Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f29ccd40-f17b-328d-b312-d0f5311bea2d.roa
File:                     f29ccd40-f17b-328d-b312-d0f5311bea2d.roa (raw, json)
Hash identifier:          Zs/DXJis4no3ZQUXma8MjjQ21v3RluHFt6TbKDNnAag=
Subject key identifier:   62:43:9C:8F:14:B6:E6:41:C9:27:0D:98:A8:85:86:66:64:F5:67:CC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E6924837261A6662CE1E1B740
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f29ccd40-f17b-328d-b312-d0f5311bea2d.roa
Signing time:             Tue 28 Jun 2022 12:00:00 +0000
ROA not before:           Tue 28 Jun 2022 12:00:00 +0000
ROA not after:            Fri 01 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:69:24:83:72:61:a6:66:2c:e1:e1:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jun 28 12:00:00 2022 GMT
            Not After : Jul  1 04:00:00 2022 GMT
        Subject: CN=24c54390-812b-4ebe-b643-ea4ed34616a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:16:a5:56:0b:09:48:71:9a:6d:9f:37:36:
                    16:fd:29:05:24:a2:73:0b:b3:2f:e6:21:39:4d:50:
                    40:1b:9e:33:13:b9:5e:d2:fc:2a:b5:ab:b0:1a:4e:
                    15:6b:63:ba:31:b0:54:eb:aa:b2:bb:b8:98:86:8a:
                    c5:f6:c8:56:48:ce:5f:e5:77:4c:fe:9b:25:4d:3a:
                    4d:b9:4d:36:df:92:9e:c0:27:e3:a0:f4:fc:0b:fb:
                    3d:d8:bd:7d:ef:0b:35:b7:14:d8:f4:82:29:aa:6c:
                    11:ec:85:b8:84:6b:13:63:27:d0:8a:a3:2f:2e:2f:
                    13:0e:e0:c5:d5:c5:45:5b:ea:b4:5a:36:da:52:c0:
                    1b:b4:1d:87:36:4e:c1:90:f4:da:3d:90:c0:41:88:
                    65:4f:9e:3e:ef:7b:d3:ca:1c:7e:2f:ba:9f:81:37:
                    d1:28:ba:49:47:66:b6:b9:36:84:44:3c:00:de:81:
                    99:ae:fb:5a:12:3b:a9:ce:a3:12:72:77:2c:b3:b8:
                    73:30:db:c6:01:0b:03:2b:b1:80:ed:76:6f:4d:23:
                    a0:a1:c6:ba:a3:eb:21:44:ae:bf:fa:eb:b7:3f:67:
                    fa:20:b3:4c:bd:7a:b6:12:18:8f:16:b8:2c:81:86:
                    13:55:3b:7f:89:e3:eb:19:7d:b0:9f:89:04:cf:67:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:43:9C:8F:14:B6:E6:41:C9:27:0D:98:A8:85:86:66:64:F5:67:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f29ccd40-f17b-328d-b312-d0f5311bea2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:8f:b1:55:0b:c0:70:9b:d7:a0:f6:99:70:ac:11:42:29:e1:
         83:0a:12:31:9f:b1:05:a7:99:4f:7c:a2:e1:71:19:a3:ee:9d:
         0a:75:dd:71:0c:e7:62:e9:e2:86:9d:64:db:5c:5f:05:dc:cc:
         2e:4d:a2:fb:c6:bc:4a:30:61:5b:b6:94:45:d8:53:33:a8:0f:
         b2:3e:42:8c:32:d7:85:55:dd:c4:84:14:f9:77:74:c6:d9:0e:
         ba:c3:9b:11:79:11:bb:34:b0:a0:87:64:d3:7a:89:73:62:b7:
         ce:9a:11:68:05:39:bb:fe:5d:50:b0:1d:a6:6e:fe:95:a4:07:
         4f:21:5d:da:89:81:03:21:3e:44:27:b5:26:4b:46:60:c2:08:
         4a:f7:71:8f:97:a7:d8:31:6b:d1:85:86:1f:fc:ed:42:99:10:
         7f:1a:80:37:32:ce:64:7a:14:48:9c:9c:4b:0a:60:e3:f5:5c:
         2a:1c:6a:1a:1a:f9:28:ca:6e:73:ce:2a:76:e5:65:17:0b:ca:
         b9:53:c4:aa:51:a9:76:ed:78:a2:af:28:a6:b4:55:05:3e:b6:
         a5:2c:20:92:c2:bb:70:1d:8e:94:27:20:5b:2e:6a:78:8d:33:
         94:9a:00:d3:32:f4:d2:f1:88:53:63:3b:43:cb:ff:1d:df:39:
         0c:73:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----