Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cbb9ec05-95a1-33ba-a737-29dbb77b3bc7.roa
File:                     cbb9ec05-95a1-33ba-a737-29dbb77b3bc7.roa (raw, json)
Hash identifier:          wcjNyj01Z/NxATPkZKACcrkhYpQpMUZwGzFuLxQBWrg=
Subject key identifier:   35:1A:28:26:07:7A:E3:5C:88:9B:D2:58:F2:A9:8D:C1:62:1F:A3:C4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DDCFC8242ACACC3D68193A780
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cbb9ec05-95a1-33ba-a737-29dbb77b3bc7.roa
Signing time:             Mon 09 May 2022 12:00:00 +0000
ROA not before:           Mon 09 May 2022 12:00:00 +0000
ROA not after:            Thu 12 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:dc:fc:82:42:ac:ac:c3:d6:81:93:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  9 12:00:00 2022 GMT
            Not After : May 12 04:00:00 2022 GMT
        Subject: CN=9ee93d0d-442a-49d5-b6f3-eb7d065f73c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:17:2c:fe:9a:e7:ba:16:cd:64:71:d4:9e:f3:
                    ea:6d:ce:21:6f:8d:84:8f:5b:b5:63:2f:99:c4:8e:
                    09:aa:bf:01:71:7f:53:d9:7f:77:e3:66:52:2d:66:
                    7a:1c:2e:5a:ca:3e:1d:0e:5e:87:58:a0:d9:ba:03:
                    b7:9f:e2:fb:01:38:6b:98:fb:35:94:c7:ee:72:24:
                    f8:11:e7:f3:df:fb:07:7c:c5:75:42:45:57:d4:e3:
                    dd:84:ba:96:1c:0c:bf:e5:65:c4:e0:26:be:a4:20:
                    c4:85:d2:b2:eb:1a:51:f1:8e:6c:4a:d4:55:c2:c7:
                    ff:6f:d3:94:e8:d5:b5:b0:91:51:57:b1:f1:e1:c9:
                    5c:2a:f5:95:e8:03:bc:b7:86:4d:16:5f:9c:c3:fb:
                    1c:40:33:80:44:63:30:d9:b6:e5:4a:ac:5c:6e:d4:
                    06:8f:bd:5f:f5:f3:23:fb:a6:8d:58:54:70:7d:98:
                    08:8c:3b:f7:c4:a5:5e:66:1d:00:37:af:01:4a:c5:
                    c2:62:57:09:07:e2:be:5f:ae:62:2a:da:bf:e4:b8:
                    97:ba:da:ca:28:d8:c9:fe:14:2b:90:f4:f5:01:cf:
                    73:08:7f:f8:67:a1:05:15:c3:ba:60:a2:46:64:e0:
                    28:e3:bb:28:73:3b:20:9d:b0:e4:92:8b:4c:cd:0b:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:28:26:07:7A:E3:5C:88:9B:D2:58:F2:A9:8D:C1:62:1F:A3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cbb9ec05-95a1-33ba-a737-29dbb77b3bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:dd:14:8c:4f:45:a7:09:85:9f:7c:53:df:ab:98:26:f6:
         8f:48:75:c3:1b:77:3a:77:ea:03:27:18:e0:26:66:2f:7b:d5:
         e4:b5:b6:b1:8e:2f:d8:54:fc:fe:da:ab:77:ff:6e:6f:54:0c:
         99:97:2b:0e:93:7b:55:e0:7c:c9:45:be:39:52:62:96:d3:df:
         c6:05:22:02:e3:ce:e4:2b:9e:8f:21:35:6e:07:fe:1a:9e:6f:
         68:ca:14:ef:f7:a7:d6:16:c1:22:a0:8f:68:7b:c6:e1:98:95:
         d0:25:e1:bb:d8:bd:12:b8:9d:ee:c7:dd:b5:64:1a:02:f8:72:
         e9:ae:44:eb:12:a7:59:da:80:2f:85:c6:54:dc:0d:db:75:f0:
         5a:4d:0e:45:6e:56:79:c4:b3:22:b9:dc:44:c4:f0:f8:24:d2:
         bd:40:03:b3:fd:3e:6e:21:9c:fa:b2:5d:a9:f1:60:ca:36:8f:
         41:4d:8d:a3:f1:c0:a8:95:2f:83:4c:46:86:b4:64:86:ad:8e:
         2c:9a:e7:08:7e:9e:3d:35:54:96:75:45:af:81:fe:51:93:80:
         da:f9:60:d3:8d:15:70:ff:9b:33:8e:4b:36:d0:47:8b:fd:13:
         4b:da:20:35:e2:47:37:39:64:a7:89:68:e1:d9:b7:f5:23:e7:
         3f:bc:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----