Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5bd1250a-a828-3843-bdc8-91034b815477.roa
File:                     5bd1250a-a828-3843-bdc8-91034b815477.roa (raw, json)
Hash identifier:          0rRPM6wRvegZ3PPHHb0ZB7ld2pdUyO71gm1YxvRu2VA=
Subject key identifier:   08:8C:0B:3A:E8:63:C9:52:B7:82:D6:91:C6:87:13:51:6D:0F:A7:04
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D022C0519DF3F77190773EF00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5bd1250a-a828-3843-bdc8-91034b815477.roa
Signing time:             Sun 20 Feb 2022 05:00:00 +0000
ROA not before:           Sun 20 Feb 2022 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:02:2c:05:19:df:3f:77:19:07:73:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 20 05:00:00 2022 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=9388f1f7-1122-4399-a4f6-513160a9fb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:3d:51:b7:31:b2:1e:cb:50:67:4b:de:ed:
                    c0:35:53:65:12:dc:68:94:0a:07:f3:74:83:f8:b7:
                    5d:60:f6:48:e6:5a:d3:13:7b:e5:f0:f8:62:91:8c:
                    b1:6c:d1:0b:58:e1:03:7a:7a:2c:3e:a3:59:a2:ab:
                    a6:37:85:b7:92:4e:20:0b:91:d7:c2:69:1c:b5:70:
                    8b:c0:78:78:ca:93:23:3e:bd:e0:a4:cf:32:bc:b7:
                    25:6f:2f:83:ed:9b:9a:d7:af:a0:60:7e:14:4b:70:
                    fc:da:8d:65:31:6e:55:99:86:81:e5:02:83:e7:6e:
                    ab:63:47:c9:1a:84:17:56:6a:b1:f0:92:c5:70:7a:
                    15:c1:16:67:6a:d3:c4:0c:17:3e:83:61:4c:55:e1:
                    ee:3d:4f:98:54:af:68:cc:ff:4b:c0:46:2a:22:62:
                    64:1e:77:71:e1:f5:72:dc:58:23:e3:bf:02:59:84:
                    43:db:61:60:f5:ba:8e:09:90:02:00:cd:7d:c2:ec:
                    0e:f2:d2:5b:78:a0:88:86:d3:e7:7f:9a:46:36:4e:
                    ca:06:ff:92:26:44:fb:39:e2:fa:33:c5:75:84:bd:
                    70:67:6a:71:91:fc:22:16:b1:37:64:16:5e:75:af:
                    5a:c6:74:f8:96:b1:30:d1:eb:66:21:42:ed:af:db:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:0B:3A:E8:63:C9:52:B7:82:D6:91:C6:87:13:51:6D:0F:A7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5bd1250a-a828-3843-bdc8-91034b815477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:d7:c2:85:9f:9c:fc:4c:bb:ca:78:55:f8:81:de:c6:68:
         2b:57:b5:6a:37:dc:42:45:b5:48:66:3c:1f:10:76:de:92:e3:
         0b:43:c9:cb:b4:03:b8:8f:b9:2c:76:e6:93:b1:56:e7:14:ef:
         fe:54:de:9d:54:8e:ae:f1:7f:5a:36:40:ad:41:db:52:b4:02:
         3b:67:90:41:96:b9:55:84:84:93:75:fe:ab:32:d2:69:73:29:
         f8:e8:a7:e8:85:d1:c9:6b:f4:4f:00:35:1c:11:3a:cd:9d:7b:
         1e:1c:56:7e:c1:83:a1:d4:c3:55:1c:4e:f6:a8:2a:5f:78:04:
         d8:9a:96:70:86:7b:3a:69:9c:cb:b6:83:10:97:4a:ba:73:ba:
         05:82:d7:07:47:0b:0c:cf:5f:8f:70:c3:5b:63:56:ca:1e:6b:
         29:fb:09:b9:1c:47:ef:67:29:20:c8:11:9b:3b:b6:d3:08:3b:
         d8:23:32:e0:46:99:1f:2d:d0:20:86:9d:15:22:56:29:cb:c9:
         30:6d:52:4c:da:6c:2a:52:53:91:75:4b:f5:f0:d5:19:b4:97:
         9d:ff:31:8e:12:47:40:f9:2a:19:e7:3b:1c:ec:67:70:94:85:
         dc:d3:56:aa:0e:6f:6b:82:08:2b:e3:cd:a8:c9:e1:e4:ba:05:
         b1:68:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----