Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/afa7a6d5-337c-3c25-9170-c3800d89a0dd.roa
File:                     afa7a6d5-337c-3c25-9170-c3800d89a0dd.roa (raw, json)
Hash identifier:          espADD+tLAS/ZOik+BBGiX1arI/kR3VoOwGSkL6bKHY=
Subject key identifier:   4C:F2:D4:41:6F:3F:70:44:04:75:F0:00:2C:2F:92:63:18:70:77:76
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583859DB0696EA4BB4E482773C00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/afa7a6d5-337c-3c25-9170-c3800d89a0dd.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Sun 26 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        2605:9cc0:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:59:db:06:96:ea:4b:b4:e4:82:77:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Mar 26 04:00:00 2023 GMT
        Subject: CN=13f2894f-bf8b-4023-ae67-84ef6ec62b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:62:9a:2e:40:e6:76:f7:e8:bf:94:a9:7a:
                    66:c8:52:43:a2:bb:86:61:56:d8:ac:21:e2:92:12:
                    95:a4:a6:ce:95:bd:9a:5e:7d:73:f5:15:d0:6c:51:
                    ad:35:d0:ad:7e:46:ae:85:56:71:24:98:37:11:97:
                    47:81:7e:dd:35:c2:b4:5c:36:bb:04:1b:a1:fe:12:
                    da:8e:9a:3c:40:4c:3f:a0:39:79:f1:00:1d:d7:44:
                    dc:28:8b:9a:d5:6d:6b:46:20:12:55:be:1d:ea:9b:
                    2d:bc:6b:18:ba:b9:00:0b:b2:53:54:0e:df:4a:b4:
                    24:7d:f1:42:62:52:0d:45:d3:fb:92:c1:c4:0c:ab:
                    de:26:35:c8:e6:c8:9d:40:f6:26:8d:9e:1e:18:ef:
                    02:37:77:83:5c:2d:a4:9d:25:71:6f:cb:80:03:8e:
                    09:03:1b:fd:62:78:07:89:b3:4d:be:5a:01:be:18:
                    ff:26:4c:a6:88:7c:ea:55:38:64:a4:74:f4:26:16:
                    96:c9:5e:31:d8:fd:ed:e3:8a:ea:bf:6b:08:5b:5e:
                    cd:cd:94:c2:da:2e:42:4c:15:9e:6c:19:16:c7:61:
                    77:7a:db:6a:26:8e:1e:34:c5:af:0c:b1:8c:e3:a6:
                    95:f0:bb:3e:12:3e:23:dc:47:39:00:e0:74:15:0d:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:D4:41:6F:3F:70:44:04:75:F0:00:2C:2F:92:63:18:70:77:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/afa7a6d5-337c-3c25-9170-c3800d89a0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:22:74:35:42:46:9e:59:33:6d:7b:6a:25:16:a6:56:5d:
         37:2b:f0:c1:26:dc:b9:28:54:32:ce:ce:ff:de:7d:b0:86:16:
         28:b7:fc:cd:81:03:c3:d2:45:90:7c:28:4c:48:a1:f0:df:5d:
         83:5a:f4:ff:62:d4:99:db:3f:51:7a:ea:d1:b4:01:06:dc:e9:
         b5:70:55:66:ef:a4:62:58:fe:4f:db:5b:84:2a:dd:02:5f:87:
         1e:38:d9:f2:6d:d2:f8:e1:7f:fb:18:0c:cc:56:58:e7:95:63:
         ea:0a:eb:da:a7:83:6d:76:4d:e2:bc:aa:f9:65:8b:eb:99:39:
         da:6c:27:c6:38:66:fb:4b:70:25:f3:66:35:fa:f1:95:c9:93:
         19:9c:67:6b:38:d4:a4:fa:bc:d2:f2:e4:8e:bc:7f:4a:3e:19:
         30:39:e0:ef:c2:93:d2:3c:cf:c5:c4:73:18:bf:e9:0a:c3:cc:
         a3:70:b8:5c:b6:c3:bd:61:c8:e0:0d:58:c7:61:66:7b:fe:36:
         90:9c:4f:19:4e:65:92:b8:83:1c:4a:fb:34:89:ae:65:35:ad:
         89:50:ce:3e:05:72:02:f4:ea:95:90:e0:be:09:ee:35:51:e5:
         ce:fc:33:f2:39:76:b3:89:16:fb:d3:ae:8a:32:96:68:e4:4d:
         9e:27:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----