Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/75ae116c-2017-311d-88cf-a5dd46bfee2e.roa
File:                     75ae116c-2017-311d-88cf-a5dd46bfee2e.roa (raw, json)
Hash identifier:          g0uIasdlWnJSmFf7IYtZ8RmLhO2r3vUtnnLa02SNmKs=
Subject key identifier:   D6:05:B0:8D:3F:75:FB:2C:2F:48:D2:76:4F:49:9F:28:20:D8:A3:58
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DD50B7C83814A7B34BFCB1700
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/75ae116c-2017-311d-88cf-a5dd46bfee2e.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Mon 09 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d5:0b:7c:83:81:4a:7b:34:bf:cb:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : May  9 04:00:00 2022 GMT
        Subject: CN=0fcf02b3-773f-4ba9-a95e-b94b00a43ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:5c:7d:32:c1:7f:34:66:32:81:04:c6:c5:
                    2e:58:53:ec:ee:9b:39:bf:30:5e:b9:3f:75:43:64:
                    39:6a:e0:23:28:7e:7d:2f:1d:83:3f:4d:ea:0a:66:
                    f4:fc:aa:80:da:83:a0:bb:3c:09:95:25:ee:95:1c:
                    97:95:47:35:50:7c:5b:41:a6:80:e6:d0:7d:4f:63:
                    72:64:20:70:f8:a1:4e:d1:33:d6:76:97:03:46:46:
                    97:2c:9c:e3:2a:13:61:b7:b4:0f:54:0a:5c:0f:2c:
                    fc:9e:fd:25:2b:ac:be:2e:eb:2e:92:c5:6c:49:42:
                    a6:73:db:bf:b6:ff:ae:d5:b7:11:7d:aa:9e:8d:fd:
                    87:60:f2:c7:a3:5d:c8:d9:a7:03:0e:f8:de:3c:9f:
                    8f:40:95:f8:18:40:95:79:da:99:e9:76:88:76:86:
                    08:a9:54:50:51:fe:1b:10:35:49:83:52:23:da:11:
                    09:37:e8:2a:8a:eb:d6:e1:60:c6:09:2c:1f:b6:bc:
                    85:54:9b:5e:56:5c:d6:37:03:fe:d8:79:00:85:c8:
                    7a:27:e1:f2:3a:22:9f:c8:8a:47:4d:d8:7e:1f:f2:
                    c3:d5:ec:8c:59:d2:6c:92:97:06:42:38:e2:c4:f3:
                    55:33:2a:43:c3:6a:da:45:5c:2a:a7:f0:92:59:15:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:B0:8D:3F:75:FB:2C:2F:48:D2:76:4F:49:9F:28:20:D8:A3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/75ae116c-2017-311d-88cf-a5dd46bfee2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:37:4e:71:4b:a5:83:2e:5b:1c:25:ad:c7:d7:e4:ff:44:
         1d:cc:13:3d:1e:d5:1a:72:cd:cf:31:02:74:08:a1:20:fd:08:
         c3:30:1e:99:8d:75:fc:30:0f:3c:3f:8f:00:c3:be:7e:87:cf:
         2e:38:d3:26:fa:a2:c5:f4:51:c6:1d:00:64:a1:fc:c6:18:30:
         8a:17:7b:42:ee:5f:24:50:c3:cc:83:0a:b6:de:3d:56:2b:a9:
         93:af:72:4b:69:23:f4:46:1d:8d:3f:a0:d6:49:d2:c7:8a:aa:
         57:1a:3e:25:26:1b:5d:6a:5b:15:8d:76:40:8d:9c:81:a0:7f:
         df:39:9f:1b:04:49:5a:bd:d0:a7:e4:8f:8c:f7:40:cb:76:a7:
         28:5f:3d:e7:bf:d5:49:2d:4e:57:12:4a:11:06:c3:cf:05:53:
         fa:57:ec:e3:d5:d3:c1:24:fe:e4:10:72:e8:a4:a2:ab:47:68:
         31:b8:65:a4:15:78:fa:48:8d:a0:76:d4:af:c0:6c:0a:83:51:
         dd:9b:67:75:84:8b:6f:41:4e:8f:e3:5b:0a:23:f7:8b:76:4e:
         f8:23:7f:89:68:6e:63:74:3c:81:92:bb:ca:b2:84:92:a6:9d:
         d2:4a:68:3f:70:19:f2:18:cf:da:20:eb:3d:26:53:33:ed:d4:
         85:57:63:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----