Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c1a79f89-055a-307f-a372-e6162d5e4af7.roa
File:                     c1a79f89-055a-307f-a372-e6162d5e4af7.roa (raw, json)
Hash identifier:          wh4+CMvtenqVZJQjv9OvFd9oBjl+Yr0Gzs2nXsHwV28=
Subject key identifier:   37:6D:5D:00:CC:AA:59:8D:51:6A:F2:A0:B3:DC:E2:F5:2E:90:84:F2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D0A1EA68DFDB35F1F454D5400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c1a79f89-055a-307f-a372-e6162d5e4af7.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Fri 25 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0a:1e:a6:8d:fd:b3:5f:1f:45:4d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Feb 25 05:00:00 2022 GMT
        Subject: CN=ca22ff21-0751-4106-be38-7ff88c56cb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:4b:db:9b:c1:26:10:9e:4d:5d:5d:97:1b:
                    c8:56:4f:fd:ef:40:ca:f3:8f:17:ad:4e:65:d5:e3:
                    0a:60:7b:72:b1:08:76:c6:4a:9f:44:e3:6f:d1:08:
                    08:04:a9:ac:05:b7:98:90:5b:4c:0b:75:39:61:73:
                    9c:1f:45:77:c2:ad:08:74:93:2f:c7:19:41:09:8d:
                    ad:77:67:be:51:1d:c7:09:ad:4e:66:58:73:fe:e6:
                    06:e7:b1:c0:c0:42:63:34:71:b8:f8:3d:c1:9e:09:
                    66:19:c9:c9:c3:7f:17:7a:01:20:8c:97:1d:db:11:
                    e8:10:10:ec:9c:e5:67:b0:81:ad:cb:8b:51:0f:be:
                    c9:b6:a7:11:39:04:c3:7f:27:3a:12:8e:ac:68:ec:
                    8c:e4:71:ea:1e:e0:50:2c:11:4c:a3:c3:96:26:3e:
                    0a:59:c2:c9:b7:12:db:16:ff:11:ce:58:4d:86:67:
                    0d:6f:e5:e3:c4:88:02:5e:01:63:2f:4d:67:b8:2c:
                    ab:22:c8:1d:ca:37:7d:80:55:df:d8:2a:e7:86:43:
                    29:9e:71:12:1d:7b:37:90:d5:31:c0:62:84:0c:21:
                    a7:72:8e:0e:63:da:31:a1:14:57:5e:44:40:b3:20:
                    92:0c:20:89:05:e7:fd:54:4b:3e:af:dd:27:de:7b:
                    1a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:5D:00:CC:AA:59:8D:51:6A:F2:A0:B3:DC:E2:F5:2E:90:84:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c1a79f89-055a-307f-a372-e6162d5e4af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:94:5d:a6:66:09:4e:02:6c:ac:31:ce:b2:ef:5b:5f:e0:
         93:94:b4:5a:8e:17:68:be:38:14:eb:74:de:83:a6:d2:0c:aa:
         8c:27:22:a1:33:fe:2e:19:b5:9d:fa:f2:ec:6f:5b:e1:bf:d3:
         b1:47:6c:72:7b:6b:cc:7a:d4:d7:63:44:d7:28:aa:fe:29:07:
         84:1c:ab:af:e2:d1:db:ed:b6:70:93:bc:95:04:19:5d:a6:86:
         ee:bc:ac:73:4e:b5:2a:f1:31:da:fd:c7:bb:cf:a9:70:42:25:
         24:cb:28:46:19:7c:9c:0c:5f:9a:7c:02:04:d3:cb:27:9e:be:
         ca:be:ee:40:75:8d:77:3f:52:3e:c7:4c:46:ec:27:f3:e6:db:
         a9:ea:79:b0:46:03:3a:62:32:0b:f7:98:bb:07:f8:70:60:61:
         5c:c8:54:01:2a:64:0b:b5:cc:b5:e2:16:34:f5:ae:1a:e9:f0:
         6d:67:f3:54:e1:e8:35:42:83:15:41:b9:e0:32:67:65:a9:06:
         d0:f7:cb:75:3b:1a:10:fa:ca:9e:db:8a:9e:50:f9:b3:49:c6:
         ca:e8:57:82:1b:5a:ad:18:a1:7f:90:cc:eb:b3:01:e6:9d:91:
         91:c0:02:d5:a1:14:70:06:2f:93:ca:4b:40:2c:de:e2:14:fc:
         1b:3c:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----