Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/70498ac7-fd3d-3a3b-9de3-3ca526b022c1.roa
File:                     70498ac7-fd3d-3a3b-9de3-3ca526b022c1.roa (raw, json)
Hash identifier:          yNt5BBT8bbAlYLLPl+We0r0XidN1Plb6sT5Que1P7h4=
Subject key identifier:   86:28:CC:AC:6E:E4:74:20:A0:3A:54:29:63:E9:7A:3A:2D:06:07:69
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D8904C25AEEC68B562FCACE80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/70498ac7-fd3d-3a3b-9de3-3ca526b022c1.roa
Signing time:             Sun 10 Apr 2022 04:00:00 +0000
ROA not before:           Sun 10 Apr 2022 04:00:00 +0000
ROA not after:            Tue 12 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:89:04:c2:5a:ee:c6:8b:56:2f:ca:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr 10 04:00:00 2022 GMT
            Not After : Apr 12 04:00:00 2022 GMT
        Subject: CN=639b4a65-c57a-45cc-a06c-1a9d73a8b9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:d8:56:75:10:fe:89:c7:b7:b1:13:b9:fa:
                    ca:96:98:e8:5c:37:9e:72:9e:78:73:d6:3d:a3:db:
                    2b:a8:0a:ef:22:42:0f:46:79:a3:43:e7:58:ca:4c:
                    19:e6:6d:e7:83:fe:5f:08:c9:0f:30:2d:58:1d:a6:
                    35:73:f7:a0:22:fd:4a:7f:b6:cf:d5:f5:72:26:fa:
                    43:a4:29:0b:54:97:63:87:c3:ca:cb:e9:05:61:7f:
                    16:b9:c8:f3:5c:62:8f:7e:a2:cc:06:e7:0d:67:3a:
                    ff:1b:c3:86:d8:31:25:21:0b:bc:b2:7c:3c:f0:de:
                    61:5e:3b:06:fa:ba:9f:34:6b:f1:6f:54:7e:38:35:
                    fc:9e:a2:44:88:18:f2:36:69:da:7f:d1:97:61:fe:
                    09:73:16:05:92:b5:60:5f:61:85:93:df:41:45:44:
                    f9:0f:ed:51:0d:3a:85:30:4d:5a:5e:4b:4d:57:92:
                    6a:d4:fd:64:c8:22:22:cf:c4:40:6e:7a:2d:1e:91:
                    5d:bb:b4:53:ae:b8:87:91:07:03:1f:23:db:92:b9:
                    e3:7e:65:f9:6f:a9:0a:da:e0:03:d2:05:7c:1f:d5:
                    c1:94:ed:53:aa:ec:ae:fd:7f:57:2f:c4:1f:ae:8e:
                    43:62:bc:b3:1c:08:1d:00:32:3f:98:ce:e9:21:cd:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:28:CC:AC:6E:E4:74:20:A0:3A:54:29:63:E9:7A:3A:2D:06:07:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/70498ac7-fd3d-3a3b-9de3-3ca526b022c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:65:54:f2:5a:97:d5:b6:a2:67:1f:21:84:34:99:48:d9:bc:
         c3:c1:f4:ab:cd:5e:b0:71:ca:ae:f4:06:48:0c:2d:d6:86:90:
         76:25:9b:cb:2c:8c:0f:76:c4:41:13:6f:20:c0:ca:e2:a7:cb:
         8b:a5:7b:9a:68:eb:f3:6a:18:56:23:72:f3:ee:e0:15:06:dc:
         b4:dc:f8:36:86:e6:db:a6:29:23:20:70:69:ce:ed:81:cb:81:
         59:7f:d4:ec:4f:e3:df:db:e7:0c:8d:56:ac:28:51:4c:11:4d:
         35:9d:06:09:49:3b:41:06:87:fa:2d:70:79:7e:19:21:6c:c9:
         10:fa:51:25:b9:8d:24:f4:7d:20:41:92:b0:11:d1:f8:3b:f1:
         40:56:c6:3e:fc:d6:1b:be:dc:f5:c3:ca:0d:14:44:f0:ab:d4:
         ce:83:d8:53:61:4c:71:93:19:74:0d:65:4f:e2:f1:91:5a:68:
         28:23:9d:03:58:07:16:28:2b:b9:b8:ca:99:07:09:7b:98:82:
         77:c1:69:17:98:94:06:fd:1c:93:55:8b:6a:88:79:37:af:49:
         c9:a2:c9:c7:09:2c:1c:51:be:18:f6:61:9a:ee:41:83:ad:15:
         da:ee:40:b0:7c:34:c3:03:d1:77:23:9f:33:d4:fc:6c:22:c0:
         79:43:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----