Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/567df2fd-2d54-33ad-8b13-878fd7d2e1dd.roa
File:                     567df2fd-2d54-33ad-8b13-878fd7d2e1dd.roa (raw, json)
Hash identifier:          boLJWj11SbTyXr7tNvM8Nhi/Jho7B6yZS801cihZ/y8=
Subject key identifier:   AB:50:0C:BF:C5:27:8E:02:56:5E:CB:26:1D:42:AE:53:2F:82:B0:01
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CD35A32EB8AEE562675183880
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/567df2fd-2d54-33ad-8b13-878fd7d2e1dd.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Sun 06 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d3:5a:32:eb:8a:ee:56:26:75:18:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Feb  6 05:00:00 2022 GMT
        Subject: CN=819931f1-a3af-4973-9d76-ead5e710ff3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:49:94:9a:83:e0:b5:56:a4:27:8d:9e:1e:
                    a9:33:b8:02:9c:9e:e2:38:51:50:c3:e6:bc:b6:98:
                    9d:ca:44:de:15:7b:e4:e9:9c:99:34:51:d9:a3:7f:
                    ed:3d:ff:36:e1:7a:c7:c7:2d:96:59:6c:27:01:19:
                    58:81:6e:d8:55:16:3f:3a:c4:58:98:95:ab:94:d0:
                    3e:9b:3a:92:bb:39:94:18:94:9c:13:ca:c7:1b:b8:
                    47:c8:0b:f1:dd:6d:e4:77:86:84:ae:91:5c:c9:a2:
                    0e:7b:38:1f:6a:fe:0f:b0:a8:4b:fb:3e:18:96:2b:
                    14:d8:b8:19:c1:dc:30:85:20:24:fe:40:86:d0:76:
                    ef:41:b4:fa:12:ca:30:64:ba:c6:0d:20:ef:05:94:
                    33:5a:6d:d6:9c:6e:64:ec:f8:82:38:4c:b1:4b:e7:
                    1a:17:58:a8:58:d5:21:0b:75:75:a3:bc:b1:ea:c0:
                    50:74:0f:53:29:d3:0c:f5:4a:ea:eb:df:38:a6:8e:
                    57:14:06:4d:bf:c1:74:98:5c:8e:f7:29:92:f3:0a:
                    32:05:2b:5d:74:0e:ae:e3:4f:a6:8c:bc:40:c3:d4:
                    e7:78:56:f9:41:31:e2:53:59:3b:1f:ff:8a:13:d2:
                    21:9d:ff:ac:06:cb:cd:e9:16:3c:db:6e:52:e3:27:
                    50:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:0C:BF:C5:27:8E:02:56:5E:CB:26:1D:42:AE:53:2F:82:B0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/567df2fd-2d54-33ad-8b13-878fd7d2e1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:96:46:4f:ae:97:1d:8d:c9:6b:1a:9c:8e:26:f2:0c:8e:d4:
         51:1b:5d:61:cb:a2:a1:a5:e6:28:c0:1d:66:ee:34:62:05:36:
         87:e3:4c:22:80:c8:47:e5:8f:41:04:d3:d3:70:ed:cc:61:41:
         b5:58:d4:ac:7b:20:18:3d:bf:88:83:a4:22:0f:23:ea:c0:b9:
         5d:27:ee:3f:47:af:61:20:d9:71:fb:84:6d:f7:f6:0b:7e:c1:
         81:fd:24:db:5b:f2:f9:1f:c0:14:5c:19:f9:cc:19:ee:aa:00:
         8b:2e:23:89:a9:b2:7f:fd:24:f9:9d:28:cf:a5:65:30:68:50:
         f5:6e:e2:59:45:32:6a:52:48:78:2f:47:46:1a:38:6f:2b:ad:
         a4:d5:ad:ee:86:07:08:8e:5d:b2:94:30:b6:d5:ba:85:9f:cd:
         5f:1a:04:e2:5f:4b:8a:43:41:91:b5:d7:e9:9c:50:f4:29:0c:
         a8:d1:27:6a:90:91:42:cc:99:a5:ae:55:c6:18:f1:45:1b:f2:
         21:07:56:94:a9:0f:46:0f:a0:77:f6:55:ef:70:c8:5b:89:78:
         2e:60:ee:9e:82:59:cd:f5:b4:aa:c4:88:e3:09:b7:52:ab:5c:
         4a:f9:c1:7e:6c:13:b3:76:cc:02:04:23:17:9f:73:b6:b0:aa:
         7c:84:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----