Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fa0e1f6a-e413-3c51-89cc-0f1dd0b7c585.roa
File:                     fa0e1f6a-e413-3c51-89cc-0f1dd0b7c585.roa (raw, json)
Hash identifier:          ljQ7lIzAjvLPWIp9gWjOPnhHOyc1wmz5l6oTR2jjdNU=
Subject key identifier:   13:17:24:67:B3:E4:06:3F:E7:42:99:41:88:78:E5:B1:19:4F:69:AF
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CF297EF56A276F5271C519000
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fa0e1f6a-e413-3c51-89cc-0f1dd0b7c585.roa
Signing time:             Tue 15 Feb 2022 05:00:00 +0000
ROA not before:           Tue 15 Feb 2022 05:00:00 +0000
ROA not after:            Thu 17 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f2:97:ef:56:a2:76:f5:27:1c:51:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb 15 05:00:00 2022 GMT
            Not After : Feb 17 05:00:00 2022 GMT
        Subject: CN=d157f71d-1e30-46e2-8974-6534099bd74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:24:d3:8f:c3:82:88:1e:84:47:81:6f:b2:
                    e8:ca:30:83:6d:f5:6d:06:5b:1d:61:09:26:50:a6:
                    7d:cb:33:ec:dc:45:c3:11:27:dd:10:6d:69:2c:c7:
                    d5:c2:c0:e0:95:e1:a6:f0:5e:fa:c9:b8:d6:da:ed:
                    07:5e:39:24:51:65:9a:1a:cd:45:6d:c0:1e:0a:16:
                    06:43:4c:8a:b0:49:97:d2:c1:33:25:8b:b2:88:85:
                    2b:03:90:17:1d:d9:b3:c8:ca:42:71:3b:c7:d1:1f:
                    e4:3e:78:45:4b:e8:d9:2e:f7:cd:43:77:7f:2f:1e:
                    63:8f:7d:39:69:5a:b2:32:ad:d3:7c:e7:b6:f7:5b:
                    71:13:bd:58:a9:c4:1b:55:60:c4:11:39:d6:a8:28:
                    3f:f9:8b:fc:b0:0c:94:cf:1c:85:aa:d4:7f:de:33:
                    90:ac:76:77:eb:73:3f:31:ee:75:cb:66:02:07:bb:
                    b5:37:6f:eb:e6:55:fb:57:71:c1:81:99:d3:83:bf:
                    40:da:2c:85:d1:c5:cf:53:a8:ad:b7:41:49:c6:3f:
                    75:75:0e:c4:1f:51:4e:da:7f:64:39:c6:34:41:7f:
                    11:0c:07:fc:2f:f6:f1:74:b8:16:5c:b2:79:6e:bb:
                    66:c8:7e:eb:38:44:31:2b:b3:81:27:67:32:e9:3f:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:17:24:67:B3:E4:06:3F:E7:42:99:41:88:78:E5:B1:19:4F:69:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/fa0e1f6a-e413-3c51-89cc-0f1dd0b7c585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:55:15:6d:4c:3c:c6:dc:dc:0a:0d:48:28:2a:b8:3d:21:35:
         9f:50:6a:f8:d0:06:b7:37:21:42:d5:c2:d4:da:2c:2c:cc:0e:
         da:12:db:85:52:47:39:88:ba:91:82:e3:9b:f1:5c:6c:59:e1:
         4b:26:ed:e7:77:b3:44:5a:6b:83:26:07:90:65:40:0a:46:d2:
         a5:15:16:16:f3:aa:32:a2:74:c0:5b:19:13:08:3b:3f:b1:5a:
         17:d4:72:8d:e6:c7:cf:7f:f0:81:e0:49:74:7c:db:6f:bc:17:
         40:c8:6a:8d:e8:1c:9f:10:6a:e4:44:a8:6d:59:31:ce:b5:54:
         3e:f4:70:ae:a6:96:fb:bb:d2:ab:65:2f:1e:95:71:be:67:bf:
         91:37:9e:7f:96:dc:dd:14:db:c0:35:71:45:28:7d:f1:d2:70:
         5b:1d:fd:02:49:bb:ba:37:f1:79:eb:46:ef:76:9d:22:4a:57:
         a8:85:8d:a2:08:9b:42:b6:03:d1:ff:b7:74:d6:1a:dc:56:6b:
         e0:d3:6d:0d:65:7b:d1:b6:41:09:17:bc:89:94:a3:76:d2:13:
         da:ab:36:89:96:49:7a:c4:98:f9:22:92:d2:59:19:43:66:e0:
         e2:d4:d9:5d:4b:d7:aa:ba:ee:3d:44:a8:a4:74:40:0f:50:e4:
         86:9a:9f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----