Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eac26a13-502a-392f-9eab-277e38f95456.roa
File:                     eac26a13-502a-392f-9eab-277e38f95456.roa (raw, json)
Hash identifier:          iMjWigDAPMEh+9rDkvrj0srOvQ6o9bjDAnUeDVLbYwM=
Subject key identifier:   DA:5A:01:DE:FF:29:0A:DB:3C:4F:2B:41:25:12:D6:A6:62:B2:06:B1
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583D7A7CA7AA32577FE3CEC14400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eac26a13-502a-392f-9eab-277e38f95456.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Thu 07 Apr 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:7a:7c:a7:aa:32:57:7f:e3:ce:c1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Apr  7 04:00:00 2022 GMT
        Subject: CN=afb7528f-b727-4297-a633-cd8a236bd615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:db:de:09:07:03:09:bd:b3:1b:12:4a:14:
                    7f:96:4e:e1:62:8c:95:0d:71:04:72:47:16:5c:8e:
                    74:59:4d:5d:38:95:54:de:44:60:f2:6a:ae:5b:85:
                    bf:a9:bf:52:a3:6d:33:8d:bf:51:24:2a:71:9c:c3:
                    ae:1b:a6:37:65:b7:19:08:35:cc:cc:26:b1:ae:34:
                    00:06:1b:ca:7a:34:6f:db:7c:2f:76:2c:a0:95:81:
                    57:51:c1:f7:7a:9a:f5:1f:ad:19:60:ce:35:87:fa:
                    56:ab:b3:c4:a6:15:cc:ab:26:34:0a:ab:f5:91:bc:
                    02:cd:f7:0b:30:ed:b2:01:ac:e4:93:7a:28:97:b3:
                    5d:15:36:d2:4a:8c:cd:02:45:b8:23:3b:71:2c:f7:
                    b0:8f:03:ee:6b:df:dd:3a:6a:2a:9b:dd:8c:33:b1:
                    6b:9c:1f:6c:f9:00:89:a0:c2:3f:10:65:97:8b:37:
                    39:88:05:61:63:ff:b1:e1:40:0d:fd:f3:2b:60:b7:
                    37:17:b2:7a:02:93:0a:8c:ef:53:5f:77:a4:56:b9:
                    f7:70:ee:53:e8:22:7d:a3:f2:76:e6:b6:73:42:9b:
                    0f:c8:0b:de:e5:b7:cf:78:37:47:94:66:7f:8d:81:
                    a9:15:c7:d4:2e:52:51:c2:4f:fe:47:77:64:bf:68:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5A:01:DE:FF:29:0A:DB:3C:4F:2B:41:25:12:D6:A6:62:B2:06:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eac26a13-502a-392f-9eab-277e38f95456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:9b:86:3c:b8:fc:86:f3:99:e1:d6:b8:8b:c2:47:0d:5a:
         b1:24:80:1e:47:b1:c8:26:ee:a7:33:08:d8:10:73:2b:48:4f:
         d4:de:bf:63:35:f2:e3:12:4a:90:4e:47:ad:8d:c2:9b:a1:85:
         96:e0:51:16:cb:7d:a2:95:6b:ed:8a:9d:8f:6d:42:22:c7:64:
         a4:87:a6:f8:70:49:2c:41:d4:b8:e9:8d:0b:62:e4:79:05:be:
         e3:13:cb:57:91:95:84:56:12:99:0c:94:3f:44:a1:f5:e7:f8:
         26:67:23:ad:49:3e:9d:1b:bd:44:c2:57:95:15:90:dc:91:9c:
         4b:77:56:04:ed:14:a1:e0:2a:bf:78:f9:22:5e:2e:75:67:e9:
         c3:9a:99:f7:4b:4c:55:92:e0:7b:39:c3:23:8c:8c:0e:32:50:
         38:ef:5d:b8:01:2e:55:03:a1:f9:83:d0:5b:47:2f:61:1b:c3:
         67:a4:f2:fd:ac:76:76:6d:72:a1:fd:44:41:b7:e8:fa:54:72:
         e6:c3:54:3c:76:51:07:69:56:14:41:f3:74:bd:8e:93:83:fa:
         55:1c:66:2f:91:de:8f:a9:73:e1:44:0e:5e:bf:74:a9:bc:ac:
         ba:61:78:0c:9d:dc:91:c7:b9:59:c6:80:8c:9e:3a:ea:25:9f:
         bf:04:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----