Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f87b5715-6c67-39ab-a462-06bf60475877.roa
File:                     f87b5715-6c67-39ab-a462-06bf60475877.roa (raw, json)
Hash identifier:          H1JzwWfTiHWtjj9OgVOmQ4tGzE5xqqFqS/1Jnx5Dtjw=
Subject key identifier:   B3:78:45:8F:53:93:BB:5E:B3:51:92:5B:DE:A3:16:62:F5:B7:64:31
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583DD62211AD3784361775ABE000
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f87b5715-6c67-39ab-a462-06bf60475877.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Mon 09 May 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d6:22:11:ad:37:84:36:17:75:ab:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : May  9 04:00:00 2022 GMT
        Subject: CN=d17a8ffe-af26-4e8d-8e61-64b96bbb104e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:a1:f4:8d:1a:ad:ee:67:50:b1:aa:a3:0b:
                    77:48:36:32:07:27:b4:c5:6b:12:14:8b:eb:aa:67:
                    61:a4:19:5b:95:a6:06:bf:0f:47:0b:2c:86:3e:f5:
                    76:91:01:96:f6:bd:16:8f:28:a8:d8:b6:69:97:81:
                    bb:c1:ac:e0:9b:3c:20:a2:e3:00:7e:bb:8b:fa:7f:
                    33:40:d0:5c:4d:c2:bc:2a:ba:06:f4:74:51:af:39:
                    93:25:f0:dd:0d:8d:02:74:80:b2:37:d1:59:10:09:
                    09:db:48:1c:c1:1f:5f:07:3d:28:18:14:28:c1:0a:
                    17:06:45:09:93:88:1d:6a:84:9f:92:0b:b0:4d:d0:
                    96:24:4d:0d:c5:ea:60:3b:57:5e:a2:cc:bc:07:38:
                    99:74:10:ac:1a:ac:85:32:bb:c8:d0:ca:cf:46:64:
                    c9:b0:ec:55:06:f6:43:c7:c9:8e:26:50:85:2a:19:
                    f1:71:25:90:29:4e:d7:ac:76:22:11:9a:59:1a:ca:
                    9a:9f:a0:f3:81:00:c0:b8:ea:6b:e5:7d:16:3b:53:
                    76:61:d8:8a:7b:79:e3:3d:b9:15:1c:bb:98:85:b2:
                    61:13:c5:a1:e5:41:bd:ca:5d:7d:d2:02:26:be:e4:
                    17:c7:62:ef:c7:27:0a:5f:ca:e2:5e:0b:8d:94:c7:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:78:45:8F:53:93:BB:5E:B3:51:92:5B:DE:A3:16:62:F5:B7:64:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f87b5715-6c67-39ab-a462-06bf60475877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:a5:b6:a6:cf:18:d3:9a:c5:78:9a:60:1e:e7:75:7e:41:
         96:4b:ef:1c:54:ec:d0:a6:2f:93:ba:60:eb:45:78:54:f8:cb:
         77:c4:60:38:cf:5d:d7:04:85:45:c0:95:20:92:91:73:dc:f2:
         38:f1:f4:63:f4:de:78:b9:6a:82:4f:8d:d7:90:07:89:0b:1b:
         ea:e7:93:5c:09:10:ee:12:25:67:2d:d8:ab:ca:22:0c:48:f6:
         d9:c0:50:79:56:c4:6c:5d:43:03:90:6c:07:62:8a:37:83:94:
         6c:6c:f2:41:c1:1a:9a:5c:dc:e0:d4:54:e2:cd:0c:01:ef:6a:
         99:cd:41:b9:6f:6b:c8:ff:ab:39:a6:cf:9a:b8:b2:07:04:d5:
         cf:b1:66:6e:6c:df:fb:4b:38:cb:75:1d:29:f5:f0:ca:aa:f9:
         ed:58:fc:df:58:a9:e6:d7:e6:b6:a7:01:c7:11:98:b1:ed:a6:
         a8:ec:3a:f3:5c:61:15:18:43:4a:70:17:37:12:a9:74:78:b2:
         fb:aa:f8:a5:d1:9a:ee:0e:5b:90:31:5f:7d:fb:02:74:3f:1f:
         04:96:11:00:19:e6:d6:06:bb:86:25:f8:cf:25:36:7d:cb:b3:
         e0:e0:60:77:4f:cc:c6:f1:d8:4c:24:f3:6c:59:ef:44:c6:13:
         e3:4e:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----