Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/20bca305-8695-3913-9748-790083123460.roa
File:                     20bca305-8695-3913-9748-790083123460.roa (raw, json)
Hash identifier:          HMiZ1+olgsTbqLlkBtAEZC+GKrSpCV69doZxetC6Ne8=
Subject key identifier:   68:1E:70:C1:22:42:B8:0C:8B:3A:23:83:3E:65:13:02:D5:8C:9A:53
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FD2DFC4C345E63480DA67E6E0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/20bca305-8695-3913-9748-790083123460.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Tue 08 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d2:df:c4:c3:45:e6:34:80:da:67:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Nov  8 05:00:00 2022 GMT
        Subject: CN=5244faee-c2bf-4a8b-a508-1de839ace183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:6e:34:25:fd:4c:13:64:8b:95:51:ba:e1:
                    6c:ef:cb:3d:bd:70:32:8d:fc:c1:33:08:a9:2c:20:
                    dc:e2:2e:7e:ed:27:11:6e:24:05:0f:9a:13:49:a7:
                    c9:2e:12:13:d0:97:f4:d5:98:34:55:45:bd:b3:7d:
                    af:5a:1c:d5:9a:97:2a:97:58:45:09:cd:8c:01:e0:
                    c1:4b:ac:6b:ea:81:d0:3f:a3:9f:b4:38:fd:73:56:
                    ef:88:c9:9f:61:7d:b3:70:f7:a6:3e:75:21:66:7e:
                    84:da:b2:de:68:7d:b1:59:a2:bd:ec:d8:74:d7:6e:
                    c0:d4:75:33:c1:4b:ef:99:6a:05:81:15:95:53:29:
                    3b:65:95:c4:89:81:79:58:0b:4d:53:32:34:d1:64:
                    39:e9:1c:22:60:57:d2:48:62:d7:af:d2:0e:a2:07:
                    36:2f:b8:7a:88:20:82:5d:12:3d:cc:a4:79:8b:2e:
                    be:85:4c:72:64:c9:a8:18:b2:72:4d:86:7f:75:08:
                    3c:3b:e3:4f:d4:05:99:e0:26:93:63:67:83:71:96:
                    1c:8e:eb:0e:f2:65:bb:4a:ec:d3:f1:f4:7f:cc:13:
                    28:e4:f5:7e:7f:80:bd:ed:4d:e6:b5:4f:93:a7:e4:
                    e1:e5:25:21:9b:c6:c9:00:38:8a:68:88:5b:2d:f1:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:70:C1:22:42:B8:0C:8B:3A:23:83:3E:65:13:02:D5:8C:9A:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/20bca305-8695-3913-9748-790083123460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:13:66:75:85:ea:de:5b:0d:3d:d0:95:c3:0d:bd:16:2d:64:
         5c:21:f2:d4:6d:36:e4:c7:05:45:db:87:ba:84:bf:47:c7:2a:
         ad:c0:e0:e4:6a:a2:ec:2a:a8:e5:5c:0a:a5:92:a0:19:3d:3a:
         85:c6:9f:79:37:bf:dc:1a:61:22:9f:0b:7e:86:0b:ce:6e:2c:
         32:12:35:8a:a3:a0:27:52:0f:e6:be:bb:36:59:f0:0c:10:7f:
         49:91:7d:0b:c4:de:97:16:6f:53:08:e8:5a:2c:df:70:d9:55:
         eb:78:d2:6c:36:6d:fa:ff:40:ff:e7:a1:23:26:bd:01:46:4b:
         48:34:c3:12:d2:7f:a0:43:92:aa:0d:4c:a9:94:5b:af:a0:2b:
         28:0f:40:10:c1:63:a1:cb:00:0d:82:7b:5b:de:aa:33:50:6f:
         21:f9:ba:38:b1:14:ce:aa:2c:d1:08:2b:c6:ed:b8:00:87:d0:
         42:d0:2d:53:f8:ae:d8:7b:79:b5:74:13:82:06:b5:c0:af:da:
         3d:6f:7c:d8:a0:93:ab:20:07:15:d1:51:a9:30:d5:cc:7d:6a:
         aa:08:69:1d:0b:3a:c1:e9:f9:9a:be:dc:63:f0:25:bf:07:bf:
         bd:3e:2d:97:bb:b8:06:71:b4:d7:84:8d:78:84:33:1d:44:34:
         3e:e2:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----