Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/60bc0ff1-2a96-3270-af8d-dffa3edd676e.roa
File:                     60bc0ff1-2a96-3270-af8d-dffa3edd676e.roa (raw, json)
Hash identifier:          79TqKFcYRICLLAGCA1jA8PemZ4/uFgKuVoiwox2gG1Q=
Subject key identifier:   44:4B:0F:A9:27:DF:62:9F:B6:9E:78:8B:41:C5:89:A1:3F:21:6A:FB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DF3078BCC4BCDCC634B1D3D40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/60bc0ff1-2a96-3270-af8d-dffa3edd676e.roa
Signing time:             Tue 17 May 2022 12:00:00 +0000
ROA not before:           Tue 17 May 2022 12:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f3:07:8b:cc:4b:cd:cc:63:4b:1d:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 17 12:00:00 2022 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=4f1894e1-1aec-4902-b508-31094b6c6827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:82:ed:f2:19:ff:b4:5d:c0:96:7d:a3:a8:
                    73:91:c1:43:aa:c2:a7:8d:65:01:55:69:e8:cf:a7:
                    79:d8:75:f7:fa:40:24:05:aa:8f:dc:60:9e:10:96:
                    6f:39:e8:42:d3:dc:56:f6:07:63:0d:eb:13:34:7a:
                    83:ae:c3:2f:51:1e:32:b2:e1:d4:8b:93:37:b3:62:
                    b1:7b:d1:ca:d1:be:00:d2:f0:24:d2:8b:11:f6:5b:
                    e6:a8:a2:ff:28:4d:7c:13:20:ab:5a:b5:6f:8c:5e:
                    f9:00:40:3c:7a:84:c2:ee:30:44:b0:86:15:f4:96:
                    f3:55:58:88:fa:2d:eb:b0:48:d3:55:be:18:0e:f8:
                    60:20:b9:78:a4:3a:78:77:93:96:b8:d0:ca:36:95:
                    de:b8:13:20:2d:77:e6:b1:47:f0:c0:9d:78:90:ff:
                    53:dc:b8:71:11:38:17:c7:5a:fd:fb:1b:b8:68:89:
                    fb:1d:2d:82:2d:b0:52:fd:e8:6c:c9:a9:7b:07:b2:
                    16:db:9b:d2:ab:4d:40:c1:26:d0:f0:fe:53:b0:b2:
                    08:95:cf:30:bc:1d:9c:d4:22:e6:58:a5:68:95:03:
                    8c:5f:44:d8:7e:c4:2d:d0:2b:09:bf:8c:a6:a3:01:
                    7e:ab:55:f5:9f:85:c8:42:63:96:04:89:13:99:c8:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4B:0F:A9:27:DF:62:9F:B6:9E:78:8B:41:C5:89:A1:3F:21:6A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/60bc0ff1-2a96-3270-af8d-dffa3edd676e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:7a:ca:b4:55:cd:94:93:8a:96:4d:d0:d7:e7:f7:3d:c2:
         e8:3a:2c:07:bf:8e:44:a9:dc:43:fb:0b:c4:2d:44:c1:c7:d4:
         91:97:0e:c0:0f:d1:24:21:c6:b6:df:46:ca:4f:34:ef:a9:40:
         4a:44:60:c6:1b:91:cd:10:dd:f9:92:e9:fc:ff:2a:d4:2a:14:
         04:9b:33:e6:a2:a8:8d:ab:01:79:02:54:cb:a5:b9:41:3e:2f:
         e4:21:7e:4a:60:28:c8:94:dd:ea:fc:b2:ea:a2:c6:95:66:92:
         d6:56:f4:2a:82:52:8f:b6:05:11:64:cb:32:26:02:b5:64:6c:
         66:fd:f1:8c:07:90:b5:5d:df:a1:bd:17:25:f4:70:0d:ac:9f:
         c8:6f:94:5e:be:76:f0:b9:d8:04:c5:50:61:c6:36:38:31:56:
         df:6f:00:8e:40:ff:22:8b:b9:f6:31:8f:c8:e7:09:9d:4c:ec:
         aa:11:92:8a:83:ae:ae:2b:1b:05:03:0b:4c:a4:ca:3d:fa:b9:
         df:a5:12:13:05:35:e6:1a:6b:39:03:d4:53:8b:cc:48:04:8d:
         4d:19:e4:62:56:85:b6:08:c4:90:a9:d4:a2:74:3d:e7:59:fc:
         3a:5a:11:c2:94:e6:db:13:12:44:1e:39:69:f3:42:ef:d0:77:
         ae:de:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----