Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b4d63be1-ae49-3f2f-892e-adf134a668aa.roa
File:                     b4d63be1-ae49-3f2f-892e-adf134a668aa.roa (raw, json)
Hash identifier:          MUS/af+pjindzQF5NPrKXzsi2Y59QA0m2+IJ6tNERSc=
Subject key identifier:   07:0C:1D:BF:B1:4A:4E:88:EB:A9:E5:33:2A:88:8D:6C:4E:21:0F:D6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D39F107BAD51FAE28CC759B00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b4d63be1-ae49-3f2f-892e-adf134a668aa.roa
Signing time:             Sat 12 Mar 2022 05:00:00 +0000
ROA not before:           Sat 12 Mar 2022 05:00:00 +0000
ROA not after:            Mon 14 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:f1:07:ba:d5:1f:ae:28:cc:75:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 12 05:00:00 2022 GMT
            Not After : Mar 14 04:00:00 2022 GMT
        Subject: CN=52514d02-9985-49c2-93a0-6d9c562d676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:d4:56:b7:b0:4f:68:7e:db:53:c0:7a:fd:
                    a2:d2:81:46:7b:7c:d9:6f:06:dd:b2:b9:f1:1b:3c:
                    1f:65:cc:90:c6:2c:9b:3e:03:c6:b7:f2:ae:d1:1f:
                    99:92:95:ae:17:48:50:04:e0:3b:99:0f:18:07:25:
                    4e:82:a7:e6:77:5c:5c:d1:6a:70:c7:72:e3:45:54:
                    4a:ac:da:f5:44:b4:db:4a:33:11:93:e8:e9:84:d5:
                    4e:40:5d:46:3f:cc:f8:cf:5e:44:30:41:fd:df:ad:
                    0a:65:23:dd:84:ee:95:4b:db:72:39:e3:6b:74:8f:
                    89:b3:cc:a9:bd:ac:72:7a:f1:da:9f:de:ef:ba:23:
                    b7:1d:72:f7:51:57:43:65:ef:91:0e:4c:fd:24:f3:
                    c0:46:0c:70:3a:c8:29:a8:2e:d9:58:31:9c:bd:f3:
                    07:08:0c:5e:79:9a:72:c6:e6:1e:2c:16:e8:3f:58:
                    a3:a9:59:f8:93:60:d6:1f:d2:20:b8:cc:dd:38:00:
                    00:f7:20:4f:af:14:f5:67:0d:b9:1d:7f:81:0e:20:
                    59:69:2c:09:9c:37:5b:cd:ef:2d:79:38:2f:59:55:
                    68:e2:41:4e:3c:e7:b0:26:4b:54:91:5f:23:71:9d:
                    0e:b4:51:0d:95:f7:52:84:16:74:2e:2b:38:15:52:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:1D:BF:B1:4A:4E:88:EB:A9:E5:33:2A:88:8D:6C:4E:21:0F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b4d63be1-ae49-3f2f-892e-adf134a668aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:fb:76:b5:52:8d:f0:e7:7b:b9:1b:94:25:3f:4f:af:4d:
         d5:cb:c3:c8:fb:3c:57:ee:24:1d:e7:6b:4e:73:02:34:34:a3:
         89:ac:89:b8:68:75:54:87:60:24:72:52:4a:8b:27:d0:0a:1d:
         ad:55:46:49:bc:90:f5:e3:99:1f:f4:b9:d7:63:04:09:6f:f8:
         e3:46:2e:9e:dd:2b:af:aa:22:5a:b9:bb:ef:c3:69:b7:40:c4:
         08:28:51:a0:7c:b5:87:04:15:53:93:81:3c:8e:e6:73:04:93:
         65:ef:c9:b1:82:6f:14:41:fb:be:4d:b3:3d:dd:7b:86:37:27:
         19:eb:04:a3:67:36:84:3b:b2:1f:ba:89:aa:79:3a:c4:d2:19:
         57:23:c5:50:4a:85:1d:a3:de:7c:07:60:2f:ad:cb:69:8c:a4:
         98:b2:78:fb:a7:f0:31:2f:c8:1d:20:ef:70:cd:02:ff:93:1e:
         f5:9b:07:61:a9:30:47:e2:3d:9c:90:1e:ec:ff:80:1a:b1:3b:
         fc:b7:c1:24:6f:a9:04:9c:10:fc:8e:db:16:aa:89:c3:a0:f7:
         18:2d:52:00:be:13:aa:1c:ac:f0:56:96:b4:e2:b2:d3:28:35:
         06:ae:ec:fe:71:08:25:60:19:5b:78:a3:12:94:c0:ea:d4:be:
         6d:9b:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----