Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce2d507b-adc7-3525-b98a-9ee2a0693b0e.roa
File:                     ce2d507b-adc7-3525-b98a-9ee2a0693b0e.roa (raw, json)
Hash identifier:          um2kX/rvCdNA5jQxUvKqzorjCdpJ4GpBdN1w8OxAZls=
Subject key identifier:   35:5A:A3:EC:7E:D3:A9:56:06:1F:86:86:08:29:DF:FC:DA:6A:AB:69
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EF09B6FBB811DFA366DBA2440
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce2d507b-adc7-3525-b98a-9ee2a0693b0e.roa
Signing time:             Wed 17 Aug 2022 12:00:00 +0000
ROA not before:           Wed 17 Aug 2022 12:00:00 +0000
ROA not after:            Thu 22 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:9cc0:39c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:f0:9b:6f:bb:81:1d:fa:36:6d:ba:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 17 12:00:00 2022 GMT
            Not After : Sep 22 04:00:00 2022 GMT
        Subject: CN=51766b73-8cf8-426d-b241-32504bd9c640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:41:e8:93:a9:cc:17:64:1b:ae:22:89:38:
                    5e:89:72:6e:f7:cf:67:70:16:22:be:e7:16:80:ab:
                    d3:91:e8:71:56:95:52:b4:b8:9b:ec:db:5b:c8:5b:
                    80:f1:9b:1f:ad:89:72:f4:54:f4:fa:bb:f0:d8:a1:
                    13:2c:4c:97:f6:78:e5:2d:56:52:b2:6c:97:53:07:
                    a4:75:9e:aa:ae:21:12:78:02:5c:ce:c9:db:46:74:
                    cc:f8:86:1a:87:63:8a:e8:a3:9e:4a:99:e9:ba:2f:
                    9e:c9:95:b1:84:7f:aa:50:0b:aa:64:91:ae:19:e1:
                    fe:6c:9e:78:5b:cb:9c:73:67:61:c4:f2:83:4e:27:
                    97:7a:42:ac:48:b9:40:ec:b3:b7:1c:cb:17:aa:cc:
                    d6:94:73:c5:2a:db:d1:9c:46:32:81:53:ec:ba:ae:
                    fd:47:ab:20:d9:e6:95:b8:60:d7:55:a6:a8:be:87:
                    99:df:80:f4:8c:06:71:8e:39:c6:ae:96:ad:45:cf:
                    c1:f4:0a:ac:ef:2b:65:0b:fd:ac:a1:c8:53:f0:bd:
                    57:73:43:08:5e:69:18:03:12:de:8b:70:df:2d:59:
                    c6:23:44:1b:98:34:1a:2f:88:5d:a7:41:29:d6:7f:
                    d5:26:87:a0:4a:69:df:05:c1:a4:41:ed:7d:28:9e:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:A3:EC:7E:D3:A9:56:06:1F:86:86:08:29:DF:FC:DA:6A:AB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ce2d507b-adc7-3525-b98a-9ee2a0693b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:39c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:88:99:21:6e:9f:a3:1e:f2:62:14:81:79:41:d8:63:0e:
         46:9b:41:fc:48:d5:92:57:a4:e9:97:be:96:ac:cf:59:5c:be:
         11:a0:3e:fb:62:6d:9d:90:92:4f:de:fc:09:df:8a:78:b2:2c:
         53:45:7b:c0:03:14:0a:18:f0:25:3a:a7:8e:af:21:01:c0:b1:
         eb:72:f8:ac:0b:63:dc:1a:8f:74:96:16:19:a0:42:59:ea:f6:
         5b:78:bd:fd:05:6e:6a:1c:e0:d0:ef:3e:99:fc:af:97:95:86:
         f6:47:20:4b:21:70:a2:9a:0d:e5:6a:d9:7c:e3:47:ee:f4:5e:
         a6:d3:ee:a1:07:0a:12:95:93:4f:e5:9f:59:51:70:d7:d3:9a:
         37:29:08:37:c9:af:1c:d6:46:60:ab:fc:df:ce:ec:4d:99:91:
         c2:98:82:61:1f:6c:93:dc:dd:39:a7:e7:9b:af:ea:67:54:32:
         29:35:f0:86:3e:c1:4e:54:f0:a3:00:39:08:2a:22:0e:6f:eb:
         d5:a5:b5:da:9b:07:83:be:a0:c5:87:56:6f:fc:ea:40:13:81:
         8e:29:b5:1f:cd:a6:7a:7f:67:0b:0e:df:c5:a7:e3:71:ef:ec:
         96:7b:9e:1d:d1:b9:ad:ec:f7:9f:46:06:2e:a4:29:86:8a:59:
         fc:ee:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----