Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aebbf34b-4289-31f3-8365-9c330e1c9a38.roa
File:                     aebbf34b-4289-31f3-8365-9c330e1c9a38.roa (raw, json)
Hash identifier:          HrhJs6xF6k7AZ8s5nn34qQZeTcmzonZNrxx+4BJuhyU=
Subject key identifier:   0F:F1:B3:D8:3E:43:AB:C1:58:FF:D9:07:72:05:F4:0A:55:BC:82:48
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D1ADEFFBB3B44F6A5A7320140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aebbf34b-4289-31f3-8365-9c330e1c9a38.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Thu 03 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1a:de:ff:bb:3b:44:f6:a5:a7:32:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Mar  3 05:00:00 2022 GMT
        Subject: CN=c247a20e-ed95-4248-a030-4aea8a802f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:93:90:5f:e2:87:51:0a:65:d3:68:b4:c1:
                    e8:05:d8:07:05:52:b5:8f:23:28:df:d8:5c:e7:11:
                    83:42:02:f4:a8:43:03:e3:6f:82:d1:83:86:d6:87:
                    f4:ce:fd:69:0f:84:97:00:fd:ef:5a:0d:31:63:e7:
                    28:b8:38:ca:dd:2e:ff:7a:31:43:39:c7:c9:d3:3d:
                    f7:74:c7:1e:0a:b2:6b:f2:8f:06:ed:a9:cc:17:77:
                    90:c5:a9:21:50:4e:71:64:65:08:60:4e:8e:05:aa:
                    b6:10:39:71:13:dd:bd:63:d4:5e:3f:b4:55:9e:3c:
                    82:06:da:3b:d6:c6:9b:ce:eb:15:e8:dd:26:9c:4f:
                    99:80:d7:bf:9c:a1:41:e9:b9:8d:87:11:5c:e3:f6:
                    94:52:68:bf:24:19:87:28:73:c7:d1:db:4f:63:39:
                    5e:05:79:e4:be:fd:c4:c6:3b:db:81:a0:00:1e:aa:
                    22:f9:65:b2:15:13:a9:b7:4d:23:02:64:d8:d8:cb:
                    c1:63:6a:9e:3d:8e:47:7e:ff:93:d0:10:7b:e5:06:
                    dd:6b:42:09:92:ff:5f:4c:4c:1e:5d:21:86:8f:ca:
                    a6:1f:93:68:c5:25:f6:cf:96:e6:e3:ed:e6:63:7b:
                    88:17:4f:e1:2e:64:bd:f2:82:6e:41:6a:d0:f3:54:
                    d1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F1:B3:D8:3E:43:AB:C1:58:FF:D9:07:72:05:F4:0A:55:BC:82:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aebbf34b-4289-31f3-8365-9c330e1c9a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:3d:55:a8:18:23:b4:9b:02:f6:15:02:84:29:8b:0d:ff:72:
         5b:59:75:f9:18:fd:a5:8a:5e:a5:0e:20:3e:3b:7f:0f:75:f0:
         45:17:c4:60:85:42:e9:df:8f:5c:cb:3f:24:4b:10:c4:52:ba:
         44:da:38:ac:09:3e:10:e2:1c:b7:0c:83:f3:c1:17:c7:e6:9e:
         c3:2e:ca:3b:24:11:fa:0f:ee:5c:cd:4f:33:9b:10:6e:8f:c4:
         39:c1:7b:df:fe:4f:86:0b:2f:5b:fe:ca:31:22:4e:ad:fe:71:
         05:aa:bc:0a:1d:47:46:29:26:1e:39:a0:66:bf:e2:07:5c:91:
         28:a8:5d:31:0d:a9:66:ac:1d:e8:09:af:6b:e7:59:fa:3c:7e:
         41:ad:cf:e7:2f:a7:7e:81:2f:24:50:57:1f:73:1c:77:54:76:
         6b:41:de:41:94:da:e9:76:5f:ca:fb:2f:8b:a5:ed:ad:e1:ae:
         8c:10:08:e2:09:43:3f:0b:59:ab:f8:d3:2f:64:fe:23:09:87:
         95:82:6d:b3:03:8a:b3:bc:0b:0a:e5:4a:d9:6f:c3:20:f9:69:
         9b:a5:84:e3:9d:2f:93:db:c0:ef:5b:33:fd:18:76:87:28:65:
         ed:d2:7b:74:1c:5c:29:ad:ea:a1:78:93:fe:64:41:f7:18:db:
         a8:23:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----