Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e25a3aa2-5db0-354d-82b3-1799fe5f231c.roa
File:                     e25a3aa2-5db0-354d-82b3-1799fe5f231c.roa (raw, json)
Hash identifier:          s1yfSXCrMvIQ5VvAFEgZxw2m/ZXfDXDjhYBBvf/29hQ=
Subject key identifier:   31:38:AC:38:84:A1:29:3C:16:DF:3D:7A:62:A3:04:11:70:8B:22:B5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E9EADC6B5D20944DD60911480
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e25a3aa2-5db0-354d-82b3-1799fe5f231c.roa
Signing time:             Sun 17 Jul 2022 12:00:00 +0000
ROA not before:           Sun 17 Jul 2022 12:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9e:ad:c6:b5:d2:09:44:dd:60:91:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 17 12:00:00 2022 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=e56203ce-77c7-49a1-9ff3-bcf228de05fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:05:a5:f6:3f:58:3b:1e:f7:72:ef:f8:a4:8c:
                    fb:5a:bd:60:37:fd:00:be:86:19:c8:51:4a:b3:34:
                    56:69:14:43:af:f1:4c:78:82:bf:57:a4:d1:b6:09:
                    79:07:81:ca:0b:4b:b0:a7:1b:0d:58:9b:71:f5:20:
                    60:85:bb:ee:37:31:10:0a:31:f8:6b:60:5c:76:7c:
                    cd:ff:91:b8:aa:af:a5:21:d3:ef:f1:da:d7:60:53:
                    5f:1e:64:98:ee:fd:b3:cb:75:6e:e4:c5:a7:d5:4f:
                    ff:52:39:df:3d:97:8e:c6:a5:74:f9:e8:fd:39:ad:
                    fd:ab:25:72:d9:f2:d8:38:50:8d:b5:e6:b5:b2:6f:
                    b7:09:ae:2e:8e:0c:8f:b5:0a:75:c8:6c:af:2b:cb:
                    c5:50:ad:97:b9:4e:09:9a:d4:be:6f:23:9a:6f:17:
                    6d:54:50:a8:d6:0d:05:2b:69:31:cc:f4:de:67:e5:
                    cd:58:45:88:54:10:08:3b:47:f2:22:8d:eb:c0:79:
                    0b:19:86:bc:e8:e6:a1:6a:57:47:b7:1f:01:e7:0d:
                    94:a1:99:6b:88:0b:be:a8:29:af:a5:41:e8:1c:dc:
                    84:b4:83:58:99:33:be:9d:3e:2d:7f:f1:2c:a6:aa:
                    b8:69:8e:23:0c:66:1a:9b:b2:d0:b7:af:a0:88:5e:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:38:AC:38:84:A1:29:3C:16:DF:3D:7A:62:A3:04:11:70:8B:22:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e25a3aa2-5db0-354d-82b3-1799fe5f231c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:b4:8d:eb:c9:44:52:0b:25:19:dd:63:db:50:61:c7:0b:
         15:39:d0:74:86:10:d2:ba:ee:cb:0a:09:cc:3d:96:6e:58:93:
         cf:ca:2b:d0:17:d7:6c:05:48:ed:ad:40:79:11:b2:08:71:e4:
         d7:f2:ae:bd:8d:e9:42:96:44:b8:fa:ba:75:d5:f4:1e:99:82:
         8e:a3:9a:69:7c:61:67:d0:57:b6:6d:da:19:e7:4e:4b:77:e9:
         68:7f:da:ca:89:70:b2:3c:64:8b:55:7c:61:e8:c9:cc:8e:f8:
         e1:3f:60:5c:8b:bd:e5:30:41:40:40:d1:98:89:d3:da:bf:37:
         0d:81:b1:bf:86:d6:75:2a:04:fb:78:a7:b9:cc:94:35:7f:fd:
         c3:b4:1a:e2:30:34:ce:3f:21:30:b6:18:b2:3b:30:87:f1:52:
         0b:7b:3e:eb:78:73:a5:5f:cf:2a:78:a3:8e:75:16:c9:50:ec:
         af:34:42:66:23:ff:54:85:09:b3:71:4d:18:ff:4a:d0:aa:4a:
         14:f1:34:97:31:fa:db:12:2e:21:ef:29:3f:15:3b:f3:f5:70:
         a9:8a:e2:8a:e2:60:31:b7:90:4d:8e:1f:c8:56:24:f6:12:3b:
         3a:99:76:b4:d2:99:a3:79:ee:33:94:36:34:e4:e1:d2:b3:f7:
         e2:b3:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----