Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc2e27d8-fbd1-3c1d-b68d-a7efec9bca39.roa
File:                     bc2e27d8-fbd1-3c1d-b68d-a7efec9bca39.roa (raw, json)
Hash identifier:          ymqb/U2qsz+v8RMwT24Hi9WRlxdiFWSBGPtWaAHLZF4=
Subject key identifier:   AD:9F:0A:25:C4:27:53:EC:4B:21:76:29:1B:22:2D:56:DA:C9:6E:AD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D2ABB7EB814F410150005FFC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc2e27d8-fbd1-3c1d-b68d-a7efec9bca39.roa
Signing time:             Mon 07 Mar 2022 05:00:00 +0000
ROA not before:           Mon 07 Mar 2022 05:00:00 +0000
ROA not after:            Wed 09 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2a:bb:7e:b8:14:f4:10:15:00:05:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  7 05:00:00 2022 GMT
            Not After : Mar  9 05:00:00 2022 GMT
        Subject: CN=ca2e7a7a-4b07-4da2-8796-53c7b7502689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:62:17:c5:52:c3:1f:22:56:16:4c:de:20:
                    57:ce:d7:d9:8b:cb:d2:a7:84:59:e3:33:1b:d6:03:
                    fe:76:ab:35:bb:11:9d:9a:ab:6b:a5:8c:05:d0:f8:
                    9f:ed:9f:10:a5:77:75:59:2c:54:32:fb:55:2c:b2:
                    74:2d:b2:fc:d0:02:74:42:fd:b2:ff:cc:39:46:52:
                    97:e5:16:73:ee:27:81:00:aa:b9:48:90:df:2a:36:
                    e3:7d:d7:a3:b3:db:d8:5f:d4:fd:46:aa:60:a5:d6:
                    36:b4:a6:00:bd:b2:c5:1a:f1:3b:d2:05:db:90:a0:
                    69:04:26:6a:a1:c6:3f:19:e7:03:8c:56:fb:1b:0c:
                    8f:1c:f3:43:8d:d5:c4:7e:46:d7:98:f1:7a:bb:75:
                    f0:ac:2c:fe:82:23:69:66:e4:98:ba:b9:8f:99:0a:
                    ab:fe:46:c2:cc:46:a6:7b:01:a2:ab:05:ff:3e:97:
                    58:d5:5e:da:d2:28:1b:cb:2a:7a:20:ca:83:71:db:
                    90:0e:86:65:aa:4d:6e:e3:37:ca:83:09:4b:80:e8:
                    0a:12:08:ca:ff:bb:fa:4c:5a:e3:68:77:3f:5b:73:
                    1f:8b:a0:e7:66:3a:d7:1d:d1:74:b8:52:a8:65:ba:
                    d9:79:d6:6a:ba:3a:e2:bc:b5:72:7f:98:85:6f:e7:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:0A:25:C4:27:53:EC:4B:21:76:29:1B:22:2D:56:DA:C9:6E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bc2e27d8-fbd1-3c1d-b68d-a7efec9bca39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:f2:ee:7b:9e:2a:4d:c6:d2:4b:ca:97:1a:94:10:a5:dd:
         da:b5:db:db:91:7a:ad:96:8f:b7:5e:ca:7e:4d:f2:b6:a4:e1:
         0f:0c:26:d4:33:06:2a:17:63:d6:ed:9d:33:9b:88:7c:a0:31:
         4f:c3:00:a0:8f:3d:c9:f6:5c:7b:5f:42:bc:17:a1:d6:ad:4c:
         d6:38:a0:db:0a:c9:40:32:33:b5:e8:18:34:42:5e:ef:9f:01:
         23:92:ea:fa:d6:3d:78:76:2f:9f:94:03:cf:02:41:3b:6e:0f:
         c3:64:c9:48:8f:d1:47:39:b6:bc:ab:89:15:3a:eb:90:07:bd:
         ae:7e:1b:87:d4:58:8f:2d:c9:61:d5:a6:27:2c:8f:a8:6b:79:
         54:71:66:2d:2d:88:fe:97:6e:32:34:be:25:ec:22:6b:64:80:
         45:5f:12:1a:a9:33:0c:10:1f:5e:45:d1:2a:00:ff:1e:1b:50:
         05:59:9d:43:c3:10:85:69:99:c8:13:6c:ba:4f:e9:2e:46:e1:
         a6:63:03:d9:4d:34:5e:99:ff:13:31:d2:5f:df:4c:0c:b5:ce:
         05:20:73:07:6d:13:8d:83:f1:ea:7f:36:56:d2:73:59:fe:9c:
         10:f1:ef:34:13:c7:99:78:2a:3c:06:4d:25:ba:4b:d4:c7:e9:
         19:d5:61:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----