Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/679133ef-78e2-32f5-9ac0-43a619916b9a.roa
File:                     679133ef-78e2-32f5-9ac0-43a619916b9a.roa (raw, json)
Hash identifier:          ojSa9aG6+WFLEiIPQ1qwC3vhTDTZJocwn7c24+gDMj0=
Subject key identifier:   D7:F1:D2:3C:E8:D3:BF:36:62:45:4B:8C:49:25:C4:28:22:AA:DF:F0
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D0EE609E52F71414659F98C00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/679133ef-78e2-32f5-9ac0-43a619916b9a.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Sun 27 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0e:e6:09:e5:2f:71:41:46:59:f9:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Feb 27 05:00:00 2022 GMT
        Subject: CN=8644948e-0576-4b16-b0a7-d308572e3ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:d1:07:ae:84:8b:ab:ec:0f:03:76:a4:21:
                    f6:b8:3f:9b:05:60:69:1b:03:b4:12:92:9e:18:b5:
                    c2:9d:40:73:a3:45:8d:6e:de:f7:04:a0:05:c3:a0:
                    fd:bd:cb:04:1f:d3:d5:78:50:47:17:c1:2a:08:53:
                    2a:86:da:9a:b8:29:15:b0:c2:a2:16:8c:f9:fa:9d:
                    04:5d:1b:48:89:7c:b3:5b:23:e9:bb:9c:12:d1:68:
                    51:ff:2f:f2:8c:75:f3:94:4e:40:6d:8b:8f:70:11:
                    8e:a5:e7:4d:66:2f:63:ae:8c:9b:58:85:56:98:31:
                    17:0d:14:2c:cc:04:49:5c:e5:5b:22:1a:84:0c:40:
                    00:15:e6:dc:a2:62:82:ab:79:8b:72:84:32:4c:b5:
                    36:cb:97:85:61:f4:8e:04:f7:48:01:f3:e6:40:b4:
                    1a:bf:f8:18:c4:f4:26:61:1a:99:4f:70:99:3b:41:
                    6a:3a:4c:4b:dd:bd:33:0c:84:83:56:5b:6e:4a:65:
                    9a:d6:b2:bf:b0:3e:72:91:63:00:b4:39:e3:d3:92:
                    2f:ac:7f:d1:3d:f7:04:d2:0c:34:1c:b5:88:89:57:
                    88:8a:00:3f:69:0a:38:72:3a:65:f1:25:d7:9a:e2:
                    e9:a3:ad:08:a1:ae:d6:ae:18:f4:97:0b:2b:33:fe:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:D2:3C:E8:D3:BF:36:62:45:4B:8C:49:25:C4:28:22:AA:DF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/679133ef-78e2-32f5-9ac0-43a619916b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:cf:f4:b0:3a:b1:fc:5b:7d:3a:d2:f1:fd:97:f0:f2:dc:b0:
         04:db:2f:3b:3f:e0:ab:f0:69:8c:9e:08:7d:fd:81:eb:ab:09:
         19:d3:d9:a1:72:41:89:4c:2b:62:89:71:6f:00:d8:6f:6e:de:
         73:84:54:14:70:de:06:4b:8d:53:86:36:3e:c6:a7:ae:c7:45:
         28:10:14:bc:35:2b:e2:9a:15:c4:49:0d:2f:88:67:ea:9d:31:
         2d:99:1a:04:c9:c6:81:d8:e0:3f:4b:bf:f9:6b:1b:29:6d:e6:
         12:c4:f6:2e:03:72:6c:25:a6:58:3a:56:66:77:e2:dd:ae:3f:
         3b:6e:df:d4:13:fa:d3:65:7a:e5:e5:b8:4a:c3:d7:8a:24:8b:
         82:7f:46:b1:00:93:27:65:b0:f8:f5:90:37:1d:c5:be:14:1a:
         42:32:3b:38:35:c4:7c:3f:30:50:07:28:5f:5a:8b:45:83:cf:
         d7:10:5b:bd:c1:67:26:32:de:de:ee:d6:41:77:65:db:ba:e3:
         04:d0:78:00:ad:da:26:66:44:6a:72:d4:83:97:56:75:f1:67:
         05:74:51:e6:74:80:37:d4:87:39:ab:28:b3:38:e6:1e:a5:8b:
         16:5d:40:11:fe:4e:ab:8b:c5:8c:2c:bd:79:a2:4d:79:b1:6d:
         57:f9:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----