Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc4e1104-6c46-3a60-939b-fdff3bcfea3d.roa
File:                     cc4e1104-6c46-3a60-939b-fdff3bcfea3d.roa (raw, json)
Hash identifier:          LM/xvDLMk2QNwPc8nFwdcCSby5+FAk6lbxN39GOsS+k=
Subject key identifier:   AE:49:C4:44:58:C5:15:F4:9D:AA:0E:62:9B:39:80:2D:AE:8A:A8:F7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583C03C0ACB55C79B1230C8B6600
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc4e1104-6c46-3a60-939b-fdff3bcfea3d.roa
Signing time:             Tue 05 Nov 2019 05:00:00 +0000
ROA not before:           Tue 05 Nov 2019 05:00:00 +0000
ROA not after:            Sun 25 Feb 2024 05:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:442::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:03:c0:ac:b5:5c:79:b1:23:0c:8b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 05:00:00 2019 GMT
            Not After : Feb 25 05:00:00 2024 GMT
        Subject: CN=73835484-99c9-45d7-9f58-cb83bf8e4ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:5e:d2:d0:7d:aa:8b:6a:af:e0:24:4c:fe:
                    7c:12:0d:45:0d:57:19:53:ff:cc:8b:05:cd:82:60:
                    54:c9:79:e1:68:56:cc:a2:60:8f:10:22:c6:b6:0c:
                    01:ce:0e:2b:a7:80:f5:21:d8:74:30:45:26:87:35:
                    82:ab:33:c2:23:9d:b8:65:75:15:d9:3a:bb:69:f1:
                    3d:fa:c5:75:64:c8:ef:17:5a:03:e5:47:05:d7:8e:
                    42:e4:2e:0e:04:ea:d7:ad:9e:a6:ee:07:6a:25:5d:
                    10:d8:bf:7c:a5:43:df:0d:03:fb:11:d2:63:1b:59:
                    16:7a:bb:7f:37:48:d7:8a:fe:64:cf:d1:13:24:ab:
                    b5:e5:2c:a3:74:d4:ac:02:26:3b:2b:a3:eb:30:f3:
                    cb:fb:11:2c:99:70:de:dd:90:4c:0f:b6:58:e5:a6:
                    13:41:10:72:9c:dd:05:b5:a5:57:d5:11:a7:9c:38:
                    fd:6c:98:7a:f6:67:61:ed:29:2e:45:ec:56:29:80:
                    8c:6a:25:9b:c5:ec:e5:41:5f:ae:9b:03:af:0d:4e:
                    70:dc:32:ff:d8:1b:43:fa:33:14:49:c6:9c:bb:f5:
                    06:0d:43:ef:9f:4e:bc:7a:3b:5a:bc:fb:25:d3:04:
                    3e:e5:9a:37:c9:9d:b4:61:6a:30:7d:1c:38:76:bc:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:49:C4:44:58:C5:15:F4:9D:AA:0E:62:9B:39:80:2D:AE:8A:A8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc4e1104-6c46-3a60-939b-fdff3bcfea3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:442::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:62:c6:73:22:15:44:00:a7:f8:09:4d:3d:f5:58:bc:3b:
         c3:01:ec:e9:cb:c4:64:63:17:b3:fa:79:00:02:04:5a:44:55:
         47:30:e4:1a:ee:62:59:07:d1:6f:b4:95:cb:5d:c6:e1:7c:2a:
         4a:a8:99:85:49:89:8e:db:b4:30:ff:50:40:d2:0a:cb:be:ff:
         dc:35:38:ad:c8:a7:da:c0:4f:4a:03:45:27:08:7b:09:f4:dd:
         66:2a:ae:1c:46:5e:c9:25:b2:fd:b7:d5:71:ea:2f:a3:aa:4b:
         2c:3d:dd:62:17:48:a4:6a:bf:77:79:fc:15:cb:f0:90:bd:1f:
         94:9b:89:5f:46:e2:00:5a:b1:86:bd:b0:31:d9:91:89:5a:26:
         6c:5f:a8:f0:67:06:c6:3b:7e:4e:f0:b8:75:dc:67:69:5a:d6:
         ae:81:e1:5c:85:9c:24:a3:bc:30:75:ba:76:84:74:f6:15:b9:
         d8:3d:ce:9f:9d:e9:f6:d2:f0:a2:8d:1a:be:6a:62:cf:8b:e4:
         67:a6:0c:2b:ca:bc:8f:6b:17:43:35:15:72:64:de:de:99:43:
         43:01:c3:f0:29:0c:d1:ff:59:15:09:7b:cd:60:ba:5b:cb:b6:
         c0:ce:f9:ca:7d:54:29:a6:b3:76:83:b1:f3:e4:68:2a:44:84:
         96:5f:bb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----