Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ca89458-8116-370e-a7c8-5ba43004a994.roa
File:                     1ca89458-8116-370e-a7c8-5ba43004a994.roa (raw, json)
Hash identifier:          3tQhXo66pvExKGDlOuHB6xoqqzXNcnFaaQS5crWb0sg=
Subject key identifier:   F9:97:0A:DB:0E:B2:D5:3F:ED:C2:3F:F9:79:56:FF:4E:99:CE:C6:7B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FE2CD19B43C68C30102338500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ca89458-8116-370e-a7c8-5ba43004a994.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e2:cd:19:b4:3c:68:c3:01:02:33:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=aa78fbaa-8ffd-4b20-b696-9b55c11395a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:d9:47:86:c3:68:d2:00:c3:fa:2d:da:d6:
                    db:e9:3b:27:4d:a6:d7:54:2d:62:f2:08:0d:9f:03:
                    66:5e:83:b5:f2:cd:b1:97:65:39:54:6f:92:4a:3f:
                    c9:a5:f1:27:7e:43:50:f8:32:19:e5:42:b5:22:20:
                    1c:e9:b0:6e:98:8a:85:12:d5:31:73:3d:1d:bf:35:
                    fd:2b:9d:bc:b2:45:d2:d4:90:d2:15:10:f0:2e:41:
                    f9:67:d6:2e:1e:35:67:c1:81:50:24:44:c1:72:99:
                    24:f6:f8:f9:0a:3b:a6:5f:0e:46:40:82:ac:76:92:
                    75:0b:02:16:ca:a8:46:26:60:fd:1b:52:9e:21:c0:
                    c0:3f:a1:42:c1:c1:e3:9a:0c:25:03:df:7c:83:dd:
                    13:13:95:02:56:d1:3b:5a:03:51:4b:0c:e9:28:40:
                    38:48:e7:1a:b8:6e:b3:96:b6:32:a7:59:8f:09:05:
                    f8:15:59:54:74:3a:a8:0f:4c:08:ae:d5:5b:eb:f6:
                    40:2a:f5:ec:9b:f7:b9:97:e7:a1:e8:38:2e:f0:de:
                    0a:ee:88:ab:58:23:68:7e:6e:1e:fa:7d:a3:ff:38:
                    42:81:2b:fa:87:fb:88:28:65:53:48:34:db:7d:a9:
                    dd:ae:ee:37:f8:14:91:78:f4:7c:ed:3c:2c:26:18:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:0A:DB:0E:B2:D5:3F:ED:C2:3F:F9:79:56:FF:4E:99:CE:C6:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/1ca89458-8116-370e-a7c8-5ba43004a994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:d9:f2:e4:9e:02:54:e2:74:0c:5f:d7:4f:4f:59:5f:c4:
         a1:b5:02:84:6f:43:d6:b3:b0:f6:ac:71:b2:2c:8c:1e:be:19:
         b5:53:a2:b6:ac:2b:1d:1c:15:8e:1e:5b:b0:41:1f:6d:5b:f3:
         c4:dd:65:4a:4b:34:45:df:ac:12:b1:b9:d0:c4:23:da:8c:db:
         39:7f:1b:5d:30:fe:3e:2c:ef:67:dc:57:c6:e3:cf:58:02:d1:
         29:ed:78:3d:ba:f6:a3:e2:07:73:1f:34:d5:d2:23:6c:19:55:
         e7:e7:05:7f:06:92:55:44:6c:19:6d:75:01:33:73:23:0d:f3:
         1a:9a:1e:7d:b9:47:12:45:d1:3d:d9:6a:9a:c2:df:6e:2b:54:
         1c:31:47:ff:3c:86:d8:33:03:f7:fe:b8:1a:c3:70:1d:29:ad:
         80:84:48:e7:ca:46:23:64:91:39:2d:4e:83:52:a8:b0:5e:85:
         bf:43:b9:6e:83:f6:0b:09:fe:85:e5:39:2b:3a:c1:42:97:58:
         a2:97:94:7c:96:bd:d9:69:ae:5b:8b:5e:38:af:93:1c:ad:2e:
         19:7e:01:24:b6:13:50:9c:b2:3a:3d:7b:33:be:89:3f:30:31:
         3a:e1:35:09:cd:05:2c:89:df:9e:98:15:58:62:0e:e1:e3:f8:
         83:52:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----