Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/01aa2ea4-ea73-3690-8505-342428ad4747.roa
File:                     01aa2ea4-ea73-3690-8505-342428ad4747.roa (raw, json)
Hash identifier:          OEUyo9qw0EOGq7ozdEWmxxV7gnYiPe3xjcadUmA9lvg=
Subject key identifier:   C2:5A:B4:67:75:37:AB:BC:24:7D:49:B1:78:64:7E:26:CE:6C:EA:24
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584001F717E6F738B2B86AF988C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/01aa2ea4-ea73-3690-8505-342428ad4747.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:01:f7:17:e6:f7:38:b2:b8:6a:f9:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=0e0859cb-afd0-4650-b636-5202095c28c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:6e:25:b3:56:01:8b:79:b8:5f:36:cf:bd:
                    2f:af:b2:f7:e7:26:64:52:2f:48:28:ce:1e:d7:bb:
                    4b:e5:fa:7a:e0:0f:99:27:83:3b:70:4b:3d:b1:c9:
                    a3:42:c3:30:ca:a4:f0:0a:a8:58:39:a9:5a:0d:da:
                    71:1f:24:7e:d7:de:91:f0:3a:d9:08:4e:78:16:45:
                    6d:58:3f:95:5d:43:ad:94:9b:97:58:a5:62:ce:d5:
                    86:7d:70:44:55:04:f5:fb:cc:3f:17:12:8c:56:b6:
                    20:26:1c:2c:5a:6d:d0:7e:8c:47:67:91:d7:b3:82:
                    93:9a:e4:01:5a:38:bb:31:9c:3f:5b:bf:cb:8f:b2:
                    40:b4:12:28:2b:5e:b6:bb:0b:d4:8e:c6:ed:33:17:
                    65:3e:57:09:22:b7:7b:03:15:df:54:bb:6c:83:76:
                    bd:f6:12:bc:1d:59:74:32:7d:a2:70:a5:5c:78:b1:
                    5e:c3:00:80:5a:67:e9:5c:4b:b4:04:d3:85:c0:75:
                    ff:00:2a:6f:70:20:61:70:17:78:2b:5f:a2:24:b2:
                    50:de:a1:04:0a:80:8c:75:98:a1:c0:7f:08:32:dd:
                    46:a5:a8:50:52:3b:12:16:e1:68:4c:fc:8c:25:f4:
                    94:58:24:32:09:20:c9:1c:47:73:75:d2:70:aa:00:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:B4:67:75:37:AB:BC:24:7D:49:B1:78:64:7E:26:CE:6C:EA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/01aa2ea4-ea73-3690-8505-342428ad4747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c7:8a:b2:4d:bf:04:2e:10:8a:5b:36:16:9c:73:f1:c5:46:
         3b:b2:ad:48:b4:11:15:58:b8:14:2c:0b:89:1a:f6:a5:25:be:
         88:5a:90:ff:47:cb:c0:d8:98:1a:30:aa:9b:24:1f:44:2e:37:
         24:f4:11:38:96:14:3b:58:4e:27:5b:b3:bf:88:f2:1f:2a:67:
         64:de:ee:21:99:1d:a8:8d:c0:bd:c7:64:30:6e:6f:c7:52:67:
         77:d6:34:0a:f2:5d:46:82:d4:41:21:53:42:c0:ef:e7:b6:6a:
         05:66:00:05:3a:c3:90:83:17:3e:82:38:30:a0:0d:48:f7:b0:
         f3:c6:d8:ec:75:6a:1a:89:c7:dd:81:10:a9:fe:7c:f8:14:3a:
         d7:07:ae:19:d7:2c:fc:1c:76:ec:06:21:44:c0:b7:65:fb:c8:
         5c:3d:be:23:77:74:90:39:19:b4:04:02:49:81:de:77:ad:e7:
         e1:d7:81:c3:eb:e7:7b:68:ac:6f:ec:38:a5:75:53:cf:2e:78:
         ff:b3:5d:7e:f4:e3:48:c1:14:2b:a3:c6:4a:5f:1d:8a:0b:0b:
         77:a6:fe:a5:e8:53:b2:c7:8e:f1:df:6e:12:3f:f6:9d:60:b6:
         9d:a8:67:28:5e:c8:35:08:92:44:31:8a:ff:da:97:10:26:90:
         5c:01:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----