Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/606b758f-9eda-33c9-b472-0e4b1bbc4190.roa
File:                     606b758f-9eda-33c9-b472-0e4b1bbc4190.roa (raw, json)
Hash identifier:          H5KPrEW4txQY/tHEtkn6t6uziGC4JKtNiMJlxwd9tWQ=
Subject key identifier:   37:AD:B1:87:F0:98:82:08:70:FF:BE:5D:B2:FC:9B:DA:5D:C6:65:B1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F610C296D500997E51EB152F0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/606b758f-9eda-33c9-b472-0e4b1bbc4190.roa
Signing time:             Sun 25 Sep 2022 12:00:00 +0000
ROA not before:           Sun 25 Sep 2022 12:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:61:0c:29:6d:50:09:97:e5:1e:b1:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 25 12:00:00 2022 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=3466a7a6-692f-46f7-b2ed-8d00ee097ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:1b:6b:48:2a:de:da:0d:29:46:cb:22:d5:
                    71:9c:58:0c:3a:d1:fa:ea:ea:d4:9f:13:8a:be:9b:
                    86:25:3a:85:31:cb:39:9f:65:ea:ad:70:91:e1:f3:
                    98:02:16:99:57:54:71:5b:6c:80:e0:98:a9:e0:a6:
                    bc:a2:b7:9e:fe:b4:97:77:1f:14:f0:ee:fb:f6:8c:
                    76:79:86:e2:81:e9:d7:b9:99:2f:26:3d:54:ee:2c:
                    36:4b:60:01:c3:f6:0f:eb:ca:b7:c6:9b:00:fe:9a:
                    9b:1e:c6:0d:f2:52:f8:8b:a2:c6:0e:e5:35:a4:94:
                    30:17:89:34:f6:90:b6:2f:91:27:42:f2:4e:21:1c:
                    f0:28:34:b7:a2:d2:58:19:de:53:e5:a5:18:3a:9b:
                    f1:cc:f2:3c:8d:4a:a6:e2:69:de:01:7c:e6:69:55:
                    30:e4:bd:fe:52:5e:17:e3:92:6c:dc:b3:99:43:ef:
                    7b:cb:27:7b:1d:2e:d6:16:a0:e3:2a:0d:63:c8:34:
                    81:fc:0d:f2:6e:4c:ff:89:dc:45:74:4d:02:8c:f8:
                    d5:cb:fc:4c:f2:62:70:75:b1:00:0c:f1:dc:43:07:
                    28:0a:6d:92:a6:a3:bd:35:ae:92:48:99:eb:90:66:
                    f3:7f:25:17:ea:f6:e3:20:c6:d8:da:82:ed:b5:cd:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:B1:87:F0:98:82:08:70:FF:BE:5D:B2:FC:9B:DA:5D:C6:65:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/606b758f-9eda-33c9-b472-0e4b1bbc4190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:f6:f8:4a:39:27:d6:a6:c9:8c:13:8e:5e:b5:d0:b9:e6:
         82:f7:38:1b:57:fa:bd:e9:eb:06:b0:53:60:36:ab:2f:63:2b:
         24:bc:a4:2c:e9:a8:06:10:c6:79:37:80:df:dc:8f:08:1b:af:
         47:cf:1f:c4:f5:4e:23:6a:c8:38:ab:c8:82:0f:61:30:e1:18:
         31:d5:fd:99:36:e6:b2:cf:42:cb:5f:e4:12:ef:09:98:29:af:
         85:f9:6a:2d:09:bc:12:4a:84:dd:c3:22:5a:93:40:b2:2c:af:
         0c:f9:fa:86:9f:9d:0d:ff:02:df:49:21:5e:7d:61:be:82:ee:
         53:27:b3:c1:66:68:b8:af:e7:ef:2f:54:b3:b4:ce:00:39:a6:
         9e:c7:ff:e2:f2:d5:6e:8d:87:1c:ce:d7:a7:8e:a6:f7:21:46:
         30:7f:2a:61:09:f7:eb:c9:58:13:22:fb:3b:59:ec:f8:5d:1b:
         45:f3:b6:6d:43:a7:96:f8:14:b1:7e:bd:ad:2a:bc:93:ec:ac:
         88:06:60:af:71:f0:8b:d4:22:7f:7f:e7:89:94:4c:20:1e:3c:
         9d:e8:ce:81:ef:fa:9f:29:fa:a1:8f:14:bb:02:78:8f:8d:52:
         f6:c8:cb:d0:6f:e5:1b:e3:3c:38:11:c0:42:8a:69:c9:2f:53:
         03:92:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----