c:0b:90:87:09:59:dc:27:e8:01:d2:
         7c:38:67:1f:54:4e:d9:73:7b:b4:86:ca:0b:65:b8:55:de:77:
         eb:b2:a2:4f:24:51:19:1b:55:21:91:10:94:a7:17:43:59:06:
         b3:70:b9:70:84:6f:1b:ce:63:97:17:c8:95:a5:c5:4c:cb:2a:
         43:cf:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----