Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2b360ea5-6603-3e99-9353-9fff80cb680d.roa
File:                     2b360ea5-6603-3e99-9353-9fff80cb680d.roa (raw, json)
Hash identifier:          yT9at3l5cUkVUn6e7xT5qim11add5oYssA1/xVNhTmg=
Subject key identifier:   28:23:1E:D7:26:26:0F:27:2D:2C:CF:6D:78:84:9F:FA:C7:95:BB:DE
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858402683640A4F838FA14265BB80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2b360ea5-6603-3e99-9353-9fff80cb680d.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:26:83:64:0a:4f:83:8f:a1:42:65:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=9b7c5dc7-0e6c-4d3a-8068-d8d4cb11f4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:11:08:75:22:55:a0:0a:f8:6d:6a:8f:b8:
                    0b:f2:d0:5e:1a:d4:65:3c:ea:ec:14:db:7e:1d:15:
                    53:01:65:98:92:db:0e:06:b6:da:f8:c8:2a:50:50:
                    3c:3e:bd:55:ee:e9:ae:0d:04:4c:7b:f4:08:04:cf:
                    7d:5f:6e:e6:68:af:b3:35:be:bb:e1:21:c6:96:eb:
                    2c:85:d5:f5:b7:fb:fe:e9:c2:eb:f6:2d:b5:68:3f:
                    97:5f:6e:e5:22:c5:ae:60:1f:98:67:86:74:9a:bf:
                    aa:46:96:b4:09:c0:c3:9d:97:e9:cb:8f:da:31:37:
                    22:60:33:73:f7:f6:58:d9:a4:ff:85:87:32:25:8b:
                    a4:bd:d5:7b:3d:f3:00:5e:b9:56:c8:4d:ec:1e:28:
                    69:55:51:81:3f:76:a6:33:8c:6a:7b:88:56:8c:a6:
                    a8:35:1c:6c:08:57:05:db:13:2f:fd:d1:1f:44:ee:
                    fe:45:45:2c:e2:dc:15:0c:94:a8:bc:15:a3:7d:e2:
                    ff:78:ba:51:bd:6e:9b:d3:d9:30:d5:50:35:d9:7b:
                    fe:0d:6d:82:ac:ab:45:ce:bd:9f:50:8a:6f:92:eb:
                    82:7e:7d:61:58:73:45:52:4a:d1:5f:28:a2:f4:34:
                    e8:ba:b5:1c:93:cd:c0:27:d1:39:3d:4c:60:a7:53:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:23:1E:D7:26:26:0F:27:2D:2C:CF:6D:78:84:9F:FA:C7:95:BB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2b360ea5-6603-3e99-9353-9fff80cb680d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:ab:8c:30:8a:59:53:2c:ed:b9:69:00:55:bb:3b:d2:5e:
         51:a6:19:62:e9:27:21:14:ab:06:1c:7d:d9:fa:c5:13:c3:72:
         f3:1e:d5:6e:ad:3e:7e:a6:f2:4e:f3:a8:bd:ad:b4:c5:7a:3c:
         b2:41:cd:c9:e5:8c:56:6d:14:c8:88:4c:e3:1e:66:62:65:0b:
         bc:a0:e8:5f:50:98:55:8d:90:bd:9f:be:59:bc:6d:9a:06:7b:
         fb:ea:ce:f6:e5:09:49:f9:97:f3:64:f3:6a:be:b5:3a:72:33:
         7c:27:91:ad:2e:3f:56:23:9a:40:1c:99:fc:ef:0c:99:c6:2a:
         91:14:32:c4:03:f1:90:f1:36:3c:b9:8f:87:62:ac:a4:e8:95:
         9f:86:e4:f9:b3:29:82:3e:37:23:9d:6f:2a:20:dc:39:50:ae:
         d7:2a:97:e3:d4:0b:36:a3:ad:48:b6:92:a6:ce:fb:30:37:56:
         f7:d8:aa:3b:79:24:56:5c:b6:e7:85:2f:d4:70:23:0e:25:2e:
         56:89:cf:d5:a9:fa:fb:df:d6:5a:fd:f0:84:3e:5d:49:85:cb:
         8f:72:8f:c1:83:3d:29:a9:c5:4c:82:88:dd:b5:35:c7:5c:1e:
         05:79:c3:36:ae:f1:4e:51:df:db:09:f0:d6:a3:56:1e:22:f6:
         86:81:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----