Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c9d9c9a-2786-3814-9fab-9a3b45020004.roa
File:                     6c9d9c9a-2786-3814-9fab-9a3b45020004.roa (raw, json)
Hash identifier:          NOKIglU00mz9YvV12Bh6hAatiG5qm3jZNkXOg0C7Iro=
Subject key identifier:   34:47:02:74:EF:57:09:1B:F1:C3:0B:3D:E9:04:89:4B:BA:02:0A:83
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CDB3672FAB517F14A7DAF8580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c9d9c9a-2786-3814-9fab-9a3b45020004.roa
Signing time:             Sun 06 Feb 2022 05:00:00 +0000
ROA not before:           Sun 06 Feb 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:db:36:72:fa:b5:17:f1:4a:7d:af:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  6 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=52a42dbb-00e1-4cb7-b490-9155630637a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:64:ec:10:4b:48:4e:6e:d1:33:08:a0:fc:
                    55:f4:96:91:dd:b3:3a:ce:4f:32:29:cd:60:69:ac:
                    9b:a5:38:f3:cc:d5:ec:a5:ea:68:c6:75:84:5f:4a:
                    45:71:b3:2e:52:ea:3a:87:0f:dc:3a:2b:52:01:f3:
                    52:50:db:e8:60:c5:41:62:d0:26:33:78:1c:20:4a:
                    66:be:f8:1d:25:7e:62:c2:22:1b:d5:d3:66:66:f6:
                    d8:bd:3c:26:a7:5d:02:ac:88:c5:1f:f1:78:71:b3:
                    3e:da:e7:63:f1:43:7a:81:3a:fc:d5:f0:75:20:05:
                    56:a6:16:6d:18:a8:dc:96:7a:be:f6:bc:eb:97:f8:
                    70:70:11:18:32:fc:23:fd:59:e1:9b:4a:87:f6:22:
                    19:5a:b1:0c:78:69:7e:48:16:ad:e5:7e:63:d7:2b:
                    38:a9:9f:90:d9:56:c2:99:d8:98:2d:e3:8d:7a:0b:
                    35:b2:94:cd:6b:a2:89:7a:d1:2c:50:ac:ad:bf:a6:
                    f5:c1:06:4f:e9:d6:b1:46:cb:bd:0f:0a:76:9e:1e:
                    6b:b6:e3:6c:19:bc:99:c5:62:71:43:a7:ad:b7:0f:
                    7f:ba:f9:ef:f5:4b:d9:6d:ce:cd:d1:10:be:95:5e:
                    74:ed:a7:36:00:ff:e2:4f:0d:64:0d:82:9e:65:66:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:02:74:EF:57:09:1B:F1:C3:0B:3D:E9:04:89:4B:BA:02:0A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6c9d9c9a-2786-3814-9fab-9a3b45020004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:08:4d:a9:41:ef:1a:8f:be:e5:84:09:88:77:68:0b:91:
         d6:d7:d0:4f:ad:b3:84:70:d4:4d:24:26:4b:29:14:0f:19:6b:
         65:5b:6a:e7:cb:7a:0a:4c:03:cd:6b:23:a9:d7:14:75:27:c8:
         8a:47:18:6f:99:f9:77:68:81:33:b2:8a:5f:b2:87:4c:54:9d:
         4a:75:33:92:31:78:ac:39:04:6c:74:b9:39:38:bb:92:d9:69:
         28:4f:b0:8b:63:76:ab:34:5c:68:3a:83:2e:fe:6a:df:d2:cd:
         cc:25:bd:71:8a:6d:b2:d4:a3:b9:51:10:34:4f:45:1e:05:de:
         98:61:d0:a8:8d:39:6c:66:e9:ab:0e:f9:ef:ee:5f:8d:c1:17:
         28:42:0b:8a:5d:a8:6d:46:c6:9d:09:5c:96:40:7c:e6:b9:d2:
         6d:cd:1a:51:02:28:65:5b:e5:d0:e7:51:68:6a:82:ef:b4:4c:
         d5:6c:d8:47:81:21:c8:2d:a5:f3:92:89:10:c8:0f:34:d4:23:
         83:3e:3d:bc:5f:b7:d6:04:5c:50:9b:c8:d7:3e:a0:9f:69:5a:
         54:c1:a0:07:cd:34:2e:d6:fa:ac:c6:86:ae:bb:94:7f:3b:91:
         0f:92:ad:72:63:ef:ff:4b:df:0a:a7:e5:62:fc:92:fd:42:d7:
         0e:28:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----