Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b5167c60-25a1-311d-a92c-ec2724818952.roa
File:                     b5167c60-25a1-311d-a92c-ec2724818952.roa (raw, json)
Hash identifier:          CWT45+gOgb+uz3KOngsAge/E4uhBxU0I8vvUaeCTIhg=
Subject key identifier:   96:E9:A1:37:DC:0F:08:1F:B4:FD:77:CB:EC:1C:E1:36:14:35:68:4D
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E0F2FCC146F78FF2DBC791740
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b5167c60-25a1-311d-a92c-ec2724818952.roa
Signing time:             Fri 27 May 2022 12:00:00 +0000
ROA not before:           Fri 27 May 2022 12:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0f:2f:cc:14:6f:78:ff:2d:bc:79:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 27 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=5a9440b2-0e27-406e-a21d-1d0609bcfb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:4d:d6:11:0c:5a:bc:43:ae:bd:6b:5d:de:
                    ea:ba:7a:67:db:0c:55:0d:18:85:c6:54:f4:cf:94:
                    44:b5:11:00:d3:54:f3:d4:57:1d:0f:72:ca:cf:bc:
                    e4:2b:51:2b:e5:7f:57:59:de:1f:2b:df:83:28:d4:
                    fd:3c:ba:9e:4c:56:75:2a:6e:67:33:e1:88:c3:86:
                    64:eb:af:3e:4e:77:19:1b:53:38:37:19:78:f7:c7:
                    f3:04:cb:df:88:b4:e6:0a:f7:a7:aa:59:a2:68:7c:
                    fa:fc:35:14:aa:b1:bb:9c:51:c3:76:c4:c2:64:80:
                    03:64:bc:54:34:40:58:9c:aa:92:b4:9e:8e:46:6f:
                    37:60:52:d6:38:de:b8:e4:15:e2:74:83:87:5e:a0:
                    3d:6c:07:13:60:76:e0:43:b6:de:51:7b:fd:32:a3:
                    2c:dc:59:e2:13:4a:15:88:08:5c:aa:9c:46:58:35:
                    a5:01:94:79:78:25:8f:5d:39:c1:6c:06:a5:a0:a9:
                    ca:f7:c2:e3:b3:56:d3:d0:a0:f4:a0:f8:d3:56:16:
                    34:72:6b:ba:ea:fc:31:fa:ab:d8:35:00:fc:1e:ac:
                    36:08:ea:c3:7b:98:8b:2a:d0:a2:93:2f:e7:d8:e9:
                    94:37:f6:d3:5b:90:ae:2f:ca:86:d2:38:8d:45:fc:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:A1:37:DC:0F:08:1F:B4:FD:77:CB:EC:1C:E1:36:14:35:68:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b5167c60-25a1-311d-a92c-ec2724818952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:f8:d0:42:cd:5d:4e:74:23:90:d5:dc:f0:6e:43:a7:34:95:
         d5:e0:4f:e5:f4:9d:02:12:28:e3:24:aa:24:fc:f8:6f:14:7a:
         64:4d:dd:93:cb:d6:0a:d8:56:2d:36:c4:fe:99:24:a7:56:60:
         2d:b5:7c:9e:20:32:fe:30:da:a9:45:b0:04:86:3e:8d:f5:5a:
         a4:45:63:12:98:f1:46:e4:dd:8e:45:b5:ad:d4:17:e0:7c:96:
         bd:1e:13:3b:2d:df:d2:2b:66:a8:74:a0:c2:4b:da:f1:0c:b2:
         d7:60:e0:53:ab:92:86:85:9e:77:9c:b4:ba:79:12:1a:41:7b:
         ef:64:01:af:80:39:e9:68:6b:df:3a:bf:b2:e0:57:8f:fe:0f:
         bd:3d:e3:30:19:ad:ef:d9:0a:3a:c3:ac:19:49:38:ad:24:d1:
         a5:d0:7b:56:b6:1f:25:43:a4:ca:a6:30:4b:b5:3f:9c:af:45:
         37:df:22:a6:8e:e5:c6:d9:2b:cb:b3:65:0a:5f:d5:c6:7e:46:
         36:1b:5d:b2:02:db:d2:64:58:2d:39:35:7d:ff:10:e5:a9:c0:
         44:c9:d4:7b:da:fe:33:5a:ce:a6:68:79:bd:09:df:1c:5a:05:
         d0:65:bf:ab:37:c4:67:a7:6c:f4:7b:28:5a:eb:12:55:a5:65:
         78:71:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----