Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/095a75b9-fe52-30dd-9a62-51d1aa15728b.roa
File:                     095a75b9-fe52-30dd-9a62-51d1aa15728b.roa (raw, json)
Hash identifier:          73Ah00ivgLNIUrCQYTvsFZDlf0jcPXccNRnSJd2B/RE=
Subject key identifier:   90:43:4D:E1:6D:51:F4:5C:DD:21:A0:25:A2:16:0D:55:94:A6:7C:D3
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F1BAD878A8006D10621D2D0C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/095a75b9-fe52-30dd-9a62-51d1aa15728b.roa
Signing time:             Wed 31 Aug 2022 12:00:00 +0000
ROA not before:           Wed 31 Aug 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1b:ad:87:8a:80:06:d1:06:21:d2:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 31 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=82253904-269c-4faa-be80-1214d0ed4c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:39:a6:9e:6c:6f:49:d3:c3:06:48:b8:d7:ab:
                    5f:2a:99:5b:7c:7f:b4:08:ac:ef:7b:7d:7d:15:ef:
                    b5:63:bd:fc:56:63:75:ef:de:59:d2:65:74:a5:a8:
                    8a:20:d9:a7:06:b0:63:12:3c:48:ed:ce:38:eb:d3:
                    93:bf:15:1e:c5:e4:62:9e:79:4a:0e:9a:18:b0:90:
                    45:30:72:8f:40:ce:d6:87:11:01:f7:75:4e:2b:8b:
                    2d:b8:be:c1:19:1d:3b:3e:49:ca:b7:7a:fa:e7:0d:
                    63:95:f0:bc:4a:ed:85:80:23:8f:df:84:11:fe:8d:
                    00:10:94:7e:1e:6e:e4:38:fd:39:cb:65:6d:91:93:
                    b4:83:3f:76:de:a7:4d:04:c6:fb:18:2c:d2:a1:03:
                    a6:ea:b2:8a:8e:6e:a5:c6:60:de:3c:39:ec:24:92:
                    67:88:aa:88:bc:06:24:d2:92:75:b0:3e:fd:d3:b3:
                    e1:74:12:a4:6f:85:03:8d:05:47:f7:5d:7f:dc:52:
                    90:9e:1c:50:36:c6:f5:a0:d9:ca:11:11:c3:27:15:
                    d3:aa:13:dd:40:23:ef:f1:49:58:be:53:ec:77:41:
                    8c:9f:c8:02:d5:c3:36:b9:01:4e:5d:23:b2:2d:d4:
                    f2:cc:32:0b:83:e6:76:c8:6d:94:56:3f:26:10:ab:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:43:4D:E1:6D:51:F4:5C:DD:21:A0:25:A2:16:0D:55:94:A6:7C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/095a75b9-fe52-30dd-9a62-51d1aa15728b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:3a:c3:51:cc:a9:35:5c:db:fb:dd:a8:f8:6f:57:20:b5:cc:
         f3:1d:2c:56:98:85:6f:4d:ff:85:dc:f6:f5:42:93:16:6b:00:
         36:6a:04:bf:44:eb:74:83:3c:e3:20:97:dc:b3:da:fa:34:cc:
         4d:7c:a0:64:6e:f5:8c:7d:35:bf:41:a5:95:3b:c7:8e:3c:d2:
         22:e0:85:a0:6d:20:2b:58:eb:b9:40:de:40:ac:f0:43:af:79:
         eb:e5:2a:56:0b:7c:ed:f5:7e:12:8d:4f:4c:70:0e:3d:ff:87:
         6d:65:5b:51:06:1a:cd:f4:ac:36:23:90:6b:05:74:8b:2f:1f:
         4c:6c:85:2e:56:d6:ad:11:b9:f6:3b:08:af:f2:8c:3d:0a:ff:
         68:3b:df:19:ed:13:68:9d:83:7e:99:4c:75:03:8c:cd:b2:38:
         a3:71:7e:ed:bb:95:ca:d3:8d:26:41:0b:c5:03:43:db:b4:42:
         78:b8:a9:fb:be:89:90:13:3d:09:e8:06:25:52:a6:11:8f:2b:
         6c:37:a6:fe:10:7a:ec:12:59:f2:51:7b:c9:46:e0:9d:9e:79:
         48:c6:f7:18:7d:f2:d9:79:e7:ca:52:03:a5:a6:02:03:ec:6f:
         5a:c4:ee:b7:d3:42:bd:09:9f:b7:2a:2b:d0:14:d5:57:41:0d:
         d6:ce:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----