Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/825fda34-258a-37a1-8527-8de8eb955564.roa
File:                     825fda34-258a-37a1-8527-8de8eb955564.roa (raw, json)
Hash identifier:          pXTJHbS+0hP5xrGF+P1qPQ0uGtK1wcoIi3j4tTTDp4E=
Subject key identifier:   C7:2B:20:33:DA:09:4C:CB:C4:19:4E:E2:60:1A:02:78:8F:A8:57:C2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D261457785773E795F6770100
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/825fda34-258a-37a1-8527-8de8eb955564.roa
Signing time:             Sat 05 Mar 2022 05:00:00 +0000
ROA not before:           Sat 05 Mar 2022 05:00:00 +0000
ROA not after:            Mon 07 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:26:14:57:78:57:73:e7:95:f6:77:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  5 05:00:00 2022 GMT
            Not After : Mar  7 05:00:00 2022 GMT
        Subject: CN=b5f6dae2-0b80-4aa8-b4a1-9c6d136f32b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:98:c0:9d:89:8c:c0:99:ad:8c:4f:5e:43:
                    25:fa:c6:46:97:c3:bd:e1:2b:97:6c:60:f2:79:fd:
                    17:8f:24:b7:4c:e6:54:cb:21:cb:d9:c4:0a:b8:14:
                    28:00:79:2f:98:35:e8:d0:7c:bc:98:04:01:70:f5:
                    e3:60:fd:1c:62:a5:18:2f:cb:a2:28:bd:06:07:ee:
                    39:9b:ec:c8:11:b9:9e:2e:21:05:5a:f5:70:78:be:
                    75:98:41:ab:1b:a7:43:57:de:80:35:9e:19:ba:f3:
                    dc:b7:9e:ac:27:e6:9f:bb:6e:e7:21:b6:a1:e5:26:
                    be:c0:af:0a:8d:7c:97:3a:6b:f3:a0:48:31:60:79:
                    86:fb:58:5d:61:07:dc:a9:13:af:a4:aa:cf:8d:bb:
                    81:7d:df:5e:2e:9d:40:63:c0:b9:8b:ce:8e:90:3c:
                    94:79:7f:6e:20:11:81:d1:73:95:76:66:d6:5a:e7:
                    1e:6e:b1:95:1b:92:e8:9a:df:db:47:5d:ce:c6:23:
                    59:7f:04:af:e0:f9:c4:d4:7a:79:4c:6b:ef:90:cf:
                    08:bd:de:cf:25:fd:fc:36:0c:19:49:df:3c:b3:37:
                    17:e0:1f:ac:09:fd:98:93:19:d1:8c:3d:82:6b:d4:
                    e3:be:14:d6:6c:bb:08:35:a8:b0:42:b4:25:70:47:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2B:20:33:DA:09:4C:CB:C4:19:4E:E2:60:1A:02:78:8F:A8:57:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/825fda34-258a-37a1-8527-8de8eb955564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:b2:da:7e:14:38:46:6d:d7:b0:12:bd:9b:68:b6:42:65:
         25:22:b3:59:18:51:db:d0:93:dd:0f:ba:b5:a5:e1:77:02:55:
         98:d3:4f:3e:09:b3:1b:c1:cc:b8:2a:68:d7:b8:23:5e:8e:0f:
         39:d0:86:dc:a4:7b:13:23:e1:a0:2c:ce:a4:14:3a:d2:59:d0:
         86:c4:c7:52:4e:70:b1:7c:fe:2a:c7:bc:be:a1:f6:34:b3:90:
         c3:3f:9a:4c:4f:1a:7a:6d:30:e4:69:4e:48:df:60:64:ba:46:
         e7:e4:60:de:49:00:3b:06:c3:3e:f4:27:bc:c7:4d:48:93:1f:
         74:f1:0c:c4:60:52:a5:f3:f8:14:5a:be:2d:87:9f:f3:6d:2b:
         43:b5:df:5d:0f:98:6a:83:80:f5:b2:f7:b8:e3:3d:7b:d3:f2:
         4f:52:38:a5:64:4b:20:8b:2c:99:bb:9d:09:06:91:7c:bc:6b:
         5e:33:64:0c:85:7c:e7:9b:8a:54:40:57:e1:db:5e:52:5c:b7:
         c2:54:96:38:d6:b1:1f:ae:30:1a:d7:53:21:cf:96:87:4d:a7:
         0c:0d:76:af:9c:4e:38:50:55:83:55:f8:c7:02:1e:f6:e3:fc:
         12:40:36:b6:0d:c8:c2:22:af:65:d2:0f:b3:93:fd:e7:b0:0b:
         b4:ee:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----