Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/669bfd5f-9b53-3690-9b9c-7d94637a1ebb.roa
File:                     669bfd5f-9b53-3690-9b9c-7d94637a1ebb.roa (raw, json)
Hash identifier:          tnsyiEMhp/wIwIBYGbX0EvkkoihBohwe9nMJrtiulrM=
Subject key identifier:   DB:8B:D8:AD:F9:31:7E:A0:B6:8C:42:AE:D3:66:F2:2C:2C:EF:42:F8
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DEFF4E6F7EA2E95BF60A55300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/669bfd5f-9b53-3690-9b9c-7d94637a1ebb.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Thu 19 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ef:f4:e6:f7:ea:2e:95:bf:60:a5:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : May 19 04:00:00 2022 GMT
        Subject: CN=248d67bf-622e-4964-925c-9c13aaa8ac06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:25:20:4e:9c:f2:d9:c3:b3:97:71:45:3c:
                    10:b6:37:e3:0a:80:ea:8e:4c:ef:68:c2:b9:4b:5c:
                    5b:c1:68:ad:f1:43:af:bf:94:3a:ec:33:44:ef:53:
                    1e:00:6a:b5:79:1f:e6:57:c5:5e:7e:75:8f:ae:96:
                    18:3b:cd:2c:97:d8:8c:61:93:8a:da:70:58:a8:55:
                    82:20:b1:30:7e:1e:13:78:bf:82:e2:b9:f7:c3:d1:
                    4c:10:e5:de:32:8a:f9:fb:07:d1:ec:fe:82:c3:06:
                    a6:55:38:d9:20:08:b4:45:05:84:67:d7:8d:41:c6:
                    ae:8e:9f:f3:c9:87:06:25:97:1b:fb:90:7c:77:19:
                    32:b7:3a:90:01:c2:71:f8:23:5a:9f:82:95:37:a9:
                    28:74:4f:6d:8d:f8:7b:06:e2:c6:ce:b6:95:c0:cb:
                    d9:fe:8e:6b:59:10:5d:6b:fd:35:19:c4:dd:00:82:
                    3f:aa:18:aa:97:b4:7a:b4:3f:8d:c3:42:02:8b:c6:
                    65:d2:b5:99:9c:be:13:e4:0c:d3:ea:33:ee:d7:b1:
                    0d:8d:7c:60:fc:7a:7b:99:01:f6:c2:54:a7:ec:c4:
                    f2:32:07:58:e2:84:f4:5f:ed:c5:49:cf:56:42:d4:
                    50:16:2d:24:f5:c3:fc:95:9f:5d:20:03:99:78:9f:
                    9c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:D8:AD:F9:31:7E:A0:B6:8C:42:AE:D3:66:F2:2C:2C:EF:42:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/669bfd5f-9b53-3690-9b9c-7d94637a1ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:57:f6:77:b0:e5:54:07:29:65:38:df:77:68:55:b7:96:
         7a:16:97:6e:6a:32:34:5a:55:d6:db:e7:8c:30:0d:c1:bc:12:
         f7:bd:94:4c:da:f9:0d:cc:e1:15:38:0b:52:fa:66:06:6c:33:
         87:ea:d0:66:7a:f7:11:42:c1:1b:ed:94:b0:d1:ee:c9:7c:55:
         1b:29:cc:93:97:2f:14:99:41:07:a5:78:02:cf:b5:38:5d:dd:
         b1:99:96:d6:6f:c9:d3:f4:fc:97:ed:32:bc:02:7c:4d:79:20:
         02:e3:d3:16:d7:c9:1a:2e:04:3f:e6:a4:fe:e4:66:2e:63:8e:
         0a:38:9c:61:9a:5c:69:13:ed:46:f1:d8:fd:df:cc:fb:7e:2e:
         12:8e:0c:3e:b7:ee:32:32:1b:a4:17:9c:3b:6c:b6:93:5a:04:
         71:a9:ce:ca:f3:93:6a:e0:9d:ea:2f:c4:53:43:2b:85:48:72:
         57:25:e5:73:66:16:93:13:ef:44:71:cc:6f:d2:8d:62:70:b2:
         48:a1:62:67:bd:a3:7e:8b:0a:0c:02:77:46:67:fb:c4:30:46:
         25:6c:0d:a2:b7:56:13:e0:4c:90:68:8d:33:10:96:67:38:3c:
         de:ae:2e:58:a2:7c:bf:d8:0e:e5:55:44:d2:fd:40:ec:5d:ef:
         69:19:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----