Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc9c9fac-38a1-3e6e-930d-965c0e59fe03.roa
File:                     cc9c9fac-38a1-3e6e-930d-965c0e59fe03.roa (raw, json)
Hash identifier:          idk+yUOzKD9MF4z8xm4+06qjB+ZtP+k7LzICRoyAGW8=
Subject key identifier:   AD:B8:77:E6:11:25:B6:D6:B5:A2:BA:8B:50:C5:58:D5:68:C1:AC:C6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CC9C99738458379E11A753CC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc9c9fac-38a1-3e6e-930d-965c0e59fe03.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Wed 02 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c9:c9:97:38:45:83:79:e1:1a:75:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2022 GMT
        Subject: CN=2815a6c4-a44e-41a9-b6a3-ede27fa3e8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:c1:c2:a9:7f:1e:9f:aa:3e:ab:a5:db:b1:
                    94:87:85:f8:66:6f:2f:74:3c:72:36:f4:0d:e3:75:
                    3b:b5:e6:6b:e2:77:3f:32:4c:81:0a:68:ff:53:1a:
                    87:36:cb:d7:74:03:f4:ba:75:20:3a:8e:19:c2:6b:
                    5f:46:88:ed:b0:ad:8b:33:0e:fb:ce:2f:c8:55:ed:
                    01:4f:c8:7b:74:0b:33:9c:d6:8f:c5:59:51:fb:45:
                    e3:9e:1c:16:59:da:78:12:7a:a7:91:78:8b:e9:1f:
                    6a:60:f9:ec:17:ec:85:f2:24:bc:d8:83:32:89:13:
                    fa:74:94:46:7d:bb:37:10:44:5e:41:76:be:93:57:
                    7c:bb:5f:14:fa:f3:2a:04:50:5b:4e:88:d2:a5:ba:
                    fa:53:49:e8:ee:53:b8:bb:c9:eb:bb:fe:d9:89:c4:
                    01:72:cd:c7:42:4a:df:6b:ac:23:c7:4f:5a:49:b3:
                    a2:a7:4c:71:e9:41:2a:82:22:20:f2:00:e5:54:3a:
                    c2:61:75:d9:8a:24:82:48:bc:26:6a:6a:a7:4e:2a:
                    e2:54:c8:8c:66:e4:95:e4:da:a1:3a:a1:9e:b2:50:
                    02:2b:ed:31:af:3c:ec:e7:94:12:32:2d:c1:77:29:
                    3d:29:32:07:31:69:3c:87:50:5c:2b:99:61:27:19:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:77:E6:11:25:B6:D6:B5:A2:BA:8B:50:C5:58:D5:68:C1:AC:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/cc9c9fac-38a1-3e6e-930d-965c0e59fe03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:60:aa:98:c1:a9:fb:52:65:7c:00:0c:40:c8:66:ad:21:9c:
         d5:c0:01:82:7b:3b:2e:fd:c6:89:ff:c6:49:9a:fe:a8:79:95:
         18:3e:b5:f7:7f:b3:62:01:93:5d:95:b2:1e:24:7b:48:e9:58:
         c5:04:a5:54:d3:52:7d:20:1b:a1:8a:cc:39:49:16:00:10:9c:
         84:e5:f6:e9:00:45:1f:0d:c7:bd:0a:dc:85:ac:15:e5:42:22:
         e0:b8:47:b4:e2:d8:82:06:35:cc:55:3e:ac:80:54:66:e8:f4:
         83:83:dd:d6:2b:33:0d:9f:46:b0:25:ba:0d:30:f9:98:10:2f:
         07:23:f5:5f:2b:91:c8:4b:e2:07:0b:04:0f:27:93:fe:e3:1c:
         b3:63:42:08:75:fa:9a:fa:86:15:6f:15:25:09:69:fc:7c:3c:
         dc:e9:d9:92:f0:40:53:8c:59:73:eb:da:63:2e:a9:63:92:47:
         b0:1a:98:b3:e3:5f:1e:b4:c5:5b:f4:9a:16:77:9f:12:ba:9f:
         b2:93:28:cd:e1:03:dd:9c:6a:40:d7:51:95:d7:c2:cc:f7:7a:
         c5:63:32:31:29:76:1e:6c:82:80:30:fd:c2:fd:6b:02:8c:e0:
         cf:76:cb:f8:27:32:ac:61:ab:83:43:13:d5:86:d9:fd:af:9a:
         57:ca:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----