Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9a398945-6864-3a4e-b27b-0786dfe5b957.roa
File:                     9a398945-6864-3a4e-b27b-0786dfe5b957.roa (raw, json)
Hash identifier:          gYgf7Ivrgg+y17Ijh6j2e8Zsf1lsYWxd7vBhkZdi2X0=
Subject key identifier:   A5:8F:62:92:37:35:E5:73:54:B4:A1:D0:CE:21:1C:81:74:9D:A7:47
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583ABAF05DBF9A36D90C454C6F00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9a398945-6864-3a4e-b27b-0786dfe5b957.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Mon 30 Oct 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:2110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:ba:f0:5d:bf:9a:36:d9:0c:45:4c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Oct 30 04:00:00 2023 GMT
        Subject: CN=1cf071f2-07b5-4e6a-bd05-c26bd47e569e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:af:ff:97:e0:72:e5:17:14:92:69:b9:4f:b0:
                    21:1c:4a:cf:a8:c5:80:9b:f7:92:ba:59:dc:1e:af:
                    e6:9d:17:74:81:dd:31:92:2c:eb:db:e7:6b:13:3e:
                    9d:f9:85:61:e5:3c:5f:50:a2:18:f4:94:72:65:1a:
                    9d:cf:52:6c:81:2e:db:ab:57:53:af:e3:b8:2f:3a:
                    d9:b7:97:1b:11:54:fa:35:32:93:21:f4:bb:d1:16:
                    af:f4:08:20:8b:48:55:8f:a5:02:99:6c:b1:8f:92:
                    a6:5b:68:4c:9f:65:47:3e:08:fc:c9:d0:21:ce:02:
                    bb:7e:c9:86:7c:76:3c:88:2e:ee:66:95:05:51:f2:
                    52:31:91:e7:dc:f0:ae:ca:60:fe:94:c9:ea:9d:80:
                    27:17:ee:76:cb:cb:92:55:da:14:56:a5:f2:a1:a5:
                    e3:ad:9b:c4:2f:22:05:42:f8:f1:95:df:2f:40:66:
                    b0:f4:a9:f6:ad:d2:dc:4c:88:43:3b:8a:5f:a2:b1:
                    29:e4:fb:8c:03:0a:42:4a:c0:38:85:c4:67:24:6b:
                    49:a6:74:b4:3e:8a:11:7d:d7:7a:24:f1:f3:d9:1e:
                    95:51:51:9e:9f:c1:0c:ba:6d:7e:c7:b7:c0:e8:ba:
                    d0:6b:4f:e0:77:bd:81:0f:83:d0:27:b7:6f:6d:a8:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:62:92:37:35:E5:73:54:B4:A1:D0:CE:21:1C:81:74:9D:A7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9a398945-6864-3a4e-b27b-0786dfe5b957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e7:92:ec:77:55:e6:55:73:72:43:61:a4:94:bb:c8:1b:9b:
         94:11:b8:89:46:2a:75:38:40:42:04:34:c8:8f:e7:d8:fd:6a:
         a3:fa:e8:bf:d0:a0:b9:ac:34:6b:ec:c2:da:36:91:7a:d0:b8:
         8a:34:84:ca:c4:a8:0f:97:6c:88:d1:17:fd:fc:92:3d:17:5a:
         42:c6:30:3b:7e:ee:18:d6:7d:32:19:62:31:26:d6:96:50:38:
         d2:bc:ab:eb:97:86:88:37:2a:9a:28:82:67:d1:62:32:08:ac:
         b0:b6:6a:bf:f8:c0:db:76:de:02:9d:69:bd:57:d5:36:f4:24:
         81:61:55:fa:b6:75:34:7a:bd:49:5e:5b:d3:f5:b5:8e:50:0c:
         29:c8:3b:f4:de:00:9c:34:96:de:98:a0:01:58:bf:aa:25:06:
         e8:b3:2f:02:02:70:9d:07:9f:28:b0:fa:7d:6f:06:40:6d:1e:
         4a:65:55:bc:fb:26:99:cb:6a:6a:4e:8a:8a:89:34:61:fb:94:
         77:6f:55:c0:82:e5:3a:10:bb:47:36:df:08:16:a1:dd:62:52:
         03:37:b8:80:7e:20:dd:42:56:d3:e7:98:70:9c:9f:71:d8:9b:
         36:c9:57:a7:ef:4d:fc:24:85:8c:ba:71:86:04:63:ab:52:72:
         4d:b4:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----