Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd7209b7-b208-33f9-b8a1-a2648d92e17c.roa
File:                     bd7209b7-b208-33f9-b8a1-a2648d92e17c.roa (raw, json)
Hash identifier:          6nKpbieY8A3Yi08Iq/19ESVr0qBGRfT9YZ2vwh8vxQk=
Subject key identifier:   A1:B7:E5:A4:24:B1:51:1B:54:8E:39:23:C2:8B:6C:CB:BF:1F:66:29
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D0887A9BA861F3C46B37A2500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd7209b7-b208-33f9-b8a1-a2648d92e17c.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Fri 25 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:08:87:a9:ba:86:1f:3c:46:b3:7a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Feb 25 05:00:00 2022 GMT
        Subject: CN=6d50b7f0-7244-4391-88aa-65facf20aa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:e5:6d:8c:53:27:89:1d:c6:f0:bc:95:8f:
                    0b:60:76:b1:6d:0f:64:67:d6:0d:1b:a4:0b:30:b2:
                    71:5d:25:f0:fa:0c:23:31:29:1d:d7:fc:6f:d3:88:
                    18:93:f5:56:05:09:7e:a2:f6:68:38:e1:2e:a9:45:
                    e0:29:e0:fd:7c:05:dd:de:c4:f6:8f:a3:46:54:02:
                    b6:22:8d:d6:b3:6d:56:37:dd:55:9b:07:3a:c8:f4:
                    d6:a9:f2:7d:7e:0d:d4:aa:48:0c:01:bb:9c:0d:3a:
                    5b:22:07:00:3b:f1:49:00:97:e8:58:cd:10:3a:40:
                    47:58:06:93:19:90:47:62:49:b2:07:4a:8d:e9:89:
                    a3:5b:dd:3e:e8:2e:c9:78:44:5f:5b:9a:58:3c:69:
                    f1:27:24:79:27:65:88:90:1e:74:6d:2f:5f:c9:ab:
                    e9:53:4f:16:53:45:e0:dc:96:c4:0b:3d:1c:44:99:
                    27:6b:52:bd:18:f5:a4:c7:6e:3e:b2:35:0d:83:b6:
                    89:f4:fc:f9:3b:af:7a:3e:e1:62:66:38:7f:ea:97:
                    78:53:92:fd:44:6c:44:d7:8f:bf:58:0b:1c:91:bd:
                    8c:10:62:50:fe:11:75:67:7e:e3:28:30:be:9b:ad:
                    88:ee:6c:ef:90:9e:f2:06:d0:86:dd:c4:2a:bb:7a:
                    83:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:E5:A4:24:B1:51:1B:54:8E:39:23:C2:8B:6C:CB:BF:1F:66:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/bd7209b7-b208-33f9-b8a1-a2648d92e17c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:11:5f:55:63:2a:11:15:67:de:0b:3b:87:7c:de:55:1e:5f:
         80:98:65:92:37:16:29:f3:1e:84:e5:31:88:04:5d:99:8b:50:
         0e:e7:c8:99:27:a2:a7:d5:06:d3:59:8a:3f:af:9a:72:20:e8:
         23:f0:58:80:0a:a0:04:1c:5c:75:33:e5:6b:8c:bf:72:8d:1e:
         05:0b:34:29:a0:df:b9:6c:ae:c4:d3:01:34:69:dd:7a:4b:6b:
         84:36:5b:4f:1b:05:57:e5:79:00:32:a7:66:0a:5e:e1:43:d8:
         20:e7:7e:f8:a3:df:3a:2c:15:78:a2:c4:e5:09:b7:17:ee:27:
         cd:4e:13:cb:34:5f:1c:04:f9:b9:66:3e:29:dc:a0:a5:16:ff:
         5e:2c:c2:49:89:12:6a:21:de:7b:07:15:fd:13:97:6e:dd:0f:
         d9:e1:bd:9e:51:b7:99:5d:48:2c:e7:57:86:c3:7b:61:57:2f:
         c1:4c:dd:5c:a2:10:3a:84:d8:2d:ea:ee:e3:81:41:61:53:99:
         ba:25:94:75:12:a5:a2:35:56:12:68:8d:98:ad:d8:2a:b4:9f:
         ca:eb:48:13:c0:86:5d:54:df:23:cd:15:55:6a:f5:1b:71:50:
         d9:73:0f:0a:79:3b:b9:e6:ad:dc:d7:ff:84:a1:d6:fc:40:ea:
         a4:e6:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----