Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/550478a5-b245-36a0-afd5-c4be47b56001.roa
File:                     550478a5-b245-36a0-afd5-c4be47b56001.roa (raw, json)
Hash identifier:          dxt4C1RubdMYs+UWdQH6IeP9XXGdZ4+zdGZiZjHp8Ms=
Subject key identifier:   BE:8B:6B:D7:20:41:99:08:9A:FE:7F:CE:78:BD:5F:52:82:D4:5A:D2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCE8D9107BD88908E28D71600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/550478a5-b245-36a0-afd5-c4be47b56001.roa
Signing time:             Wed 02 Feb 2022 05:00:00 +0000
ROA not before:           Wed 02 Feb 2022 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ce:8d:91:07:bd:88:90:8e:28:d7:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=06e4ea1a-2e7a-4489-b1a0-10ab31fc8ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:35:a9:69:19:20:fa:0e:16:9a:fb:e3:3b:
                    79:13:a6:78:a1:55:52:aa:bc:c6:e5:0f:6d:b4:d1:
                    85:ab:7b:89:86:2f:f1:c3:62:06:02:83:e8:ee:a1:
                    aa:af:8c:13:e8:48:65:f3:3e:5d:ba:a3:03:5d:4b:
                    a0:90:b7:9f:d7:53:d7:c0:a1:28:5c:b3:5a:80:c4:
                    e8:cf:f4:59:a6:0f:58:db:db:89:99:bc:60:96:28:
                    a9:2a:8f:86:18:7e:1f:a6:b4:1d:4f:18:82:08:dd:
                    06:b5:e5:06:2d:de:e8:b5:20:7d:d5:86:2c:36:a6:
                    93:9e:41:a7:60:f2:24:e7:32:5b:17:24:9b:38:78:
                    b8:0f:a4:54:56:46:88:21:ce:72:ff:28:fd:34:b0:
                    3f:70:ea:76:23:d7:a3:88:3a:c0:84:76:db:d1:93:
                    63:47:96:90:da:2b:ba:fe:d9:44:1e:0d:e8:f3:4d:
                    5d:cf:b3:be:dc:d9:77:bc:3c:78:da:c7:61:18:bf:
                    f6:ea:23:f0:64:db:d4:75:3d:73:89:ce:69:d2:58:
                    02:10:f0:6c:b5:4f:3e:50:47:81:3e:72:3a:6a:2d:
                    32:72:93:c9:9f:9e:ea:02:61:0e:dc:aa:f9:1e:b3:
                    d0:fb:6c:7e:da:e9:7a:4b:48:1c:72:2a:56:ae:19:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8B:6B:D7:20:41:99:08:9A:FE:7F:CE:78:BD:5F:52:82:D4:5A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/550478a5-b245-36a0-afd5-c4be47b56001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:3e:ab:87:c7:b3:ec:9c:cc:10:b7:a7:6e:f5:c5:5a:fc:
         a1:28:f3:ca:fc:bc:2b:df:e0:23:6f:0d:cf:22:1b:b2:7e:09:
         81:dd:41:08:ec:37:a2:40:51:a3:21:2a:1f:34:84:67:78:6b:
         18:91:d8:50:3f:b9:b9:f7:93:f8:26:b9:e6:28:6f:32:33:d0:
         82:a7:33:19:08:39:83:b2:80:aa:96:40:2f:e3:f5:de:73:33:
         3e:6e:9b:a0:7c:a9:36:0e:c0:73:66:9b:14:7e:88:4e:f7:d6:
         3d:5f:5f:39:44:2a:9f:31:40:d3:c3:15:14:e5:40:48:02:43:
         e4:a0:cd:d1:79:14:17:e7:68:b3:01:bb:1e:8f:9d:dc:58:35:
         11:18:08:b7:20:24:74:6a:1b:2e:f3:96:9f:20:95:16:9d:06:
         35:98:8c:b4:ba:c3:b6:f7:99:09:6b:de:83:3b:ef:a4:6e:c8:
         ce:12:ac:ef:6a:91:d3:ec:76:94:ec:c1:2f:f0:53:c7:d3:1b:
         e3:2c:c9:8e:bc:1f:8c:a9:e2:f3:55:b7:91:78:84:1f:2a:94:
         81:f4:99:e3:35:e3:48:a0:8f:c4:d3:c9:27:b7:d3:c5:4b:db:
         27:1e:98:72:7f:5d:d8:75:9e:4b:ee:97:fa:23:2c:87:d9:04:
         39:97:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----