Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7b3f289a-cc56-3926-a46c-8d8ab9bbd1b6.roa
File:                     7b3f289a-cc56-3926-a46c-8d8ab9bbd1b6.roa (raw, json)
Hash identifier:          jAGOFy9/fxnBCch2eG6gC27yAP5zX0B+W6Llk0CEVck=
Subject key identifier:   D3:FB:47:07:9D:FF:97:3C:EB:06:EC:D7:8E:50:5E:D3:AF:58:22:7B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D333BEDE17CE96416BCC2D360
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7b3f289a-cc56-3926-a46c-8d8ab9bbd1b6.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Sat 12 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:3b:ed:e1:7c:e9:64:16:bc:c2:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Mar 12 05:00:00 2022 GMT
        Subject: CN=94d66d7e-57a2-4661-9470-a1cc90e82b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:84:c4:9c:5f:b0:e3:74:68:83:a4:0a:32:
                    5a:43:e4:cb:ed:d3:a0:b7:42:be:4f:30:b8:99:77:
                    66:3f:31:60:ba:36:91:16:e1:1e:ae:89:44:9e:f3:
                    14:b8:8c:db:46:bd:48:e3:ad:35:17:e8:b4:0b:e7:
                    89:70:71:0d:0f:02:a0:ee:4d:b8:19:dd:3b:3e:19:
                    3c:fd:79:fa:3f:4b:75:86:ad:64:72:8a:f4:f7:4b:
                    23:37:86:2d:15:6d:23:a1:21:25:57:7b:49:7a:0e:
                    fc:6e:60:d4:e3:7e:fa:c4:1a:49:b1:2e:f3:f5:2f:
                    6b:91:5c:10:1c:61:64:8c:63:49:9e:4e:81:6a:02:
                    86:46:90:2e:34:84:8d:82:67:59:70:0c:cc:b8:36:
                    5a:43:36:ae:86:fd:14:91:7c:28:e5:c7:87:d4:40:
                    f5:9d:d6:fd:96:0a:df:3f:8a:1f:7b:a7:64:6d:9b:
                    c5:59:97:2c:45:94:b8:3d:35:48:1f:b6:37:bd:8b:
                    06:9a:a7:1a:25:b5:58:53:96:6c:fe:ea:53:c7:ba:
                    56:5f:60:46:c1:c8:52:52:65:55:9f:ae:68:d7:7f:
                    7e:f5:1e:c3:c3:bc:01:e1:34:d3:d9:30:1f:7d:55:
                    24:a1:9c:52:7d:d5:6e:5b:1f:09:65:75:47:de:d0:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:47:07:9D:FF:97:3C:EB:06:EC:D7:8E:50:5E:D3:AF:58:22:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7b3f289a-cc56-3926-a46c-8d8ab9bbd1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9e:81:83:65:9b:a8:92:9e:3f:7f:dd:33:38:50:b0:de:bd:
         bf:a0:86:cf:c4:36:6c:2d:84:be:93:72:dd:4d:76:05:57:aa:
         dd:af:72:33:c8:ac:bc:d4:c1:10:98:da:7c:6a:6d:7c:73:a3:
         44:9e:cb:f9:93:84:6f:80:55:ff:3c:12:e1:53:48:89:8b:57:
         91:36:24:eb:80:a3:16:21:d0:db:ad:1f:f9:fd:5a:67:d2:07:
         e1:75:2b:24:f5:c6:f1:c9:76:59:18:27:99:61:ad:08:3f:ad:
         7d:f6:f8:f9:0a:19:31:27:4e:51:08:8d:ae:2f:5c:3c:c5:f1:
         5b:4e:5e:f8:09:52:97:9d:25:fd:fa:37:69:2a:42:a1:b9:f5:
         ab:b7:68:7b:02:94:67:a7:15:e3:b6:f0:5a:1c:98:4c:09:77:
         6e:7c:4f:95:c9:34:39:f3:8c:32:44:65:4a:46:93:0e:e0:7c:
         c8:17:15:f3:ad:a4:33:60:54:52:e7:35:0e:47:60:1e:b8:0c:
         19:cf:97:eb:c3:5f:e3:40:c2:8f:55:7c:00:4b:7e:6f:9f:c3:
         b4:7d:78:a7:f0:7c:af:f8:95:b5:87:7a:9e:e5:74:5d:13:9f:
         71:98:a4:a9:d9:6a:3a:c7:75:07:14:cb:cf:75:e9:d7:9c:98:
         86:79:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----