Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e97e6368-9623-3d6e-b494-ae62079d7e2e.roa
File:                     e97e6368-9623-3d6e-b494-ae62079d7e2e.roa (raw, json)
Hash identifier:          kBKz29ToAtkZfiy5H63GFqRX2Gn3Wj8q2CxaE99mimM=
Subject key identifier:   63:F8:00:DC:4D:45:B6:4F:C5:21:D3:88:C4:17:71:8F:E5:A0:D2:8E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D23A705AE65F7F47C05AE51F8
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e97e6368-9623-3d6e-b494-ae62079d7e2e.roa
Signing time:             Fri 04 Mar 2022 05:00:00 +0000
ROA not before:           Fri 04 Mar 2022 05:00:00 +0000
ROA not after:            Sun 06 Mar 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:23:a7:05:ae:65:f7:f4:7c:05:ae:51:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Mar  4 05:00:00 2022 GMT
            Not After : Mar  6 05:00:00 2022 GMT
        Subject: CN=f67b4ec7-3692-4668-b451-a09bfd00652d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:77:9b:f0:fe:dc:17:96:a9:ce:ae:6b:38:
                    df:b7:45:5d:3d:99:97:5b:c6:6e:d9:41:d5:d2:66:
                    9b:24:5a:75:60:ee:ab:cb:78:94:08:38:c4:c0:41:
                    91:c9:e1:a1:ca:47:c0:c6:ff:37:36:b2:6e:00:39:
                    34:cf:18:27:9a:e7:08:13:10:a6:cd:8e:9f:1f:6d:
                    9f:ca:b1:0e:fb:e5:91:82:6a:f6:c3:09:6c:01:5f:
                    0a:eb:43:11:1d:0a:56:f9:e4:23:04:51:be:71:8a:
                    ed:92:5e:7d:89:a1:c2:8f:42:5b:2c:55:1d:99:d8:
                    d5:ab:0e:31:b9:42:45:79:a4:fe:e4:49:35:e4:c6:
                    65:4d:6b:05:fe:44:34:cd:85:6c:16:fa:9f:81:cd:
                    73:96:1c:ea:51:da:50:f4:3b:33:84:28:c1:2e:1a:
                    80:24:dc:a3:14:28:9b:c0:7b:4e:4b:1f:48:51:67:
                    ed:04:df:85:7c:83:03:5b:ef:4f:d3:d8:18:8f:f4:
                    15:dd:36:8b:f8:1a:42:94:f0:9c:31:57:c3:b7:ac:
                    da:31:db:15:c3:20:c5:f1:53:20:f9:1c:bd:e9:d1:
                    79:4f:22:5a:f1:0b:45:ac:3c:e4:45:23:e3:e8:82:
                    b5:1b:6f:53:6f:94:07:52:d5:dd:86:f8:37:0f:41:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:00:DC:4D:45:B6:4F:C5:21:D3:88:C4:17:71:8F:E5:A0:D2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/e97e6368-9623-3d6e-b494-ae62079d7e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:d6:63:3a:94:7f:b2:5d:8b:0d:42:7f:1d:5d:14:42:0a:
         37:a4:ea:b4:72:19:52:df:64:9c:e5:cd:b1:b0:ae:98:a0:17:
         2c:25:57:2d:db:ab:70:b7:a2:92:52:35:39:61:da:a1:c0:32:
         76:95:c1:b7:f1:04:cb:76:06:7e:61:dc:88:93:19:a8:45:64:
         41:ce:3b:0f:d1:c3:0a:33:62:a9:f6:e1:6b:38:f6:7f:3b:82:
         6f:71:1e:9e:77:25:6d:6a:5a:7c:e9:f5:2e:aa:27:b5:ce:d6:
         07:ab:be:d4:18:04:3b:99:bc:a0:c9:5e:a0:d0:8b:84:b3:d9:
         52:92:39:af:7f:b0:17:ca:aa:70:2c:16:f9:9e:4c:f4:12:43:
         67:96:28:1a:fc:69:29:61:00:67:9f:08:ec:48:58:aa:a6:77:
         34:0c:09:13:95:b3:22:85:6e:6d:63:d8:bf:9e:d3:c7:f8:dc:
         9b:c6:1d:53:d8:e8:9e:d2:54:59:14:57:cf:c0:68:8a:8e:88:
         42:8f:43:58:b0:2b:09:50:59:72:74:06:39:53:b2:b1:9d:c9:
         c9:fc:45:a0:13:58:87:03:7a:bb:0d:98:c6:07:9e:6e:50:47:
         a1:19:da:fd:f8:a7:ff:7e:b3:29:18:c3:af:ee:81:e3:42:d0:
         c7:ac:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----