Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24a61d73-4d1a-32d6-b08c-21753d8a5e52.roa
File:                     24a61d73-4d1a-32d6-b08c-21753d8a5e52.roa (raw, json)
Hash identifier:          Hbbylyt+U2D3N0ExoENtmeDuSHBf3IJkMOM0ZgsF3Bs=
Subject key identifier:   AB:A1:63:B6:18:0A:B6:CF:D0:17:7B:A5:8A:6C:3F:C2:40:FE:12:56
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F38005478C1151FBF82D34840
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24a61d73-4d1a-32d6-b08c-21753d8a5e52.roa
Signing time:             Sat 10 Sep 2022 12:00:00 +0000
ROA not before:           Sat 10 Sep 2022 12:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:38:00:54:78:c1:15:1f:bf:82:d3:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 10 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=3e3dff7d-798c-4f40-afa2-789ca75ce4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:ff:32:28:e5:57:35:a0:d5:e0:6a:fa:a0:
                    79:db:09:13:33:55:cc:22:0c:2c:3c:5e:28:39:44:
                    12:35:34:a7:54:0a:f7:9c:51:55:b0:22:32:d9:a1:
                    8d:3e:46:28:3a:2e:85:b6:6d:74:93:e2:70:b7:c9:
                    39:06:6e:35:da:32:0c:ca:df:7b:06:72:fe:b0:3d:
                    3e:cd:7b:06:45:b4:cf:62:74:bc:c4:e4:38:9d:10:
                    98:d8:f9:77:e4:6a:02:54:d4:9e:cc:b3:89:cd:96:
                    3f:cc:9f:ad:ce:d8:71:d6:ba:e5:db:cb:4a:09:02:
                    56:31:6d:f2:42:ce:c9:19:7e:8f:8e:5a:d7:b0:18:
                    78:42:e0:dd:bc:c1:aa:6c:d8:62:9a:14:fd:ca:15:
                    88:3b:08:3e:cc:88:36:17:09:3e:c7:1d:b7:76:cd:
                    00:4b:aa:f7:35:dc:c8:c0:67:e7:74:e9:95:bb:6f:
                    82:b0:9d:03:c1:8e:a5:f4:12:b1:8a:f3:67:2e:21:
                    c5:a2:ad:9f:90:8d:47:59:bb:f9:97:9a:eb:9f:59:
                    bd:99:66:c7:a8:c1:d7:d4:4e:d5:e0:b1:6a:8c:d3:
                    45:0b:ee:d8:dd:d3:35:a8:80:3b:35:a6:69:51:1a:
                    3c:1e:e2:07:33:fc:c7:57:d9:fb:e6:f1:bd:91:61:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A1:63:B6:18:0A:B6:CF:D0:17:7B:A5:8A:6C:3F:C2:40:FE:12:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/24a61d73-4d1a-32d6-b08c-21753d8a5e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:22:8b:64:50:17:9d:7b:74:b0:8b:6d:0f:ca:3d:82:af:fe:
         00:d8:b2:e4:94:e8:51:5c:21:0e:85:33:5b:f4:b3:f9:fe:76:
         0f:13:ad:d9:32:db:bc:b0:b1:07:1c:5e:87:f9:7a:86:7d:ae:
         84:f3:2e:24:47:91:ab:39:9d:aa:d1:44:75:e6:7d:b1:11:a4:
         08:08:8d:06:4f:c9:d1:e1:de:4a:df:4c:c4:cc:d0:3d:13:31:
         6f:fa:e4:ce:cb:68:fa:19:f7:54:17:a5:c7:fc:ba:3b:0b:39:
         6f:f6:08:b3:b5:35:1d:69:3a:1f:b6:9d:cc:14:9e:91:4d:f0:
         2b:42:ed:9b:52:62:23:7a:7c:02:8d:a1:b3:4d:f8:2e:62:f3:
         75:fb:1c:f0:39:4b:78:d7:6b:e8:2b:bc:38:bf:74:10:f7:9f:
         a7:39:bc:07:50:24:53:7d:36:4d:52:6d:21:93:98:5e:19:be:
         46:f1:dd:8a:3d:4e:96:ca:05:d8:aa:6a:4a:6c:97:28:74:6e:
         3a:40:a0:a3:68:90:fc:1c:2f:26:2c:87:cd:c9:bd:d3:6b:88:
         70:dc:cb:41:cf:bc:62:60:f1:6f:20:5e:9e:53:59:52:61:2f:
         3e:8d:d2:de:34:e9:06:47:92:d1:a9:84:80:27:af:87:31:25:
         29:00:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----