Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c8950c2b-a948-35f8-836f-fb23701eeb79.roa
File:                     c8950c2b-a948-35f8-836f-fb23701eeb79.roa (raw, json)
Hash identifier:          NKmhx3bxB8SctoOJG6xwCK67I+1RnM6Yol9+ws7RRzM=
Subject key identifier:   8E:0C:EE:FF:FF:FF:13:50:0C:6B:11:C8:C8:56:82:0D:19:71:72:92
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D3962E5F27C2B78458A96A400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c8950c2b-a948-35f8-836f-fb23701eeb79.roa
Signing time:             Sat 12 Mar 2022 05:00:00 +0000
ROA not before:           Sat 12 Mar 2022 05:00:00 +0000
ROA not after:            Mon 14 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:39:62:e5:f2:7c:2b:78:45:8a:96:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 12 05:00:00 2022 GMT
            Not After : Mar 14 04:00:00 2022 GMT
        Subject: CN=62749d1b-068c-4d9a-b798-38ca99ec3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:3e:f2:a6:c7:52:c9:19:d3:b7:a2:c7:bf:
                    4f:a0:f4:2a:90:72:6b:1f:70:82:17:0d:a4:1f:46:
                    35:ef:2a:ea:c5:8d:79:a0:64:47:d6:05:86:80:6d:
                    63:b7:d5:11:65:e7:fb:8b:33:ad:f9:43:7f:9a:b8:
                    14:b1:36:f0:cc:71:01:69:d3:87:e2:a3:3f:3b:56:
                    26:c4:72:90:91:ea:15:ff:ad:ac:9a:1f:98:48:b5:
                    24:69:1c:c1:89:68:0d:f6:7b:51:1a:85:bb:77:eb:
                    c4:28:6e:9d:2a:fb:6a:6c:18:67:1b:26:7d:56:ac:
                    cd:3c:a4:9a:34:ba:1f:f2:19:1f:db:81:0a:9b:dd:
                    b2:4f:d7:51:fd:0a:ae:57:61:68:ad:c1:8f:c7:d8:
                    98:37:e2:8e:1a:77:01:11:e5:af:56:35:a6:9d:20:
                    d3:4d:be:d7:4b:92:8a:e2:5c:40:df:e3:98:3c:26:
                    33:76:93:ea:51:f0:0e:d7:01:b1:68:f2:15:5d:6c:
                    39:4b:83:7a:31:fb:1b:4a:8f:fa:7e:fc:ea:6d:92:
                    25:28:ce:d1:f8:a6:c9:80:33:9e:af:9d:da:24:6b:
                    6a:f1:58:ef:10:f3:84:59:70:46:da:cf:d6:69:2e:
                    97:b6:88:35:c0:bd:9a:85:d9:61:7c:77:82:96:07:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:EE:FF:FF:FF:13:50:0C:6B:11:C8:C8:56:82:0D:19:71:72:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/c8950c2b-a948-35f8-836f-fb23701eeb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:66:89:a0:22:0f:42:1c:d5:0c:48:de:02:df:6b:62:a1:
         a0:a8:9e:15:27:da:66:c5:ab:56:fd:10:32:21:9e:8f:2b:c3:
         97:ca:dc:5f:0c:5c:96:c7:cf:d6:7f:ef:34:14:54:d5:54:c4:
         28:e6:41:ac:ba:27:c4:b4:e3:e5:4e:e7:60:e0:00:24:a1:bc:
         e8:2f:a8:18:00:12:45:9e:64:dd:76:cd:36:98:fc:88:43:b9:
         fb:3e:8d:53:1b:c4:73:8a:29:ad:ed:87:fc:64:e8:fa:e7:a7:
         2f:41:b0:e1:e8:2a:36:42:ae:72:0f:eb:4d:cb:ba:18:95:26:
         fe:31:1c:63:8a:6b:96:25:9d:93:bd:4f:0f:3a:f8:5e:37:0b:
         66:31:ba:0b:fe:c3:1e:b1:2b:58:9f:ee:38:f6:eb:5b:3e:9e:
         4d:a1:8b:d4:c0:7b:12:21:a4:51:97:b1:0c:87:bb:f5:98:36:
         1f:33:ee:b6:38:90:f8:89:4d:6a:29:d8:12:0d:19:72:09:c9:
         71:ac:67:17:fc:ed:d9:a5:1d:96:5f:4e:a7:1d:ce:4b:e3:45:
         6a:2b:96:b1:b7:3f:2a:59:5e:d8:46:0d:5a:c3:47:53:62:f6:
         5f:b0:c0:0a:f8:e5:ec:75:eb:47:da:8c:6b:b1:0b:9f:94:52:
         f6:78:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----