Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c140f61-e99d-39a5-9bb5-54d47cfa0f7a.roa
File:                     6c140f61-e99d-39a5-9bb5-54d47cfa0f7a.roa (raw, json)
Hash identifier:          H3FrreoCExSst0DVzJsejgukOj8Kv4DGQSGeRhuz5eY=
Subject key identifier:   A1:2D:CD:3B:7E:5F:0A:EE:C3:93:26:39:C4:0B:8A:DF:54:E4:01:54
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCE870E6DDF36DBD73D3A5A66
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c140f61-e99d-39a5-9bb5-54d47cfa0f7a.roa
Signing time:             Wed 02 Feb 2022 05:00:00 +0000
ROA not before:           Wed 02 Feb 2022 05:00:00 +0000
ROA not after:            Fri 04 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ce:87:0e:6d:df:36:db:d7:3d:3a:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  2 05:00:00 2022 GMT
            Not After : Feb  4 05:00:00 2022 GMT
        Subject: CN=5272d866-b389-4885-94e3-5723fb6a3856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:ab:33:51:a6:50:58:64:e5:12:9f:6d:52:
                    09:10:69:51:48:5d:e7:e3:9e:63:7e:9d:08:b3:ce:
                    fa:0f:31:05:db:de:cb:91:b4:f4:99:4d:d2:ea:3f:
                    47:ea:53:c9:0e:c9:e4:df:aa:33:76:b3:07:33:64:
                    89:4b:52:e1:25:be:01:c9:2b:e9:ae:d4:b5:d1:c8:
                    4d:1f:01:87:ec:66:95:13:6c:8d:a9:1a:f3:08:e0:
                    d4:c6:b8:88:d5:9d:31:19:9d:c7:9c:a8:48:24:33:
                    9a:0e:dc:74:38:f9:3a:34:97:82:a2:a7:7b:4d:1a:
                    91:ab:64:9c:47:cd:bb:9d:28:83:2b:fa:bd:59:97:
                    fa:f0:09:f0:23:7f:1f:21:db:67:5b:a7:21:9a:31:
                    25:c9:29:5b:a1:ea:20:9d:29:a0:a3:1d:b1:e8:ca:
                    8e:51:d9:11:2c:65:bc:37:81:40:86:0e:49:b5:33:
                    04:b4:52:fc:10:47:85:38:5b:61:05:48:d8:22:2f:
                    7d:4d:c6:5b:e3:4d:84:d8:5a:e4:4a:b5:06:7e:65:
                    a6:a1:9b:c9:47:d5:e2:65:46:e6:95:ad:69:a5:38:
                    6e:e3:68:c6:cd:f5:3b:f4:87:fd:30:27:0d:a1:34:
                    38:1a:c1:12:d3:99:14:1a:32:2f:59:57:cc:75:24:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2D:CD:3B:7E:5F:0A:EE:C3:93:26:39:C4:0B:8A:DF:54:E4:01:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c140f61-e99d-39a5-9bb5-54d47cfa0f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:04:72:3f:71:b4:ef:38:3b:87:44:d5:45:59:5a:fa:85:d8:
         32:45:bd:66:b7:6f:c1:b8:bf:49:eb:74:e8:a4:1a:9e:45:0e:
         61:be:f3:d5:a7:3d:22:e9:af:42:7c:71:9a:01:4e:1d:11:95:
         4b:5f:af:7c:87:52:1b:41:a8:fa:f8:e7:0b:da:c0:37:b2:ec:
         e7:2a:e7:01:05:a3:10:92:46:79:0f:99:42:a5:09:e1:65:3c:
         88:b4:df:22:0b:8b:de:97:e3:7d:58:64:86:ff:88:51:24:9d:
         9f:62:6b:26:97:ef:3d:16:d7:a6:63:b3:3b:86:e0:0c:fc:bc:
         1b:70:00:06:7e:cf:50:25:e7:b5:f7:ec:df:45:f0:c9:75:3a:
         f4:4b:17:49:7d:d4:24:87:b8:59:0a:1d:27:65:c9:fa:7b:5e:
         ab:02:2f:dd:71:7e:f8:3b:26:32:11:6a:02:b9:80:cb:d5:b8:
         5b:fa:f7:aa:75:bb:2e:e7:74:df:31:22:47:38:6d:b3:93:a4:
         34:78:98:b7:19:e4:d9:6e:95:48:40:33:be:b7:94:e0:06:ba:
         9a:74:35:da:84:a4:77:b8:04:f7:c0:fb:82:cb:e0:b4:d3:79:
         52:e6:c9:54:ec:77:1d:60:03:c6:70:8d:f9:7e:3e:fe:40:a2:
         fc:0b:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----