Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1615ff0b-4d65-32dd-bb73-c0d87a4ad970.roa
File:                     1615ff0b-4d65-32dd-bb73-c0d87a4ad970.roa (raw, json)
Hash identifier:          jD6Ca+GPyc/IB3S5S//Z+5s3dKA5llt93QBk7jiWIfI=
Subject key identifier:   4B:5B:6E:FA:33:E9:81:52:42:23:46:73:DA:5D:6C:02:0C:FC:66:63
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F90550F35C5D286A5748D3D80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1615ff0b-4d65-32dd-bb73-c0d87a4ad970.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:90:55:0f:35:c5:d2:86:a5:74:8d:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=4f30b7bc-2d60-402d-91be-4ad023b58e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:f7:64:77:93:84:6b:2e:9d:e8:53:09:5f:
                    1a:9b:7f:fc:0e:0d:c6:a4:25:b7:21:79:bd:58:3e:
                    42:80:a7:50:f2:c5:92:80:ca:f9:bf:a8:83:f2:7c:
                    3d:9d:7d:4e:bb:d6:5a:62:42:9f:85:a5:25:92:51:
                    c1:86:08:1d:2a:5e:5a:a9:4f:1b:78:e4:86:ab:ca:
                    cb:24:b7:6d:66:e3:e3:3e:84:48:66:a8:af:f7:56:
                    cd:01:b3:9d:24:2d:ab:39:1e:01:97:7a:f9:48:e4:
                    2e:fa:ec:56:0c:ca:5d:c2:8c:32:d3:da:c5:6e:2b:
                    7d:f4:c3:0b:54:50:e7:a1:21:b5:56:37:ab:5e:92:
                    3f:69:42:f6:66:42:08:b5:f9:4b:28:47:df:56:03:
                    76:e9:72:61:08:16:d9:22:9a:db:b9:51:01:e0:19:
                    4a:a5:5a:f2:97:3f:81:0c:f7:a8:13:0c:da:14:37:
                    89:63:03:cb:a0:df:96:47:d2:00:bb:5d:dc:ea:89:
                    eb:60:bb:9e:98:bc:37:7e:5d:5f:cd:f6:95:b0:0f:
                    4c:86:d6:0b:54:b6:44:06:49:f8:3a:0f:bd:c2:5e:
                    ea:f6:7d:57:5f:d7:fd:0a:50:58:30:0f:51:53:3b:
                    cf:b4:2a:f8:69:d1:85:1a:1e:77:90:3a:98:40:a2:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5B:6E:FA:33:E9:81:52:42:23:46:73:DA:5D:6C:02:0C:FC:66:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1615ff0b-4d65-32dd-bb73-c0d87a4ad970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:38:f6:67:63:82:c8:86:3f:86:10:f5:8b:46:2a:d6:5c:f9:
         ae:40:e2:58:f9:76:15:57:92:ad:c0:81:a9:34:39:c5:dc:b2:
         e8:fc:32:36:3a:f4:af:ed:5d:12:c3:c4:26:c5:dd:13:c9:36:
         93:29:16:82:58:cc:46:34:b0:fc:58:2f:5d:4f:75:7b:cf:93:
         a7:3d:b6:5c:20:80:bf:e9:d7:5f:d5:5f:43:cc:e1:de:e7:14:
         87:a4:b0:70:64:f7:9e:8a:e2:87:dd:92:02:85:b6:35:5d:67:
         49:b8:11:9c:2a:fc:2e:23:f9:60:82:94:8f:ca:2d:ad:c6:e7:
         6f:36:9a:37:ea:e0:2b:ac:fa:3e:6d:1a:4f:2b:50:2a:57:9e:
         c9:ec:20:28:78:2a:67:39:5a:e4:e7:0f:44:39:74:21:5e:db:
         d9:5f:0b:b0:a7:f6:92:af:de:28:56:b3:3f:f6:dd:2b:c1:b5:
         4b:74:24:7d:1d:95:05:4b:19:ff:a1:ff:d3:e9:63:62:fe:20:
         7f:45:ab:d2:8d:77:06:1e:ac:cf:66:df:68:f7:97:88:b9:ee:
         9b:b5:de:c4:a3:db:51:77:2f:55:4f:a8:d4:0e:ad:af:cb:ba:
         79:21:c6:d4:b2:e5:68:3a:aa:76:ef:9b:d1:a3:66:c2:ab:25:
         9a:32:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----