Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7828376-eec4-39a9-ab99-c45f02e9dbd0.roa
File:                     c7828376-eec4-39a9-ab99-c45f02e9dbd0.roa (raw, json)
Hash identifier:          QpJuv84Y1kN1TgAZu6Mzqk93viPA+eGG/g6mGZiMBnk=
Subject key identifier:   36:80:47:F1:98:CA:02:D6:57:38:06:27:85:A0:2B:F1:93:5D:B1:C6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EABD08EF99923283BF70DB5CC
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7828376-eec4-39a9-ab99-c45f02e9dbd0.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ab:d0:8e:f9:99:23:28:3b:f7:0d:b5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=520b204a-6ec6-48fb-bc6f-f5810d6231ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:af:4c:ce:e8:24:8e:1e:41:ee:ba:dc:74:
                    b3:96:8c:a8:40:92:7c:a4:04:a2:0e:e1:b4:30:2c:
                    37:9a:55:d8:44:c1:48:c5:84:10:1d:78:6d:c9:98:
                    80:f5:a3:48:36:7d:fc:fc:07:3d:9a:e9:08:56:82:
                    ea:7e:3f:08:4c:11:23:c6:2e:1c:8f:f4:ce:69:54:
                    4b:1a:a0:db:34:0c:ef:55:fa:33:2e:6a:05:09:51:
                    16:79:09:0b:6a:88:44:09:e8:73:32:96:c6:f1:01:
                    ec:79:d0:4e:e2:ae:63:b4:ea:bd:6e:ec:53:dd:b8:
                    02:ef:d1:57:c3:d6:c2:89:20:b8:4c:97:e9:db:09:
                    c1:f2:d9:71:e3:40:cb:54:56:25:f6:fd:eb:53:c0:
                    3b:e2:4c:3d:f6:20:9a:b1:df:ff:db:56:b2:c1:9a:
                    a9:dd:9d:12:55:60:c1:9b:2e:7c:69:e1:3b:7a:02:
                    3f:5f:7f:0d:04:28:1e:6b:89:f4:c0:c0:f6:3c:f0:
                    11:16:b3:c6:14:69:03:cb:a8:30:9f:32:a3:f8:0b:
                    22:39:8c:35:e5:43:e7:b7:55:f5:3c:e8:57:32:d5:
                    7e:38:23:cf:0b:17:d5:67:c4:9f:d0:27:96:27:ac:
                    2e:de:27:e3:2f:d1:cd:b1:8f:ed:6d:11:ff:3a:60:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:80:47:F1:98:CA:02:D6:57:38:06:27:85:A0:2B:F1:93:5D:B1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c7828376-eec4-39a9-ab99-c45f02e9dbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:cd:81:c4:d0:f0:3d:4a:cc:5e:96:49:92:cc:3f:95:9c:
         42:24:18:d4:08:ed:b0:4d:67:ab:c3:28:c0:93:07:a6:96:5a:
         aa:8d:2d:e3:9e:04:37:0f:7c:9d:15:bf:25:51:67:33:ec:ec:
         97:4f:2e:1b:5d:71:fa:3a:1a:9d:be:c4:81:74:80:b4:7b:08:
         90:5f:e3:cb:07:ef:c3:f7:d1:c8:dd:6e:eb:76:42:dd:92:64:
         e6:48:02:de:a1:75:38:c0:e0:e8:a2:44:30:91:d9:6a:83:e1:
         45:1c:2c:74:8f:3c:c9:57:80:aa:04:3a:2c:78:a0:22:0d:82:
         d9:08:14:76:a4:4a:9a:f2:c5:0f:b3:b5:a0:b2:7b:45:4a:c5:
         be:bb:a1:f7:70:7c:3a:85:a9:4d:4a:de:1b:17:46:05:83:f2:
         fa:49:5c:98:45:33:38:75:61:e0:41:f3:2d:65:67:9f:5d:b4:
         d9:2e:ee:e2:40:f0:83:8c:9d:e1:13:c4:81:67:75:1f:c2:4c:
         43:83:e4:0f:e7:69:b8:2f:5c:42:bc:2b:2a:d1:63:58:38:da:
         14:6e:fa:21:f1:78:2d:ad:83:bb:52:97:3c:c1:58:0d:bd:e9:
         8f:c8:82:5d:fa:da:c2:f9:e4:34:a7:6d:d9:a1:77:0a:c6:f2:
         30:b8:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----