Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b88b88c4-939a-3da9-953f-8d08e133adc2.roa
File:                     b88b88c4-939a-3da9-953f-8d08e133adc2.roa (raw, json)
Hash identifier:          V2TusiEUMoK6e5PXSiUhfj+MPT5bc+yNKOrHPZkeM+k=
Subject key identifier:   8D:89:E9:9D:63:A4:A0:46:F9:47:32:21:A4:70:1F:F5:4F:1A:47:70
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DEE38B223CE26B1B3BC0F7400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b88b88c4-939a-3da9-953f-8d08e133adc2.roa
Signing time:             Sun 15 May 2022 12:00:00 +0000
ROA not before:           Sun 15 May 2022 12:00:00 +0000
ROA not after:            Wed 18 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ee:38:b2:23:ce:26:b1:b3:bc:0f:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 15 12:00:00 2022 GMT
            Not After : May 18 04:00:00 2022 GMT
        Subject: CN=04c14581-6236-4234-9659-5203260a2e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:a3:db:7a:95:97:3d:26:75:1b:80:ae:0f:
                    a3:a7:e5:6d:9b:0b:a7:1d:26:f5:aa:24:00:35:bc:
                    9a:2d:b9:fc:b9:fe:c5:c7:9e:ec:34:d4:ed:ba:f7:
                    c4:b8:87:e5:46:02:7d:92:eb:79:6f:c9:d1:08:08:
                    ae:16:12:8e:dc:3f:46:73:7c:26:52:6b:79:27:a7:
                    19:da:1e:21:43:73:08:d5:61:98:51:06:ae:77:d6:
                    90:cb:2b:d6:91:36:d9:50:a9:28:99:e4:8b:e8:ad:
                    da:50:89:24:d9:7d:f9:d1:51:2d:f2:23:0c:d6:09:
                    5f:93:e2:04:9a:a3:18:b5:ca:5c:14:e7:6f:55:53:
                    36:13:26:97:6b:e7:0b:f0:35:2f:c4:22:fc:08:1b:
                    8d:2b:7a:1b:2e:ff:2d:59:8b:1e:dc:9b:23:a6:73:
                    f9:25:41:2c:99:a2:19:1e:70:33:e8:a6:d6:e7:49:
                    b5:ee:f9:38:fb:ab:b0:88:ec:df:ee:6d:3f:7c:05:
                    06:19:2e:ae:51:ff:55:f9:38:16:c3:ea:03:59:0a:
                    07:80:36:9a:6d:a8:8d:15:ce:4e:30:b4:6f:aa:e2:
                    ce:6d:98:df:b7:00:a3:70:5b:29:c1:e1:2c:93:19:
                    69:28:f9:37:28:ac:a3:3c:f1:ea:a3:cd:9f:46:24:
                    9b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:E9:9D:63:A4:A0:46:F9:47:32:21:A4:70:1F:F5:4F:1A:47:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b88b88c4-939a-3da9-953f-8d08e133adc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ef:65:2e:f6:54:ee:c5:03:dc:77:af:25:a0:4d:3a:b9:53:
         d4:d3:5c:62:06:0a:5b:63:c5:d2:a9:56:9b:a8:67:63:20:dc:
         60:8c:6a:b7:0c:8a:b6:a1:51:df:ed:a5:7f:3c:22:30:e6:8b:
         e0:63:8e:ce:d5:6d:08:b3:41:64:c1:82:99:b6:23:5c:55:25:
         fd:44:f5:ec:53:27:1a:2a:dd:78:cf:7e:84:eb:28:7c:e7:78:
         7b:56:4d:cc:ff:6d:9b:dd:6f:64:0d:32:60:f2:39:13:e5:e6:
         09:93:f9:8b:44:6f:e4:67:5d:53:e2:b0:dd:21:07:73:89:0c:
         38:ab:e9:be:e3:82:d6:3d:7e:2c:15:d4:a7:2a:0a:44:77:53:
         97:e8:d6:a5:97:75:3e:5c:0e:12:bf:18:6a:5f:5b:91:07:5e:
         91:d2:2a:22:54:5d:06:09:23:76:82:9b:61:2c:be:1c:56:fa:
         9b:d7:18:8b:f3:90:3b:fe:d0:ae:3c:a4:91:e9:e6:fc:d9:5a:
         7e:9d:5b:e1:9c:97:8c:3c:55:49:ef:4b:cf:d9:44:1a:d4:2a:
         80:61:60:40:b5:61:76:07:e2:7d:3b:b3:dd:77:bf:ca:15:b7:
         e6:60:ea:46:84:09:07:43:b2:a9:dc:af:09:45:0d:f2:91:a6:
         2b:3d:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----