Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95f37050-295f-3225-b37b-9603a5ac0724.roa
File:                     95f37050-295f-3225-b37b-9603a5ac0724.roa (raw, json)
Hash identifier:          dzeRb0GLhHVWI5SXN930YYR16EQhxyNIxs9009RNQ5U=
Subject key identifier:   71:4B:D4:4D:79:51:93:46:E5:95:FF:5F:2E:40:AA:0D:2E:DB:24:72
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D54DEBDE07DD42BEBEA3A4B80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95f37050-295f-3225-b37b-9603a5ac0724.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Thu 24 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:54:de:bd:e0:7d:d4:2b:eb:ea:3a:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 24 04:00:00 2022 GMT
        Subject: CN=acc7aa86-252e-4e3d-8111-34b551e304ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:27:fa:54:ae:db:81:a7:5b:58:e0:d5:1b:
                    17:a3:ec:93:41:88:33:77:98:ab:05:17:fb:65:db:
                    a6:14:0b:8a:0d:82:b2:3c:f3:2b:50:9e:34:a8:9e:
                    db:ba:85:b6:1e:d8:08:37:33:88:f8:87:05:d5:d8:
                    fe:9f:21:53:14:53:a0:1b:6e:13:46:a2:12:d2:86:
                    1d:1e:6e:02:63:f5:b5:d7:c2:d0:63:33:44:21:3b:
                    79:c6:8a:b2:2d:cc:20:c1:d3:72:4f:22:c9:c2:b7:
                    d4:19:1a:f7:0b:ff:2c:13:0f:ff:2a:10:8f:48:b7:
                    a5:6e:55:61:f1:80:30:a5:1a:3b:d3:20:05:1e:08:
                    f9:9a:e3:aa:20:60:f7:db:e4:aa:2a:ad:b4:ad:14:
                    37:7c:81:0e:2c:95:8d:f8:c0:1a:ac:3f:ef:1c:bf:
                    63:0a:85:f5:91:fb:28:09:79:20:23:a7:0f:d4:4a:
                    b6:ad:5d:7a:8c:b7:db:57:bc:9a:25:42:d5:8f:a2:
                    33:71:7f:dc:9f:a8:9b:6b:3f:bc:c3:84:c4:92:9d:
                    97:60:7a:b2:8c:2e:9f:c4:7b:38:d1:81:1a:8f:47:
                    8c:aa:cc:97:ce:c5:69:04:ad:83:a7:50:90:1f:72:
                    f7:5c:bd:f0:96:12:4b:e0:64:25:c1:25:ee:1f:2f:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:D4:4D:79:51:93:46:E5:95:FF:5F:2E:40:AA:0D:2E:DB:24:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/95f37050-295f-3225-b37b-9603a5ac0724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:43:fe:96:1b:76:72:69:49:a5:34:94:3f:6c:61:68:a7:a9:
         86:c5:45:45:4d:de:2f:93:b3:a6:c7:5b:5b:84:29:dd:80:ca:
         76:a9:4a:da:94:62:c4:82:c7:0e:fe:66:ab:79:2f:39:81:79:
         b1:35:2c:1c:e3:a0:73:0a:c5:40:59:00:f6:87:e5:53:99:ca:
         7c:3d:ed:8a:16:f6:27:cd:b8:31:9b:25:d5:31:1d:c3:11:e4:
         10:af:55:59:5e:d7:f8:c7:ea:46:d5:0e:82:2b:0c:63:bc:0d:
         9c:df:9b:6f:6d:08:37:b7:03:e6:63:5a:9b:01:b6:42:75:83:
         2d:b8:98:f7:67:05:b3:b4:ad:6c:79:50:8f:bc:18:40:e5:ef:
         6f:9b:05:78:d0:c6:7d:f8:e7:c7:5d:74:6f:13:75:fa:9e:28:
         57:db:0d:7c:59:66:04:e0:4a:16:6c:f5:f4:8d:b6:40:46:f5:
         b5:86:40:82:4b:20:4c:87:1c:7e:a6:0b:4e:bf:11:bb:73:8c:
         e8:f7:07:84:7a:6f:ed:1b:d7:5a:1b:fc:36:ac:07:1d:e9:7d:
         b1:78:31:33:28:e5:51:9c:17:ac:a3:b6:db:7b:f5:d4:06:3a:
         97:fe:7e:ba:c2:21:2f:29:b3:0c:5f:eb:b2:e7:dd:13:72:a0:
         f8:d3:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----