Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/00e1a9ce-92bc-3db7-89e0-027405fe131c.roa
File:                     00e1a9ce-92bc-3db7-89e0-027405fe131c.roa (raw, json)
Hash identifier:          4lgLP3Xsrjdiq3hfrPJ2LyOqI7nhAIXvHaRlR3PW7xU=
Subject key identifier:   77:EC:38:55:78:AC:D8:75:EC:37:62:83:67:F9:41:08:AF:E4:00:0E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F74DEDF369EE20D5AD5D83200
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/00e1a9ce-92bc-3db7-89e0-027405fe131c.roa
Signing time:             Sun 02 Oct 2022 12:00:00 +0000
ROA not before:           Sun 02 Oct 2022 12:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:74:de:df:36:9e:e2:0d:5a:d5:d8:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct  2 12:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=260a986f-a1d0-4666-8371-6a9006fd9c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:71:d2:13:bf:9f:f8:4d:e4:d6:e1:74:45:
                    54:c7:d9:66:22:d9:eb:bb:32:7e:c7:5d:df:f6:9e:
                    41:22:32:d0:a8:92:02:f5:46:16:e4:f7:23:cd:93:
                    6b:28:62:8f:c9:91:69:8a:4d:4a:6f:83:17:e0:56:
                    3d:15:64:43:6f:1c:86:39:38:dd:35:1d:e5:2e:6c:
                    bc:9f:76:8b:b9:07:7c:c0:47:02:65:cd:99:f6:a7:
                    1f:1b:0a:9b:42:66:47:ab:7b:22:b6:12:45:6a:38:
                    1b:f1:75:8b:e8:c3:f5:7e:6d:43:9e:0e:01:71:8d:
                    bf:ab:dc:d9:86:75:c0:92:95:fa:cf:fb:ac:96:c0:
                    15:eb:e2:de:d2:40:d2:1c:b1:81:e8:0e:00:7d:2f:
                    c6:8f:af:b6:93:d4:3d:37:04:3e:28:40:2f:d5:8a:
                    1f:f0:6b:27:b8:2e:7b:44:c4:93:8e:2f:72:c2:b2:
                    79:8d:9b:21:fc:f7:8c:17:e8:f1:72:13:2b:4d:b5:
                    54:55:b3:f2:18:d1:57:d3:e2:2f:75:07:c3:09:69:
                    95:58:0e:d0:26:bf:98:82:40:26:ed:f3:92:99:bf:
                    c6:1c:9a:96:66:53:d3:fd:02:e1:0b:ac:4b:56:65:
                    8f:29:f7:8d:87:cc:fb:d9:1a:33:8e:b7:37:90:ba:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EC:38:55:78:AC:D8:75:EC:37:62:83:67:F9:41:08:AF:E4:00:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/00e1a9ce-92bc-3db7-89e0-027405fe131c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:4c:dd:d0:af:2c:5a:36:90:ee:6d:ca:31:c1:08:08:6b:
         52:17:7b:1b:22:3d:8f:b8:ee:25:d2:9b:97:20:fb:af:1b:bf:
         da:35:05:26:31:f7:a6:15:eb:dd:9d:c7:24:9e:a3:28:b1:b8:
         fa:b6:1f:68:16:f5:b2:96:16:50:32:e7:36:bf:ad:49:38:eb:
         2f:2e:9d:20:68:8f:82:13:7d:a3:fb:3e:4e:28:f8:94:52:08:
         d3:8a:f3:39:c0:fb:63:10:ce:55:45:06:f6:cf:39:f6:d5:2d:
         5e:10:a5:02:21:bb:63:73:c5:62:e1:38:b5:60:79:55:d5:1a:
         c2:23:6c:4c:8a:75:b7:13:23:2d:58:b1:fe:c9:98:76:7f:74:
         47:c2:0a:5d:a3:69:1b:61:8f:97:31:19:5b:58:6b:d4:2e:3a:
         b9:2e:9f:5b:5c:62:9a:17:6a:8e:2c:4e:af:b0:8a:6b:31:58:
         3f:88:0a:ec:f5:9c:fa:46:9a:d1:1f:b0:b9:6d:9e:4a:06:f7:
         5f:25:de:31:74:98:68:40:d5:f0:d5:51:88:04:90:54:a7:96:
         43:43:5f:de:3b:6e:a0:60:3a:00:e5:70:7f:79:eb:3c:fb:60:
         c6:89:59:7b:f9:2e:da:0e:dd:c7:77:95:0c:ed:8f:1b:bc:0c:
         ce:4a:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----