Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce28cd1b-47ec-39fc-a1b2-455973339450.roa
File:                     ce28cd1b-47ec-39fc-a1b2-455973339450.roa (raw, json)
Hash identifier:          ucnJUt2ugZOoFtsJOrWOA38QWDgNV5Au03+gCHP8Wig=
Subject key identifier:   2D:DF:F6:60:EF:5C:0C:39:93:E0:B6:EA:2A:AE:C0:CC:69:C7:8B:9E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D6832EA2D74973F97BD8B02E0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce28cd1b-47ec-39fc-a1b2-455973339450.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Thu 31 Mar 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:68:32:ea:2d:74:97:3f:97:bd:8b:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 31 04:00:00 2022 GMT
        Subject: CN=e92ccc6f-b7d5-486e-b81a-3364dbefa53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:41:99:43:3a:06:85:93:b9:98:6b:44:da:
                    00:10:5c:c2:0d:11:a4:c1:da:66:6a:92:c6:7f:84:
                    ac:9a:63:a9:4d:95:d0:c9:24:e5:de:85:23:78:52:
                    1e:8f:9f:5a:1e:2b:b5:9c:3a:85:ec:5b:0d:8f:e3:
                    a9:9b:9c:27:a5:87:e8:5b:88:56:b6:80:fd:d7:0f:
                    bc:61:35:6c:49:b0:fe:2b:ad:77:c9:f7:66:fe:12:
                    ae:13:81:54:7f:dc:8a:eb:65:3c:b8:ff:ba:80:f2:
                    5c:53:59:f9:2f:87:03:39:d3:6c:ca:26:59:c1:fe:
                    99:9c:ab:fd:b2:19:2c:eb:cc:34:c4:9d:b5:03:99:
                    72:7c:7c:f8:18:80:03:ca:22:88:08:4e:51:3d:61:
                    78:63:76:ee:4f:2c:65:df:6d:d1:e9:72:05:83:b0:
                    7c:82:95:2b:5a:9b:0e:a8:7f:91:37:33:52:0d:92:
                    5c:74:21:15:63:ed:c9:97:d8:22:65:2a:4f:70:61:
                    bd:bd:9a:69:de:66:7c:97:56:3f:2d:ec:b7:8f:f5:
                    a5:b0:6a:21:d4:6d:8b:2f:91:29:26:be:de:b9:39:
                    e3:0a:4b:d2:66:cc:c4:9f:0b:87:7a:d4:46:63:0f:
                    81:0f:5b:f9:a7:95:ac:06:ec:1e:ff:83:d1:76:e4:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:F6:60:EF:5C:0C:39:93:E0:B6:EA:2A:AE:C0:CC:69:C7:8B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce28cd1b-47ec-39fc-a1b2-455973339450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:07:e9:68:46:e7:07:e5:86:96:c3:57:ca:6b:97:03:b5:bc:
         4a:28:6a:55:bd:78:e1:b6:f1:40:74:55:e4:ce:3c:1c:24:0b:
         51:ad:08:3a:e7:c7:b1:6e:75:73:9f:eb:85:75:6b:3c:92:68:
         60:0c:b4:31:eb:89:a9:b9:93:a7:81:b0:10:e7:f7:fb:46:be:
         de:2f:b7:ff:9b:97:fc:70:41:18:90:9e:27:ba:a6:dc:a3:24:
         57:5b:cb:a7:84:9c:64:27:19:e3:75:59:89:4a:61:ec:8d:d8:
         ef:71:03:8d:a5:e7:eb:a3:93:4b:3f:a8:a7:ad:a9:46:11:c4:
         bf:af:fc:42:08:0f:47:28:95:16:0d:e4:01:b4:5f:fe:28:43:
         2e:cc:9a:6a:ec:1d:30:d9:1b:f1:31:62:d5:5b:63:81:3e:b7:
         19:b2:dc:57:98:b2:f7:dd:76:4d:60:47:1c:52:cd:9b:6a:bc:
         3c:b9:8a:2e:55:84:cc:ae:47:10:19:c4:dd:78:9c:95:37:ea:
         9f:79:c1:a3:b4:ae:49:af:a5:7e:98:11:ae:1a:4f:8d:c2:45:
         56:bf:66:d1:0f:4a:2f:3f:5d:53:a4:05:05:0f:fa:2e:9d:1a:
         fd:5e:72:e1:dd:c1:dc:6d:a7:ea:03:b2:2c:6c:ca:c7:29:03:
         36:f7:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----