Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e69bfe7-7ab3-33e6-8cd7-e172e306c1fb.roa
File:                     5e69bfe7-7ab3-33e6-8cd7-e172e306c1fb.roa (raw, json)
Hash identifier:          SwR/BXmeZW6qJJDfrLCtuqzDcvjmVwl0atD1n9OXY5A=
Subject key identifier:   DD:ED:00:99:E8:E1:88:88:62:04:C1:AD:18:C5:B2:78:7B:8C:3A:A0
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CE6C96DF64865CE76C3AFDC80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e69bfe7-7ab3-33e6-8cd7-e172e306c1fb.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Sun 13 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e6:c9:6d:f6:48:65:ce:76:c3:af:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Feb 13 05:00:00 2022 GMT
        Subject: CN=02d966e8-5645-4442-8fdd-39801647edd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:0e:f0:53:8a:f4:d2:0a:0c:e7:0a:4c:27:
                    2b:f9:b4:45:f8:f5:60:9f:52:5d:f3:8d:8d:0d:72:
                    dc:9f:f9:f0:22:39:c1:59:0f:33:43:49:d4:8d:6d:
                    61:31:e3:4a:9c:3c:ef:3c:ab:4d:d2:bb:08:ef:77:
                    08:cc:bb:85:84:df:fa:6b:31:00:28:b6:0f:63:4f:
                    dc:bc:7d:03:11:f4:32:fd:bc:53:12:0f:b4:3e:c4:
                    fb:68:a6:a6:46:87:9c:92:49:e1:d8:f2:b1:d3:60:
                    3d:6b:b6:c4:4d:7e:55:a5:01:71:c9:17:f3:54:9e:
                    bb:bf:f7:59:12:ae:dc:b7:ac:ec:07:33:36:de:01:
                    7e:e8:87:60:30:ba:10:f4:38:e4:7c:31:68:a8:4c:
                    ae:73:2a:97:4e:5b:a8:aa:c1:20:39:8b:dd:fe:e0:
                    c2:ce:0a:a9:05:0c:b4:d2:79:83:ce:b1:ae:ef:5d:
                    ff:f8:ea:48:66:46:e3:13:5d:c9:94:97:ad:67:9a:
                    98:68:94:9d:6b:06:38:a5:e2:03:5e:5d:7d:c0:f4:
                    7b:af:24:b9:3e:5e:6c:71:3d:aa:14:17:93:08:18:
                    ef:b5:31:37:2d:d0:79:30:ae:00:3e:6d:88:8a:b9:
                    e0:fb:1d:11:16:03:7e:ad:de:10:97:7f:35:85:e7:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:00:99:E8:E1:88:88:62:04:C1:AD:18:C5:B2:78:7B:8C:3A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5e69bfe7-7ab3-33e6-8cd7-e172e306c1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:83:c6:06:ea:4e:aa:36:a1:e6:89:e4:7b:b6:d7:84:f6:4c:
         1a:45:f0:6f:46:f4:ed:f9:b8:16:f5:75:99:12:37:48:55:42:
         34:ff:90:7a:5f:4f:b2:91:55:99:58:5e:e0:4d:ed:20:45:d9:
         54:90:f6:11:e4:8a:d6:36:fb:7d:cc:6d:fb:2f:2a:51:e4:96:
         c2:66:43:3f:cc:54:61:19:e2:c7:71:b0:24:38:67:89:b4:26:
         de:09:9d:76:68:7f:0a:b7:12:86:55:12:54:60:74:0e:77:20:
         50:47:77:32:42:89:99:72:24:c9:01:7e:03:77:6c:ed:e9:94:
         af:9d:34:a0:35:1e:11:a0:87:a2:5a:06:a5:ed:6a:23:92:30:
         ce:1d:4e:33:c8:c9:29:e4:00:5c:7b:82:a7:2a:69:58:1b:4a:
         69:a5:ae:28:95:ff:c6:d9:d2:4d:8a:4e:84:2c:d6:73:6f:7b:
         52:b4:1d:e3:c6:35:ad:84:98:28:c4:81:b8:e7:0f:5f:34:a1:
         93:3a:40:74:cc:ad:4d:5b:f4:7f:f5:f0:de:a4:62:f0:12:da:
         56:bc:c7:77:26:fe:8b:b3:71:3f:15:0b:0d:b1:75:0c:11:c8:
         a0:24:10:ce:38:7f:09:48:aa:22:2b:a9:b5:91:5a:cd:4c:ae:
         3a:d2:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----