Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/013f2bd6-163a-39af-a92b-3216d92aa964.roa
File:                     013f2bd6-163a-39af-a92b-3216d92aa964.roa (raw, json)
Hash identifier:          sJTus+se7qgZBeA+Uw3Z5SQX5YaKT+NZ0SKpws8hjO8=
Subject key identifier:   2E:FF:AC:BF:20:FE:82:1E:AE:0F:62:F5:38:3F:9C:D2:90:CA:A6:DB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB4FE0EEB23D5842E441E7780
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/013f2bd6-163a-39af-a92b-3216d92aa964.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:fe:0e:eb:23:d5:84:2e:44:1e:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=ab3986cc-3063-4622-ab38-65cef0f0c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:ed:90:88:63:de:66:02:0f:a2:74:cf:de:
                    c0:5d:6b:9e:7c:3b:38:9c:28:00:90:6c:3f:c3:8c:
                    37:8a:10:14:12:37:d7:42:44:c2:aa:a4:51:5e:e4:
                    53:b7:ba:39:92:d7:8b:0f:1e:bb:1d:0e:92:16:a4:
                    67:41:d6:31:89:3e:b3:24:38:c9:bd:f4:76:2b:b8:
                    17:0d:fe:bc:7d:eb:89:5c:5f:f9:df:47:23:48:e0:
                    99:88:ca:26:90:79:3b:4a:35:48:1e:19:e8:b8:67:
                    00:63:b4:8e:70:dc:21:e1:48:e1:17:a4:74:3f:98:
                    14:5a:f6:8f:37:a7:66:54:96:65:84:3f:b7:9d:1a:
                    12:74:b8:0c:e7:c6:65:bb:86:da:8e:f8:6c:81:db:
                    8e:7e:d7:93:8b:7e:91:2f:e7:33:02:dc:70:8b:b2:
                    21:a2:43:63:4e:2f:70:24:0a:90:7b:08:b1:dd:54:
                    6e:94:4a:b9:b3:45:13:85:26:a6:fe:32:f6:34:12:
                    5f:c7:90:2e:9b:4a:20:2a:bb:62:2a:bd:04:66:ab:
                    a2:68:87:ff:ff:03:e0:5a:eb:46:ff:81:d2:54:f1:
                    2d:70:9f:3a:25:fc:a1:59:a0:59:5a:a8:3c:5d:97:
                    56:fe:cd:dd:e8:66:4f:e8:73:c3:c1:8a:d5:11:d4:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FF:AC:BF:20:FE:82:1E:AE:0F:62:F5:38:3F:9C:D2:90:CA:A6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/013f2bd6-163a-39af-a92b-3216d92aa964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a3:0c:b9:3e:d1:64:12:8f:aa:69:0d:17:43:20:54:49:d6:
         22:ef:f0:48:93:86:16:d8:91:ec:e5:b6:b2:13:c2:db:b4:f3:
         f6:47:8a:05:6b:53:7d:c2:d8:af:c8:e5:81:f8:6b:1c:39:2f:
         63:0a:45:1c:b0:f4:0b:5d:93:f8:b2:b4:ec:24:a5:d8:57:56:
         55:bd:34:8c:2b:cb:01:fd:d6:6e:a4:0d:ee:c8:76:61:ec:e3:
         61:21:1a:f2:af:2d:e7:15:fb:00:8d:b7:bf:d3:8d:3f:75:4b:
         fe:61:34:58:be:f9:16:f3:df:52:88:10:55:43:94:80:ff:ff:
         5a:22:06:7a:7f:a6:53:1f:6b:3e:a2:81:7c:f2:67:5f:6e:e7:
         1d:ad:9b:05:10:f7:02:08:92:8d:0b:51:c3:5a:cc:7b:88:a2:
         4f:ee:f9:fa:7d:26:4f:04:21:8b:79:cb:f3:b3:52:24:10:31:
         d1:fb:41:c1:f7:30:d0:1b:36:a1:4b:98:d4:2f:41:6f:96:bd:
         f1:6b:ac:d5:d6:be:89:2a:9b:b8:68:0a:9f:cc:ef:50:55:17:
         d1:6d:46:7b:34:6b:02:8c:de:fb:e0:9c:4a:92:b1:46:f5:9f:
         14:06:79:61:6e:aa:4a:4f:d6:4c:77:9b:3b:db:10:fb:b2:ee:
         6c:5d:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----