Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc16c072-eaf9-386b-98e8-bf8ec0642396.roa
File:                     bc16c072-eaf9-386b-98e8-bf8ec0642396.roa (raw, json)
Hash identifier:          qMvBC+6AIBlveZx+VcnXtYPZHNA8+i8wjJkwkT4CNWg=
Subject key identifier:   DC:72:0C:DE:27:EF:F5:F2:F0:E4:EA:38:CB:A9:A5:60:A1:36:CF:30
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E1829BAA5A9A7C77800971F00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc16c072-eaf9-386b-98e8-bf8ec0642396.roa
Signing time:             Mon 30 May 2022 12:00:00 +0000
ROA not before:           Mon 30 May 2022 12:00:00 +0000
ROA not after:            Thu 02 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:18:29:ba:a5:a9:a7:c7:78:00:97:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May 30 12:00:00 2022 GMT
            Not After : Jun  2 04:00:00 2022 GMT
        Subject: CN=d3241023-d98f-4ad1-9709-430ec3d15021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:95:66:94:21:c2:dc:3c:12:b0:ee:51:c1:
                    89:8d:be:d8:85:b6:6e:10:fa:a3:d1:70:29:20:25:
                    8e:7b:3c:16:5a:5e:94:d2:62:1e:d2:14:dc:01:56:
                    1d:76:be:bc:36:c1:6a:6d:20:39:7c:a9:9d:22:d6:
                    1c:a7:83:9f:ca:34:82:60:b0:05:10:95:43:10:0d:
                    cf:46:48:c5:95:63:da:b5:29:3a:4f:c6:fd:6f:9c:
                    1c:87:10:dc:aa:8d:cf:7f:36:13:8a:7f:8a:3c:7d:
                    30:cf:4e:eb:5a:e3:48:36:48:4e:17:37:dc:59:a4:
                    e5:51:f5:be:c1:b9:c2:7d:92:21:f8:3a:13:bc:05:
                    6c:47:8b:e7:01:30:be:f9:78:5c:90:fc:fe:15:cf:
                    4b:15:e3:14:24:87:a9:7b:b4:87:fd:c7:af:ae:23:
                    99:b4:9b:91:b7:dd:d1:d3:3c:48:ae:e4:26:eb:f2:
                    1d:f1:7d:c2:d8:c5:32:80:68:d4:91:5f:91:d0:25:
                    2d:b9:3a:00:2f:95:5c:b1:4e:5a:7d:7a:94:15:b0:
                    03:9c:d3:59:a7:30:0d:f3:67:ba:9b:61:c0:fb:07:
                    a7:44:23:6d:16:b8:9e:75:d3:b3:0b:ac:8e:3a:19:
                    db:7a:c2:ad:11:3c:ef:b4:8f:7c:d6:c9:8e:97:36:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:72:0C:DE:27:EF:F5:F2:F0:E4:EA:38:CB:A9:A5:60:A1:36:CF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc16c072-eaf9-386b-98e8-bf8ec0642396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:48:a4:5f:41:9b:6d:91:48:cc:32:bf:88:2d:4c:e5:b5:
         91:38:bc:a5:82:0a:90:c3:a5:0c:e7:91:d0:f7:fe:35:9a:f4:
         20:c3:8b:30:6f:2a:3e:20:36:54:60:2f:7e:d6:26:65:fe:ae:
         5c:e3:a1:16:08:60:8e:fd:a6:78:81:eb:f7:95:37:91:1c:05:
         5f:9e:0a:09:7e:a1:9b:b8:74:02:d5:d0:85:13:2d:b7:ca:97:
         98:10:15:5a:0e:96:8a:db:a6:51:f7:7f:28:d9:45:06:c4:8e:
         8e:de:12:8d:39:17:61:fc:ca:42:a0:9d:b2:30:f4:e9:89:3f:
         fe:05:52:5e:98:ad:14:ce:eb:d6:4e:a5:2c:70:69:11:72:0b:
         77:35:bc:84:8e:29:ce:3a:18:e8:f8:06:de:b7:43:34:b4:23:
         d6:cf:ab:8d:86:5c:1a:28:04:77:07:6b:b0:83:82:18:0b:70:
         1f:19:44:02:8a:60:68:4d:cb:42:a8:d6:b9:b5:65:3e:53:95:
         73:20:c2:54:dc:ff:bd:95:d6:72:8c:8c:60:99:37:b2:00:9d:
         70:45:6a:a0:68:a9:90:63:e5:a2:f2:95:d3:a3:ec:d4:b8:87:
         e2:94:d1:d9:fa:aa:56:28:63:f7:26:3f:85:14:47:b2:1e:e4:
         39:ee:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----