Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1363e7f2-c696-3785-b08d-4540a533e574.roa
File:                     1363e7f2-c696-3785-b08d-4540a533e574.roa (raw, json)
Hash identifier:          /NYNfIvok9myk68lN5cAQyFR1U+qdqiKONJCqd5ffOc=
Subject key identifier:   BD:04:A3:FB:5A:06:ED:13:98:DA:32:58:A5:B7:48:B2:0D:10:3F:34
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EBFB4635F8C51A1465B98F8C4
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1363e7f2-c696-3785-b08d-4540a533e574.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bf:b4:63:5f:8c:51:a1:46:5b:98:f8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=cc82ee4c-cb7b-4fc5-a953-bbc18b341236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:d0:da:19:da:c9:e4:02:72:ee:d7:35:14:
                    a5:70:25:91:ea:22:bc:2a:94:c5:90:67:4b:39:36:
                    7d:3a:68:1e:42:a5:c6:c1:6e:97:d8:55:9b:c0:14:
                    b9:a8:62:2c:84:f5:e9:65:39:c7:41:c8:09:eb:b6:
                    fc:27:9a:d2:0f:ff:58:da:4a:7e:c5:f9:0a:d0:9f:
                    68:99:5e:82:6e:0b:c3:e1:2c:12:c4:ae:74:c2:50:
                    11:d0:b1:69:6c:72:e5:b3:76:51:65:46:94:25:a0:
                    da:d4:69:9c:2f:61:13:d2:b8:8f:5d:56:f7:1a:a6:
                    83:51:e8:c5:48:a0:9c:0c:2f:4d:de:22:76:e0:b8:
                    ef:50:4c:67:3b:0a:2d:74:19:28:12:fc:5b:6e:f0:
                    34:12:9e:c0:ae:f9:04:ce:15:88:e5:7b:f5:90:ec:
                    27:b5:7b:34:76:ea:ac:81:4b:d9:83:95:48:ed:44:
                    0e:b6:28:36:0c:44:61:80:1e:54:e1:da:fc:dc:78:
                    0e:33:c1:7d:73:9a:a6:f4:05:5c:69:1c:15:02:34:
                    bb:67:32:b3:8b:61:4c:13:b8:73:ad:ba:83:2f:30:
                    41:5a:c5:75:0b:32:db:09:ac:d2:81:b7:68:e7:af:
                    b8:d2:c4:83:3c:c2:a2:89:e2:c0:55:56:bb:9a:11:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:04:A3:FB:5A:06:ED:13:98:DA:32:58:A5:B7:48:B2:0D:10:3F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1363e7f2-c696-3785-b08d-4540a533e574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:29:48:87:69:46:a0:7a:f2:e4:63:e0:67:1b:aa:fb:de:e1:
         48:5a:71:f7:4f:49:92:34:8d:14:66:14:4c:dc:49:c6:6f:cc:
         52:8f:be:19:f4:b2:a1:2c:8f:0b:14:69:e0:98:a4:5a:1d:50:
         26:7d:a1:4b:28:1d:4d:25:36:8b:e1:30:d5:36:87:1b:a6:8a:
         4f:09:33:e9:96:b5:49:40:50:4d:f5:f2:d8:96:db:3f:a2:0d:
         b1:8b:9d:31:3e:09:46:df:99:6d:e4:d8:20:78:5e:80:ac:47:
         76:fe:82:b3:c7:09:d4:ba:69:8a:b0:e7:e2:a6:87:c3:39:b5:
         7e:f1:67:3c:d1:d3:ef:27:ee:64:4d:06:26:da:00:bc:7b:c9:
         14:70:c6:ec:25:54:90:a7:7c:ac:49:4a:9f:7e:d5:f1:0f:2a:
         17:57:f6:6d:10:39:e2:38:40:e9:ae:29:87:89:74:e1:56:ad:
         5f:a5:ad:03:9d:96:e5:dd:ee:96:82:bd:0e:6d:7c:22:ed:96:
         3e:33:19:03:0b:0f:8a:dd:29:20:eb:24:de:75:e4:e9:50:9c:
         16:a8:0e:09:a1:2c:50:2d:51:1b:8a:1f:0c:e6:02:9a:19:72:
         c6:f6:08:bf:47:f1:03:cc:83:0d:c3:ee:78:c3:19:e9:54:d9:
         b1:9e:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----