Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5d6b7ef3-fe6b-37f8-a1fa-a931f86b31f2.roa
File:                     5d6b7ef3-fe6b-37f8-a1fa-a931f86b31f2.roa (raw, json)
Hash identifier:          4Ea67Uxflg+8cAcBKBH7P+3WImjBZbZD4akz1RntLpY=
Subject key identifier:   85:E9:F6:8B:3B:05:19:1A:49:C6:27:D3:4B:33:0F:9E:8D:BF:42:98
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCF04F2000A874EDC5B42B480
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5d6b7ef3-fe6b-37f8-a1fa-a931f86b31f2.roa
Signing time:             Wed 02 Feb 2022 05:00:00 +0000
ROA not before:           Wed 02 Feb 2022 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cf:04:f2:00:0a:87:4e:dc:5b:42:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=7ac1b561-7283-498b-8f73-1b206790fad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:6d:73:77:38:b2:9d:cf:e3:4d:12:c3:b3:
                    45:68:75:4d:21:00:99:63:06:98:68:71:e4:0c:69:
                    8e:f9:32:f2:4c:4a:c1:70:71:02:5d:c7:06:64:80:
                    55:f4:2a:f0:33:2b:86:b2:56:04:b2:cf:0c:f5:83:
                    e3:34:ca:e3:de:89:95:58:c5:da:23:bc:c6:35:92:
                    07:45:0b:a3:e5:eb:5b:1a:bd:8e:84:ae:36:06:4e:
                    09:1b:b5:e6:9f:77:89:7c:16:b3:f8:6b:21:44:bc:
                    8c:fa:37:31:84:0f:53:15:5c:07:4d:c4:5f:e2:09:
                    c2:ce:d3:d2:57:d5:7a:7c:f0:0a:e5:ac:64:e9:ca:
                    26:b6:67:4e:66:23:b5:f8:62:1f:86:fc:02:aa:17:
                    46:1d:b3:b7:e1:63:7d:ec:d2:7b:da:e9:58:2e:4a:
                    93:9c:b1:f7:8f:15:02:a4:cd:5f:ce:23:8e:4d:4c:
                    7e:40:e8:9b:de:99:b6:58:2e:f6:be:ed:22:cf:aa:
                    6c:e2:46:10:d3:f5:cd:ac:ff:c6:cf:9c:7b:ed:34:
                    df:84:7c:1f:8b:73:8f:29:43:1a:1b:ef:96:5a:c5:
                    e8:63:ac:e1:bb:83:cd:ee:e2:38:69:1a:3c:97:d3:
                    45:d4:93:c7:b9:68:46:d4:03:c7:a4:6b:49:ad:d9:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E9:F6:8B:3B:05:19:1A:49:C6:27:D3:4B:33:0F:9E:8D:BF:42:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5d6b7ef3-fe6b-37f8-a1fa-a931f86b31f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:c9:1e:af:1e:76:35:f8:b4:c3:db:dd:30:69:79:86:38:
         c5:b2:41:79:f9:6f:42:91:19:91:1a:34:96:5d:94:97:32:36:
         3e:40:0a:6c:ec:f9:7f:8a:31:a3:1e:ab:9a:ab:7c:1e:ab:3c:
         05:00:7e:a6:b0:82:f4:bb:c8:14:7c:45:d7:bc:03:11:e2:0e:
         3a:64:b4:f2:0c:54:85:90:02:4c:d1:1f:3d:e3:48:2f:c4:8e:
         89:1a:2a:2e:24:5c:ff:97:5e:a9:c0:cb:5b:71:3d:58:45:2a:
         d3:6d:07:12:bb:aa:bf:d3:37:c4:b0:69:ee:cb:cb:08:cf:9c:
         9a:b7:b3:36:8b:9b:93:c8:39:1a:3e:6f:3c:bb:49:19:94:9f:
         d3:bd:da:8f:65:9b:ff:ac:48:e4:d5:3c:b4:e5:65:7f:37:93:
         f7:64:da:8d:3f:78:bb:94:6a:14:2b:26:a1:28:ac:55:3c:f8:
         05:91:c5:01:29:10:8d:c9:3c:1e:f6:b9:ae:f8:0e:d3:30:d1:
         cb:9f:d8:11:11:2b:b6:47:c1:1e:a6:19:29:da:ea:4b:35:d0:
         ef:c1:32:09:64:7c:14:0b:34:07:b4:1c:35:59:f2:33:1a:ac:
         56:82:62:4c:7d:ae:d0:36:60:cb:9e:a4:ee:71:10:1a:95:07:
         07:d7:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----