Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e3ca0484-04aa-30c4-9b0c-0a34f8cf2285.roa
File:                     e3ca0484-04aa-30c4-9b0c-0a34f8cf2285.roa (raw, json)
Hash identifier:          pxZSEPQUGCgpZK3R9/HVPpDE/C7WX6Gm1+l/NdhLfcM=
Subject key identifier:   2E:52:A3:6E:03:0B:49:8A:7B:27:99:DB:BA:A9:67:8C:F6:D2:02:FD
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E414D653FB1D9E13B888E8700
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e3ca0484-04aa-30c4-9b0c-0a34f8cf2285.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:4d:65:3f:b1:d9:e1:3b:88:8e:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=a0470b72-422d-4307-bb99-6df887c743fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:f6:0e:c2:df:c7:79:73:d8:1f:cc:b3:4e:
                    af:24:6d:cf:5d:b4:37:7a:4c:73:b2:b9:80:a0:f3:
                    dc:3b:5b:e9:7a:77:da:5b:be:fe:d5:44:a3:d6:b0:
                    9c:3f:97:54:57:7e:cb:20:eb:e3:b2:53:f9:36:e1:
                    9d:69:ca:4d:d8:87:d6:11:5f:07:a2:0a:c4:db:6d:
                    84:1a:42:68:a3:59:43:54:5f:91:d3:d0:37:cd:9d:
                    62:d4:8d:fb:b9:48:96:1e:60:bb:71:4f:4c:b7:9d:
                    2c:ef:c2:25:57:f9:15:4f:ff:ef:26:af:8f:7f:a6:
                    b5:1d:1c:0a:4c:b7:bb:59:dc:c8:57:15:58:75:19:
                    ed:ff:61:8a:1f:34:e8:60:d0:b6:ba:f9:a5:7f:44:
                    50:e7:5a:1a:18:dd:b5:84:df:79:a1:7f:e6:1e:24:
                    c2:09:d6:81:fa:1c:5f:29:62:db:18:d6:a8:1c:7c:
                    aa:03:86:14:77:f2:6a:44:76:0f:93:eb:8f:94:76:
                    50:44:02:50:ae:49:eb:97:1c:01:0f:17:14:c7:24:
                    03:6f:c3:70:51:83:0c:74:0e:99:ef:4e:95:98:25:
                    34:e6:54:7e:dd:d5:15:aa:72:91:57:af:d5:8b:ef:
                    34:ab:1b:03:cb:f6:f2:a1:1e:8b:f8:7f:5c:3a:0b:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:52:A3:6E:03:0B:49:8A:7B:27:99:DB:BA:A9:67:8C:F6:D2:02:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e3ca0484-04aa-30c4-9b0c-0a34f8cf2285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:70:23:cd:0a:97:02:44:79:8b:f5:24:e6:b0:c6:6f:28:d9:
         d2:0f:66:ce:4f:b6:36:46:a9:d3:15:a7:26:a8:86:32:f6:9b:
         f8:1a:36:d1:89:1f:dd:9a:0c:0c:97:87:b0:4b:92:7e:fb:dd:
         52:3f:76:e6:c2:93:55:bd:66:25:52:82:e7:a2:73:57:db:f1:
         a3:3e:ea:0b:de:7b:4b:34:97:47:7a:5f:be:f4:62:d1:7f:11:
         25:7f:76:7c:f1:25:06:2d:33:d7:e3:47:d1:c4:44:f9:a2:92:
         90:49:34:17:30:51:06:5f:b3:27:83:12:ec:9d:47:80:6e:90:
         6a:75:b3:c2:a4:27:90:24:0e:1f:72:60:fa:a3:c3:3f:db:49:
         8d:bb:83:39:d7:93:e7:f0:00:22:8d:52:b1:2f:74:65:c0:41:
         23:26:db:fc:b9:35:46:19:85:7e:7e:e6:f0:93:3b:29:25:63:
         7e:e4:45:4d:35:94:5d:e2:99:12:a7:76:cb:d3:3e:56:d2:dd:
         cf:a9:b1:1e:f5:e2:0f:70:3d:26:86:d2:d3:d5:6e:8c:e0:75:
         fd:65:48:80:f6:75:7d:64:10:38:e1:80:b7:e3:57:70:9d:b9:
         65:ce:6e:5d:d0:8a:01:c9:1e:57:79:31:4b:07:5e:70:70:72:
         d5:b1:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----