Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eec57b3b-6370-39b7-a88a-040349c8b79d.roa
File:                     eec57b3b-6370-39b7-a88a-040349c8b79d.roa (raw, json)
Hash identifier:          O6lXVog0rCVFsSiQQb+igew1yEGvT7SaZvGgHW+5Mgw=
Subject key identifier:   2F:02:B0:E6:49:98:36:FB:A3:66:07:52:9A:88:7F:AB:3A:97:68:A4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EB7CBBDF5D19B7D43F83C59C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eec57b3b-6370-39b7-a88a-040349c8b79d.roa
Signing time:             Tue 26 Jul 2022 12:00:00 +0000
ROA not before:           Tue 26 Jul 2022 12:00:00 +0000
ROA not after:            Fri 29 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b7:cb:bd:f5:d1:9b:7d:43:f8:3c:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 26 12:00:00 2022 GMT
            Not After : Jul 29 04:00:00 2022 GMT
        Subject: CN=7587bc9c-2e60-4c43-a11d-006addbd4d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:a2:f0:22:fd:2f:d7:49:2c:6b:5f:d6:20:
                    9e:07:ee:84:37:57:1e:ef:4f:74:cb:6b:e5:4a:1a:
                    9f:b7:a9:b6:c3:87:1e:c2:39:d6:24:c7:50:99:0e:
                    17:d8:5d:51:45:21:c0:36:b1:9b:3d:82:1a:2a:69:
                    18:fb:86:f6:c9:15:4c:ff:95:c5:7a:bc:be:42:f4:
                    51:d7:37:12:d9:9a:0f:24:39:0e:48:b5:c9:06:a7:
                    6f:bd:be:0d:b0:0e:93:7c:48:bb:cc:6a:f3:4d:58:
                    4b:71:c2:eb:99:ea:a6:31:34:9d:0a:79:4c:1a:25:
                    83:70:4a:39:dc:d4:9a:43:36:15:ce:8f:ab:0e:82:
                    4c:61:a3:a2:0b:7d:d5:95:86:51:ab:9e:a4:25:a0:
                    53:b4:38:14:33:64:d9:a3:a1:62:48:dc:b5:24:37:
                    c8:f5:4a:f5:9b:d7:50:b3:b0:16:59:55:8a:2c:de:
                    87:58:bf:fe:5d:8d:21:b8:7c:d4:31:80:c9:54:c8:
                    52:96:41:41:25:7a:6a:b0:12:b7:50:6d:b1:5b:96:
                    71:d8:89:21:b5:23:99:e1:fe:5c:fa:31:c1:b1:7e:
                    ea:95:54:d0:ca:43:94:d8:33:5b:5e:73:cf:64:5a:
                    d5:e7:c0:ef:22:81:74:8c:b8:88:a9:c6:a9:f1:f3:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:02:B0:E6:49:98:36:FB:A3:66:07:52:9A:88:7F:AB:3A:97:68:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eec57b3b-6370-39b7-a88a-040349c8b79d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:55:54:1e:6a:d6:4e:02:0b:0f:7c:4f:ad:20:2a:d6:17:54:
         66:71:75:04:4f:58:c9:e9:df:62:43:78:db:6e:4d:3f:0f:6d:
         65:1b:2e:b5:6c:6c:76:30:b1:2f:00:5b:19:a6:73:a7:c4:2c:
         38:15:20:a2:09:7f:14:f1:8c:26:c1:be:5e:2a:e4:b3:5a:92:
         5f:35:15:a8:3e:c4:c0:ae:e5:86:34:ec:08:ed:d8:fc:83:ce:
         b4:01:a6:74:47:bd:21:ee:1c:13:77:17:9b:cf:f9:1f:85:2d:
         22:e0:f4:76:c4:ef:6a:39:7e:2f:43:49:39:9b:e8:18:18:63:
         e2:93:b0:da:ca:97:a4:a5:f9:c3:2f:62:ba:2e:77:d0:6a:1e:
         28:99:3e:fc:e3:c3:c3:85:43:1e:8b:1d:ed:b8:6c:63:e3:b2:
         79:33:15:2a:b9:34:64:a2:82:d2:b6:b9:77:24:d0:e5:94:32:
         48:c4:09:4f:8c:c7:15:7f:20:c9:59:ff:9c:19:c4:c8:20:08:
         86:1f:21:a5:d3:6f:71:2c:94:6c:31:cd:4e:99:fd:bf:34:03:
         e8:04:fa:45:16:ce:9d:42:91:00:0f:35:59:fa:44:e3:79:b9:
         3f:b4:e1:d3:5e:17:3f:d2:97:94:40:11:73:26:c9:b5:17:c7:
         94:59:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----