Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c4b36d1-c5c6-317b-b5dd-8d5dd9c39f2d.roa
File:                     7c4b36d1-c5c6-317b-b5dd-8d5dd9c39f2d.roa (raw, json)
Hash identifier:          vd5Mxxbwu/d7FGHvVPsJ9QnpEENjfU+Nz303o9iDgrk=
Subject key identifier:   89:00:AE:C2:CD:CF:FA:69:07:3D:A4:6E:DC:D2:D0:38:B5:E4:A7:96
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DC1BEBD67E89D629617302C00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c4b36d1-c5c6-317b-b5dd-8d5dd9c39f2d.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Mon 02 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c1:be:bd:67:e8:9d:62:96:17:30:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2022 GMT
        Subject: CN=516b354c-6e2e-4e64-ac24-46a04c44ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:d8:9a:ee:52:6c:08:0b:aa:3b:09:cc:c3:
                    28:0e:7d:46:1e:f4:ec:44:f2:11:4d:e3:e6:9a:ee:
                    6a:d2:3f:dd:7d:d1:ae:06:be:3b:06:3b:31:30:37:
                    13:da:8e:e8:36:38:b5:d9:a7:ef:aa:ea:60:cd:28:
                    17:9d:60:6a:04:c0:f1:bd:70:29:9e:ad:42:bb:62:
                    17:7e:61:22:e8:12:28:4c:cf:ec:27:2e:4d:2f:85:
                    f2:65:d4:b5:a8:35:59:a8:d4:96:e9:ac:a5:d9:84:
                    e5:28:7b:7b:6c:6a:09:87:98:06:f5:9b:bd:ae:f8:
                    2d:91:ba:8f:17:be:71:dd:1f:0d:cb:a8:b8:8c:01:
                    79:83:61:92:c9:74:b3:82:a5:f9:4d:90:4d:57:bb:
                    14:8b:cc:41:54:15:70:66:9c:c9:79:a7:c5:0c:04:
                    90:7f:f9:eb:a9:38:02:ce:f3:0a:c0:2b:3c:13:ab:
                    94:73:f5:7e:d7:ec:f7:c3:bb:69:d3:19:ad:a5:02:
                    78:e2:64:9d:c8:9c:6a:7b:1d:ac:1c:5f:00:e3:78:
                    b6:0e:ee:21:17:a4:3f:de:59:4f:09:9c:8a:d4:22:
                    9f:10:e3:d5:99:65:8f:44:99:cc:6f:19:c4:21:c6:
                    cc:ff:70:eb:41:82:c2:5c:b3:64:83:14:7d:a4:a6:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:AE:C2:CD:CF:FA:69:07:3D:A4:6E:DC:D2:D0:38:B5:E4:A7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7c4b36d1-c5c6-317b-b5dd-8d5dd9c39f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:69:29:21:49:db:d8:0a:16:74:cd:6c:ba:37:cc:39:36:
         f3:93:f8:85:bd:17:63:60:ae:4a:01:e7:51:a4:b0:b3:07:de:
         f9:52:99:67:2e:60:e3:ae:a4:55:08:f8:ad:dc:f9:23:aa:dd:
         b7:7e:9f:67:fc:7e:f8:fd:b5:5f:98:e4:23:74:fa:0e:cf:31:
         da:ea:70:66:06:b4:e5:00:96:55:19:55:f9:5e:98:34:36:d0:
         d1:48:9b:bf:d1:16:54:66:7f:c6:b6:0e:66:ba:7b:3a:7c:4f:
         3a:38:47:7c:a4:03:14:b5:ec:8e:35:59:73:0b:65:c3:12:34:
         cb:35:61:c0:68:e4:12:1a:7d:0e:95:cb:83:49:6f:c0:f6:e9:
         e4:27:73:bf:80:6e:1b:82:27:bd:02:98:fe:eb:ea:6d:6b:ea:
         d4:25:3c:9e:2d:28:34:a5:72:32:a2:e6:f5:b3:22:dc:4e:24:
         9c:9d:13:89:36:a0:e4:44:d0:73:6f:dd:7f:22:52:e2:55:76:
         c9:2a:07:27:3e:af:dc:4d:fb:a0:6c:e4:2c:75:35:85:9a:fa:
         29:26:47:9c:3c:a2:5a:ec:7c:db:1c:94:75:74:ea:3c:d0:12:
         4f:de:58:35:7c:52:ea:a2:b0:91:51:6f:88:03:4f:4a:f6:dc:
         dd:0f:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----