Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9069df6c-47bf-3d01-9710-37f25dc3c653.roa
File:                     9069df6c-47bf-3d01-9710-37f25dc3c653.roa (raw, json)
Hash identifier:          wcS0oR7okjN+93OHCxsdtVODGky1eJpJZOz2IUqnRs8=
Subject key identifier:   7C:A3:58:06:21:1A:E5:76:35:CD:91:48:0C:3C:12:1B:11:03:37:AA
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E8430031C0BF3F7D14D0E3748
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9069df6c-47bf-3d01-9710-37f25dc3c653.roa
Signing time:             Fri 08 Jul 2022 12:00:00 +0000
ROA not before:           Fri 08 Jul 2022 12:00:00 +0000
ROA not after:            Mon 11 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:84:30:03:1c:0b:f3:f7:d1:4d:0e:37:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul  8 12:00:00 2022 GMT
            Not After : Jul 11 04:00:00 2022 GMT
        Subject: CN=fd12b807-63cf-48f7-ab91-12c7b33f6e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:1a:ca:21:11:d7:6a:a5:ce:9c:84:08:49:
                    29:51:7e:cf:2b:fa:e9:1f:1c:73:b9:db:8d:e6:91:
                    8d:14:13:73:86:e1:2c:da:90:c2:91:e2:d3:88:af:
                    eb:8e:9e:82:c2:56:0a:43:cd:60:ea:18:4c:39:3c:
                    9f:9b:ad:cd:74:09:83:2d:1e:69:76:6e:4d:b7:cc:
                    b8:c8:9a:b5:15:f8:ae:f8:e1:66:b6:89:73:92:02:
                    a4:d8:51:b3:08:49:62:2f:ce:e7:7a:28:9f:48:40:
                    64:69:12:56:49:7d:4a:36:1a:90:3f:57:d0:6b:e5:
                    2c:e2:9b:0c:7a:61:74:d5:2c:a7:87:8b:a4:95:33:
                    c8:60:ef:67:1f:2e:7d:bb:95:34:83:9a:0c:56:98:
                    c9:ea:78:54:a8:b3:36:62:f9:32:d6:cf:4c:7c:74:
                    5e:38:db:65:cd:1e:77:f1:bc:f9:6e:5a:dc:ee:e2:
                    90:66:7a:31:98:29:f6:61:83:54:3f:8a:b1:94:0e:
                    3a:b5:4a:c5:47:eb:67:63:16:63:b2:8b:53:a8:b8:
                    b5:7b:47:77:0f:67:7c:e2:1f:83:03:a7:19:1d:eb:
                    49:01:e6:a1:02:6e:ab:03:0c:13:4c:b9:f3:2a:6a:
                    04:19:87:ab:44:5e:8a:41:71:78:2c:99:41:5a:fa:
                    e1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A3:58:06:21:1A:E5:76:35:CD:91:48:0C:3C:12:1B:11:03:37:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9069df6c-47bf-3d01-9710-37f25dc3c653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:74:58:14:27:ea:04:3c:e2:a3:a4:f3:3f:11:94:62:19:e0:
         4e:51:ae:b9:d7:93:79:22:75:1f:27:a1:05:d1:21:c4:90:61:
         5e:3e:87:a0:5e:07:32:78:8d:b1:f0:dc:74:c3:9a:1e:f2:bf:
         91:72:c3:d5:f8:42:92:b1:d0:a0:7b:c0:79:b0:77:b3:2b:de:
         61:6c:3f:65:bf:96:03:08:01:e8:28:35:19:de:3a:cd:32:03:
         22:48:8e:91:ec:50:74:1d:f5:c4:7e:a7:f9:90:41:c4:7f:9b:
         48:90:95:45:f5:60:2f:ef:8d:59:e7:27:39:98:a8:18:58:6f:
         07:6d:d2:06:0c:19:5b:65:1d:42:f6:50:95:42:cb:e6:61:f6:
         17:29:c1:76:31:47:33:df:6d:88:89:29:d0:ad:5c:4f:b0:1d:
         d5:4f:a6:62:9a:08:cb:9c:93:3c:a0:66:88:be:43:75:35:de:
         57:00:fd:b0:75:1b:5d:11:7c:2e:81:16:0a:41:28:72:4d:3d:
         0a:fc:d8:70:5d:f4:a9:2b:ab:4a:5a:d4:7d:1f:73:21:bf:8a:
         ea:73:bc:01:d3:2f:53:03:d0:ec:c5:fc:87:1a:dd:21:b8:86:
         5d:a4:fd:b8:bc:0e:25:58:3e:b4:8e:64:fe:77:ea:37:8f:04:
         13:07:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----