Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95c5002c-7fa5-3322-a9ee-b0bc39519f62.roa
File:                     95c5002c-7fa5-3322-a9ee-b0bc39519f62.roa (raw, json)
Hash identifier:          d8UuWN2kv3WYEKHU0GkyDCslAabESx1KT68zcV8yXAQ=
Subject key identifier:   ED:DC:35:61:C0:FF:63:B5:55:4A:02:5D:18:E6:74:B0:FF:4F:A8:41
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583C03FA31DEBB2F35D089E48B00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95c5002c-7fa5-3322-a9ee-b0bc39519f62.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Sun 25 Feb 2024 05:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:618::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:03:fa:31:de:bb:2f:35:d0:89:e4:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Feb 25 05:00:00 2024 GMT
        Subject: CN=d1eafa70-9d7e-4e9d-b05d-216a56c50315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:9c:52:2f:aa:f7:3c:77:46:8a:0a:b6:b8:
                    cd:84:d6:08:f6:b6:df:2c:73:5d:63:38:45:ff:0b:
                    74:76:d4:ff:b6:70:bb:82:34:12:0e:b5:a5:51:2c:
                    66:fe:47:9d:64:d1:56:04:ad:be:a6:55:59:5a:cb:
                    e2:82:2b:fb:56:09:e4:00:03:56:7b:f9:cf:24:b2:
                    e3:65:96:9c:a7:94:77:0c:3e:af:02:9f:99:b2:0c:
                    db:d7:21:34:73:cc:c4:10:55:c4:d1:67:42:51:2e:
                    c9:14:b6:71:42:37:4b:4a:7d:cf:b3:2b:fd:1d:7c:
                    59:6b:75:ca:df:66:1c:7d:bb:d6:ad:c8:98:5c:ef:
                    b2:52:12:45:d8:5b:40:2b:b6:9a:07:dd:8b:fb:37:
                    97:34:b6:fd:22:32:02:aa:7b:d1:5f:cd:dd:1a:bc:
                    13:dd:69:1c:0b:a4:05:c4:2b:e2:b4:35:40:61:ce:
                    e1:a4:e0:6d:50:a7:d0:54:9b:e0:b9:32:1a:55:0a:
                    1f:ef:77:14:26:58:f4:b1:e7:d0:af:e8:d4:e2:00:
                    63:ee:cc:7e:26:0f:b2:7e:49:17:e9:76:7b:2d:6e:
                    77:df:37:33:f7:28:9c:5f:22:32:ea:1a:70:4d:49:
                    d1:9b:17:fe:b8:a0:c3:84:52:c7:57:34:20:c2:ef:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:35:61:C0:FF:63:B5:55:4A:02:5D:18:E6:74:B0:FF:4F:A8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95c5002c-7fa5-3322-a9ee-b0bc39519f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:618::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:f2:df:ee:bc:44:44:2e:6a:fb:78:ac:68:07:4a:68:d4:e9:
         95:5c:85:0d:6c:e6:0f:5e:6b:60:d2:ea:07:37:13:99:ea:26:
         79:5f:31:84:9c:b3:8b:95:36:05:0f:6d:bc:5d:5c:c2:ce:6a:
         b9:1b:d7:9c:86:dd:b5:94:ac:0e:75:1f:99:15:7b:9e:82:b7:
         61:96:8c:d2:d4:3b:1a:bf:e6:a9:e0:83:e2:5f:10:13:e9:1b:
         08:e7:66:e5:cc:2a:44:0f:eb:d3:0e:00:80:e8:f5:c7:c1:f0:
         07:e5:87:60:9f:35:f0:67:25:a9:11:f5:12:38:ed:5b:70:ba:
         30:1e:80:ae:6e:dc:95:48:aa:79:12:79:35:6b:f2:ad:43:9f:
         9c:ac:2c:2f:ae:fd:cd:61:a2:cd:0b:88:11:7d:1f:1c:05:60:
         ed:e1:92:66:b1:eb:0a:61:11:3e:bd:53:a7:56:ca:e7:1b:e8:
         fd:0a:04:57:88:be:7c:a2:e8:88:0d:a9:11:f2:a7:04:dc:3c:
         a1:84:64:17:ae:78:ae:84:e0:2d:e5:10:2f:22:e7:a7:0f:3c:
         d6:2a:d1:9b:a4:db:bc:52:86:a8:fa:97:3d:dc:da:aa:5c:f9:
         47:7a:6b:bf:68:38:95:b8:9f:0a:5e:e9:8a:18:2c:55:c6:d5:
         18:21:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----