Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e7ea36f9-8fd2-3e32-83c7-730e52975165.roa
File:                     e7ea36f9-8fd2-3e32-83c7-730e52975165.roa (raw, json)
Hash identifier:          SdD8GNvK4DLVCBt7qzXhCjc6yCjr9Hm9GMiSmO9rOeQ=
Subject key identifier:   76:57:2F:FB:62:B3:AB:F2:18:A8:77:3B:5F:92:6B:EB:B1:98:80:A1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E59B18D42D208F983016C9260
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e7ea36f9-8fd2-3e32-83c7-730e52975165.roa
Signing time:             Wed 22 Jun 2022 12:00:00 +0000
ROA not before:           Wed 22 Jun 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:59:b1:8d:42:d2:08:f9:83:01:6c:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 22 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=42e52df6-6edf-400d-b06b-7459b6a7ac2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:9e:a6:93:99:66:13:dc:fb:cf:0e:5a:0c:
                    6c:46:d4:65:f9:d7:37:ec:5d:5d:85:70:01:0d:99:
                    80:b6:b2:27:11:71:e2:3a:80:ce:8f:49:e0:d8:b6:
                    d0:01:b4:1f:b9:96:a7:b8:3a:ad:83:0d:12:4b:78:
                    f0:14:9b:33:61:05:84:c1:89:bc:d8:ab:2d:0f:6a:
                    c8:9f:b2:d1:f8:a4:0e:28:85:a5:b5:40:aa:32:1b:
                    77:e0:9d:71:20:9e:b6:8b:10:60:7a:7f:93:b3:ca:
                    10:7a:9e:23:37:31:af:b2:6e:58:6f:d4:36:ef:7a:
                    57:fc:ac:6a:21:51:2c:da:66:8d:46:1c:41:41:40:
                    8f:ee:47:9d:7d:a7:f5:0b:0e:3c:48:ee:74:a9:31:
                    80:53:72:26:67:46:b2:11:2a:0f:21:45:f2:39:2b:
                    ad:ed:63:ff:6b:3e:37:63:ef:9c:f2:92:22:b5:8a:
                    06:3d:b3:cd:c9:60:53:c1:3d:b2:85:8e:a1:b1:f8:
                    1c:7b:77:e7:17:57:cf:9b:62:4f:1c:5a:ff:cf:81:
                    a5:c7:bc:c4:fa:2e:66:22:1e:bc:5d:56:8b:bb:f6:
                    c5:c5:50:43:84:dd:21:55:62:c5:be:1f:72:4e:69:
                    b9:f0:da:f7:34:62:b9:0b:19:c4:b9:a7:a1:3c:0f:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:57:2F:FB:62:B3:AB:F2:18:A8:77:3B:5F:92:6B:EB:B1:98:80:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e7ea36f9-8fd2-3e32-83c7-730e52975165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:9b:b8:af:4e:73:10:ff:07:8b:f2:c8:0e:5b:70:b5:87:
         c7:c2:95:dd:29:3f:46:72:d8:68:34:d3:58:74:e6:2d:bc:79:
         62:4e:a4:b0:21:2b:72:50:89:cb:63:7f:08:59:bc:05:0b:27:
         6c:16:81:79:bb:60:87:ae:32:00:c0:fa:d7:61:78:f0:09:1e:
         ab:ba:d7:52:35:c5:0f:f4:9c:f9:ff:be:02:b1:6e:66:26:fc:
         b0:57:27:56:81:2e:23:78:af:59:18:85:75:65:9b:47:fd:d4:
         4b:15:01:bc:90:b3:d6:8c:92:c0:62:3d:2b:93:57:14:28:5d:
         04:c2:df:0f:b2:15:45:66:11:9f:a8:47:6d:39:fe:17:63:a3:
         7c:be:d7:60:11:e9:1c:33:e3:98:e9:38:09:81:72:77:68:e5:
         b1:23:4c:7a:ac:76:69:63:00:d9:32:48:dd:93:e5:3c:5b:0d:
         b7:86:05:61:b3:d4:b0:bf:91:60:fe:8e:77:96:5e:f1:fe:6f:
         e8:f7:0b:6f:e5:4e:0f:0a:ad:1f:0c:ef:27:d2:e3:4b:cc:14:
         bc:b6:3c:17:5f:3b:9f:f1:15:07:9a:b3:16:19:d1:f3:85:a5:
         11:f8:44:4c:6f:82:97:14:1d:a0:94:f2:3e:6c:0f:18:4f:7e:
         a4:99:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----