Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f31b410-7ca9-3396-8123-ba1e59b5c974.roa
File:                     6f31b410-7ca9-3396-8123-ba1e59b5c974.roa (raw, json)
Hash identifier:          +7Uo+UjqtjSf/4U5oydwcCRMQ2wCrPRAxUViyjLgNRk=
Subject key identifier:   1B:A5:FE:AD:12:F1:C0:71:A7:EE:30:13:82:AC:2C:B3:35:23:56:95
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E0CDA5F31D3C5F73D1A7306E0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f31b410-7ca9-3396-8123-ba1e59b5c974.roa
Signing time:             Thu 26 May 2022 12:00:00 +0000
ROA not before:           Thu 26 May 2022 12:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0c:da:5f:31:d3:c5:f7:3d:1a:73:06:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 26 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=51661cff-4125-41fb-9e2a-001f51c62c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:e2:ea:96:80:ff:40:24:3d:f4:a8:79:45:
                    a5:92:4b:3f:54:2e:bd:10:86:d1:24:61:de:d9:60:
                    0a:06:26:68:26:dc:70:f0:f9:ee:5d:fe:4f:2a:29:
                    8f:89:0c:94:67:e8:7a:d8:12:3e:2d:ef:a3:55:89:
                    33:ea:ea:7e:2c:8e:5d:92:92:57:81:b6:9b:9f:f5:
                    25:12:70:b6:e4:60:bb:2f:cb:07:88:79:b8:a4:9b:
                    f3:66:db:4c:4b:a6:62:97:60:aa:76:38:31:d0:04:
                    99:13:24:ce:87:42:6c:19:17:bc:08:03:9b:d6:58:
                    58:dc:69:ec:38:2c:fa:b3:57:ee:10:1a:77:d0:90:
                    bb:9e:4b:18:a8:a2:c8:d6:d8:f3:f8:d5:06:9b:fd:
                    6f:db:6b:12:fd:ef:a2:11:e2:63:ce:33:24:f3:5f:
                    7b:02:84:b9:ac:c7:54:c4:4b:b6:9f:d6:d0:e6:b4:
                    66:7b:a3:17:b3:68:bd:23:30:9c:02:2a:39:4c:d7:
                    6f:65:42:d1:7e:87:ce:cf:ea:33:07:ce:52:32:31:
                    cb:69:8b:78:a6:e4:e0:e8:88:a2:25:c5:3c:5c:68:
                    aa:6f:4d:1e:f3:87:ac:c7:2d:60:01:08:14:76:68:
                    51:dd:00:67:a4:cb:8b:34:92:10:d5:b7:ea:92:ec:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:FE:AD:12:F1:C0:71:A7:EE:30:13:82:AC:2C:B3:35:23:56:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6f31b410-7ca9-3396-8123-ba1e59b5c974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:88:28:f9:b6:57:b5:a8:2c:13:2b:82:e1:f6:68:d4:d0:74:
         b2:fe:ea:c5:f1:01:83:f7:55:88:df:8c:85:50:82:e4:1c:46:
         af:5f:70:1c:fe:34:fd:da:72:83:13:8a:59:aa:35:aa:27:51:
         8f:d4:1d:00:97:0e:6c:dd:66:50:0a:a4:9f:f3:5a:37:d9:71:
         fd:1e:71:83:80:67:64:81:02:f5:f3:db:75:46:fe:3c:de:fe:
         8d:f8:eb:67:f2:18:79:c8:ec:ba:8c:b9:64:f6:12:f5:70:68:
         60:9a:7c:8d:4b:22:5c:b9:de:9e:e8:95:df:2b:9c:91:9d:57:
         2a:35:4e:ac:72:e8:0b:fa:a3:a8:c6:f0:3e:ad:66:f0:b4:6e:
         02:45:54:63:07:a8:d6:25:0a:9e:b4:f3:83:0b:c8:c6:7c:3c:
         f4:a0:3e:b8:39:e9:8e:fe:7a:9c:d0:a1:08:2f:46:75:b8:66:
         9c:3d:5c:5a:dc:4d:13:64:be:0e:cb:79:81:d0:da:fb:c3:94:
         fd:78:3a:f7:d1:4f:6c:34:d0:55:d7:eb:b8:36:7a:a7:15:9e:
         12:8b:c6:27:10:fa:63:7d:04:8b:37:b8:56:8d:01:59:65:cc:
         b5:a5:59:11:69:81:c3:e4:b8:09:66:c6:57:d6:60:b1:ef:b0:
         df:ad:45:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----