Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a7b963c2-6e34-3891-9c93-e3b7e420a0ba.roa
File:                     a7b963c2-6e34-3891-9c93-e3b7e420a0ba.roa (raw, json)
Hash identifier:          KQXm79mNc42tjrO7Vx98Lnki3KB0z9187CsjDAa183s=
Subject key identifier:   8B:89:29:F1:F4:44:C3:AA:67:5A:32:78:B7:8C:7E:4B:6F:2E:C3:C4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E0FF3D80A350F3CCD58C95180
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a7b963c2-6e34-3891-9c93-e3b7e420a0ba.roa
Signing time:             Fri 27 May 2022 12:00:00 +0000
ROA not before:           Fri 27 May 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0f:f3:d8:0a:35:0f:3c:cd:58:c9:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 27 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=a0ace636-a8a6-4fdc-9d1b-7b3d4e6748b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:0f:4f:9e:1e:f8:92:4e:ea:be:f2:2e:25:
                    d6:46:39:db:a6:98:79:6f:d6:8c:50:f6:fe:14:bd:
                    e0:33:2a:58:ab:09:42:2b:bb:2b:65:19:0e:d9:2f:
                    58:da:24:b9:ae:bb:75:5e:8d:c4:8d:40:f0:ae:ac:
                    6e:9a:8a:e6:a9:7f:ee:3d:5d:39:33:08:1a:48:62:
                    bb:50:ac:0c:0a:90:5d:24:15:f4:38:1c:5d:d8:6e:
                    d7:72:db:10:e2:62:4d:5e:36:9e:72:95:fe:a2:f2:
                    21:90:15:b1:9c:35:9d:3c:18:c7:c9:6c:7e:fb:83:
                    c7:ad:11:11:94:ac:be:58:c0:f2:30:97:0a:99:bd:
                    d8:1b:e0:6c:50:58:73:d6:7b:53:41:df:bd:a9:2b:
                    99:f4:40:78:04:d4:2f:47:ba:8a:ab:d7:ea:c6:c9:
                    31:5b:24:f6:c9:3a:e3:a1:b1:0b:dc:53:7b:ed:5c:
                    e9:9d:9c:4b:45:0d:37:8b:89:6a:97:16:15:61:2a:
                    83:26:f9:86:05:49:5e:e5:ee:80:34:a4:db:eb:c6:
                    c3:22:26:b1:66:5f:2f:7d:a9:a6:55:5c:ef:af:b6:
                    91:ca:16:eb:9d:0a:4c:25:9a:e7:af:cc:b5:94:40:
                    26:27:90:4d:1c:91:c2:09:f9:08:f3:1f:1c:f2:f0:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:29:F1:F4:44:C3:AA:67:5A:32:78:B7:8C:7E:4B:6F:2E:C3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a7b963c2-6e34-3891-9c93-e3b7e420a0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:f9:62:5e:e4:f4:6d:c3:79:84:6b:56:96:1a:04:dc:3e:
         54:44:a3:0f:6c:cd:af:80:a1:06:64:35:db:09:d6:d9:1e:55:
         9a:cd:10:ae:93:b5:3a:97:9c:f7:92:aa:9f:5b:bd:3d:8e:df:
         bb:dc:c4:a7:00:b1:e6:a6:9d:99:60:50:b9:e5:88:bc:9a:4f:
         00:5e:5d:f4:f1:29:b8:98:88:32:47:17:6d:cc:8a:40:6c:ef:
         8a:15:74:52:2a:3e:aa:97:1e:b3:2c:a1:4b:d2:0c:38:c6:d1:
         26:e5:35:a7:eb:fd:de:2e:14:ec:7c:5e:68:c8:96:98:b5:e2:
         87:b3:e0:3c:13:22:f5:b8:b3:ae:02:67:56:6e:ef:64:82:e3:
         85:ba:6b:fd:a7:c4:fd:14:f2:69:e3:ca:a1:be:43:be:83:18:
         3e:05:5e:e4:3d:3d:e1:a1:45:17:88:5c:63:80:97:64:bb:d0:
         3b:e2:fb:88:a1:14:c2:ec:7c:fc:aa:2b:69:eb:0e:b7:cc:d1:
         f0:eb:79:4d:ff:2f:b1:00:49:58:13:9b:cc:aa:85:d5:4a:ce:
         b0:78:82:02:8d:06:d2:21:ef:88:82:a5:6e:94:d3:6b:ac:3a:
         bf:f1:a4:1e:49:97:1f:b7:4f:39:98:78:3a:d2:91:42:7c:f2:
         9b:98:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----