Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d53742e8-faf8-3b7d-9842-0de25445faed.roa
File:                     d53742e8-faf8-3b7d-9842-0de25445faed.roa (raw, json)
Hash identifier:          zfCLSeDLs0JCK4SbwsQhzMalzjgHhHcJq6P3keRisvU=
Subject key identifier:   A2:16:DA:7C:87:7A:1A:25:77:43:ED:D9:5D:82:A0:1D:91:67:B0:57
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E63BB856E530A7E4FB1B61AC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d53742e8-faf8-3b7d-9842-0de25445faed.roa
Signing time:             Sun 26 Jun 2022 12:00:00 +0000
ROA not before:           Sun 26 Jun 2022 12:00:00 +0000
ROA not after:            Wed 29 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:63:bb:85:6e:53:0a:7e:4f:b1:b6:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 26 12:00:00 2022 GMT
            Not After : Jun 29 04:00:00 2022 GMT
        Subject: CN=e0215c55-3ab5-45cd-8fe6-50e40600745d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:a1:35:0c:48:42:99:77:0c:f6:7b:e3:a4:
                    28:9d:3b:ff:d7:1a:b3:ba:db:d2:9c:4e:9c:86:24:
                    2c:53:99:08:6a:2f:35:9a:fa:a0:0d:fb:4d:7f:38:
                    da:48:cf:d7:5c:ad:d8:9a:82:b0:ee:1b:0e:d6:99:
                    12:1b:54:b1:2d:6f:45:e3:01:11:fb:35:a2:b2:b1:
                    37:c7:a4:e4:da:50:f8:c3:72:0b:8c:4e:28:79:24:
                    45:d1:fa:c3:b8:44:f5:af:7e:c2:1b:d8:61:34:47:
                    a3:9d:be:3c:ee:48:13:15:4a:83:dc:48:9d:88:23:
                    1e:6d:c2:1d:18:ee:cb:71:b6:60:17:32:bd:dc:29:
                    01:fc:23:fd:8c:ac:02:5e:1e:ed:fc:45:42:eb:51:
                    cd:3d:a5:75:ef:73:ae:b2:b3:1f:d1:c9:8d:56:c4:
                    d3:ba:45:a7:0c:ae:2b:10:b2:21:0d:a2:34:a4:d3:
                    e6:ae:a8:ee:32:e9:96:10:00:55:a9:ab:f3:7d:25:
                    21:0d:64:9f:07:c1:8c:17:db:e6:2e:1f:e2:4b:53:
                    ea:98:6c:b9:3f:85:28:7c:4a:23:ed:4c:ed:93:53:
                    e2:e8:f3:25:0a:eb:69:52:83:7f:37:d6:58:4a:a0:
                    32:2f:55:b4:b5:7f:b2:66:21:00:32:cb:59:59:08:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:DA:7C:87:7A:1A:25:77:43:ED:D9:5D:82:A0:1D:91:67:B0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d53742e8-faf8-3b7d-9842-0de25445faed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8b:bd:2f:03:b3:92:50:88:c0:05:5b:e6:ae:6a:e7:56:aa:
         95:4e:89:d8:81:bf:ae:7e:62:77:e5:ce:95:db:5a:43:91:4a:
         c6:1d:e3:a0:f0:6f:b8:f0:a4:5b:3f:dd:b9:99:89:35:f8:28:
         df:dd:df:cb:10:97:6c:2c:ff:ec:72:71:ed:89:a9:24:61:6d:
         03:12:51:2e:9a:5b:a9:f9:c1:4d:95:1e:54:93:94:44:cf:eb:
         60:66:95:dd:ab:54:d8:f5:6c:c2:59:1d:c3:bd:9b:e1:5e:44:
         43:55:0f:2d:ed:4c:e3:1e:12:cb:ef:e2:7b:ad:bf:21:74:d1:
         d3:d9:71:d2:71:02:d9:aa:d4:e0:f9:1b:45:35:dd:cc:75:9d:
         2f:c5:80:35:8a:a3:29:58:ca:bc:4c:79:75:98:02:76:60:c9:
         11:1e:21:6e:29:0f:56:55:21:c0:f8:fc:dd:ec:79:d3:8d:bd:
         8f:85:8e:4a:29:89:95:fb:a8:74:84:69:44:58:85:b2:2e:4f:
         ba:83:b5:7c:33:9f:9d:36:e8:8d:bd:04:cd:c1:2a:7f:6c:70:
         8d:71:8e:4e:0f:1c:59:00:34:34:99:61:53:16:d6:f5:17:e7:
         4e:97:ba:b0:26:10:18:6b:4c:eb:f4:e9:32:2f:12:25:3d:7d:
         13:70:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----