Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6343be6-2f74-3fbd-8a05-5d8a8a49ebba.roa
File:                     c6343be6-2f74-3fbd-8a05-5d8a8a49ebba.roa (raw, json)
Hash identifier:          3EB42Sn8oounWx5b5i7ZX2iFFjeOzKG9OXboP0Yh5HE=
Subject key identifier:   59:5A:4F:5A:34:0E:89:47:A1:78:18:A8:6C:C5:BB:15:D9:9A:26:95
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583ECD5F5BFE386320B8E50D8580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6343be6-2f74-3fbd-8a05-5d8a8a49ebba.roa
Signing time:             Wed 03 Aug 2022 12:00:00 +0000
ROA not before:           Wed 03 Aug 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cd:5f:5b:fe:38:63:20:b8:e5:0d:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug  3 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=401f6505-cf5d-4d09-bcef-0e0714a88f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:04:21:28:d1:95:7b:5b:7f:69:d1:7e:11:
                    6a:ae:f2:78:5e:58:1b:f0:cc:11:03:92:7c:dd:6c:
                    87:41:d6:02:a7:54:64:ff:1e:40:49:33:ff:6f:11:
                    94:3d:3b:67:2b:39:7b:fb:3a:2c:d0:3b:ab:ea:0f:
                    32:92:ff:8e:e3:36:df:b8:0b:4b:62:a7:5b:8b:79:
                    67:d2:3f:82:5e:43:36:29:5e:6a:1d:7f:7e:00:4c:
                    a4:8f:22:fd:58:7b:ce:b9:25:da:f1:30:91:0f:c6:
                    ad:44:ed:d0:a4:0b:44:9c:5e:17:31:8f:ff:b1:65:
                    55:a1:29:f1:e4:f9:72:50:68:bc:a6:2c:26:4e:ca:
                    34:ad:c8:c1:c8:d0:8c:55:34:35:43:79:2b:d3:c1:
                    1f:f2:f4:ca:31:5c:d7:5c:01:0a:4b:20:38:f7:e1:
                    a6:a0:de:73:f9:e3:c4:25:c9:a9:65:c4:4d:4d:53:
                    1e:13:15:0e:fe:35:d8:41:14:bf:e8:01:1e:14:ba:
                    71:65:f8:64:bd:3d:f9:c2:17:94:eb:b3:b2:b8:b6:
                    fd:5a:6f:24:c9:30:22:66:10:39:64:e1:4b:21:17:
                    3b:05:46:5f:ee:fb:bd:44:6f:9a:52:a2:46:0c:cf:
                    19:2c:6b:9b:79:ca:0c:d6:b8:e8:c2:c3:88:61:b1:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5A:4F:5A:34:0E:89:47:A1:78:18:A8:6C:C5:BB:15:D9:9A:26:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c6343be6-2f74-3fbd-8a05-5d8a8a49ebba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:8a:03:0c:6f:30:00:7a:fe:9d:00:17:68:5b:d2:dc:bc:
         97:0b:fc:87:0e:cb:45:c7:5c:d3:39:3f:4c:3d:73:5d:74:28:
         a2:0b:64:97:df:e5:62:0a:77:44:5d:8b:18:02:d5:f4:22:65:
         3c:b5:46:bf:a3:00:b2:28:09:3b:63:42:8e:fe:2e:26:dd:a0:
         3e:13:d5:ed:c9:fe:cb:06:3d:1c:66:d6:51:34:5b:00:59:a8:
         b4:93:13:f1:41:ad:4a:4b:76:8b:7e:b6:8d:28:5d:5f:1e:9d:
         15:a5:d7:ff:89:69:b6:e6:f1:53:2d:6b:16:88:f7:2d:af:19:
         7b:80:67:5e:d3:e9:4c:d0:0a:57:ee:e6:42:44:4a:84:7b:6d:
         03:dc:21:13:d5:e0:92:dd:32:db:fd:9a:f2:01:2e:2f:e4:e4:
         03:f5:25:cc:d0:21:5d:b4:42:f9:8e:2b:6e:be:2c:0c:5e:a4:
         47:ea:27:cb:47:96:1a:76:be:2e:55:37:16:16:0d:9e:30:f6:
         ce:2a:b9:91:ed:5c:93:ba:0d:d3:67:90:db:de:f5:5f:34:60:
         0b:d4:86:28:73:cc:e8:89:e0:28:39:33:66:d7:ad:03:61:f6:
         ca:b4:38:c5:5d:10:f2:ba:5b:1a:4a:43:79:b7:23:d9:b3:45:
         6b:a1:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----