Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d9834728-1840-333d-a793-e295736a8884.roa
File:                     d9834728-1840-333d-a793-e295736a8884.roa (raw, json)
Hash identifier:          4FH6gcpn5JR3M7oTiq7FjEeqFxH3BIPs8wMV2XGagDc=
Subject key identifier:   7C:8E:3D:93:FD:13:BF:8A:3C:22:B1:C0:CD:0A:2B:19:F8:17:F5:E4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D2E8EC4E60473105B574AF900
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d9834728-1840-333d-a793-e295736a8884.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Thu 10 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2e:8e:c4:e6:04:73:10:5b:57:4a:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Mar 10 05:00:00 2022 GMT
        Subject: CN=3c42f95e-9997-4984-857e-6c0961737b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:06:66:8b:8d:72:2e:cb:d5:37:d7:ba:f3:
                    cf:82:25:27:68:d2:c8:c4:51:19:9b:c1:3d:44:1e:
                    78:13:22:45:ba:f2:73:6b:70:50:8e:ed:0f:8c:ac:
                    ef:9d:e6:fe:a9:66:78:0d:50:88:33:a1:31:d4:c9:
                    6e:b1:f3:f4:13:7c:0b:37:85:4f:6b:19:34:70:11:
                    99:f8:b6:f9:15:da:cd:24:93:94:55:31:f8:e1:c4:
                    c1:ea:ed:dd:e1:3b:66:29:9a:ea:ed:c2:26:dd:71:
                    c2:11:39:69:86:2d:09:1f:9d:83:3e:00:ef:b2:95:
                    c1:4c:1f:d7:0e:e3:a4:40:aa:38:b0:10:5a:8c:b1:
                    a5:91:43:35:21:13:ac:bb:da:6d:20:79:1a:9b:5f:
                    65:a7:41:d1:98:f6:49:f3:f7:c4:55:30:0d:67:20:
                    e9:54:56:cd:ef:c7:47:77:62:a1:6b:ff:b9:25:58:
                    d8:2f:54:90:d8:0e:39:eb:a8:44:09:e5:fb:38:05:
                    0d:7e:4b:a2:2e:ce:48:10:1e:1d:e2:87:90:68:8a:
                    c4:62:13:d8:2c:1c:82:38:00:42:9b:03:9b:92:de:
                    95:55:1e:c3:46:62:ab:70:26:44:50:cd:e4:f5:77:
                    db:2e:e0:b1:2a:b7:64:a8:9b:da:38:ad:b1:e1:d6:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8E:3D:93:FD:13:BF:8A:3C:22:B1:C0:CD:0A:2B:19:F8:17:F5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d9834728-1840-333d-a793-e295736a8884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:0b:a4:bb:d1:76:4f:85:8e:fc:35:07:8b:d4:9f:7c:d3:
         e8:12:7f:45:83:a3:08:7a:a5:64:5e:15:e2:4b:bb:b5:e6:b9:
         60:5f:95:41:06:95:1a:58:17:75:7d:51:b3:27:56:69:2f:45:
         a1:ef:ae:0c:40:46:96:21:aa:0b:28:11:03:9f:44:05:98:60:
         7e:87:e9:cc:67:36:37:c1:a1:40:07:09:7a:0d:fa:f3:41:8c:
         83:5a:f9:53:00:f4:32:fc:88:0f:75:92:7e:71:68:cb:a3:be:
         97:8d:34:8c:80:18:f2:32:6b:59:ff:a4:fb:86:f2:20:a9:73:
         fb:63:67:3e:11:9a:64:5f:19:e5:32:85:b6:a1:f5:a9:d3:34:
         e2:72:1e:48:5d:58:4f:42:3e:3c:d2:f8:04:53:4c:64:a1:bb:
         15:db:30:d7:f2:70:f9:3b:84:8c:cc:a7:60:db:19:55:2e:a3:
         4d:39:50:e9:b5:ce:31:3e:c1:57:71:85:6c:b2:95:37:4d:7a:
         31:77:58:b8:19:81:b7:05:c0:8a:f4:bf:e7:a3:10:32:ca:dc:
         b7:98:cd:0e:de:eb:1e:1f:73:b3:27:90:ea:d1:ce:3d:2a:71:
         f9:0a:1f:bd:1c:cc:5a:eb:8f:86:d1:d6:e0:6a:66:8b:37:41:
         37:b3:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----