Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2c0c4a4e-afb0-34ce-80fd-14d5c40d5b70.roa
File:                     2c0c4a4e-afb0-34ce-80fd-14d5c40d5b70.roa (raw, json)
Hash identifier:          2wn8onY1zj5RIW7Vl5dfu4ejGGc7PYH9lngsfW8tDpo=
Subject key identifier:   FA:3C:D9:A4:37:7D:E8:AC:FF:17:A1:C9:74:B9:B5:D1:50:78:11:AA
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FC69038AD8F9716DEB5C70400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2c0c4a4e-afb0-34ce-80fd-14d5c40d5b70.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Thu 03 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c6:90:38:ad:8f:97:16:de:b5:c7:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Nov  3 04:00:00 2022 GMT
        Subject: CN=e4774ca2-e9ad-48d3-842f-a70f4c8ee052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:fe:fa:3d:6b:09:b2:6e:a6:27:c9:1f:ac:
                    a8:e8:45:2e:78:f6:0f:c9:00:45:6d:37:30:7c:5a:
                    54:33:2f:62:29:c2:03:93:d0:93:5c:35:bd:ba:a4:
                    b9:bb:94:4b:c7:23:43:ca:9d:c9:8b:ee:95:13:59:
                    9c:1a:70:f1:45:79:17:89:f8:98:07:48:67:e7:48:
                    2c:ed:be:96:08:4f:06:be:88:3c:e9:d0:bd:97:2e:
                    f0:d1:f6:05:0d:1c:65:dd:11:8d:1f:7f:a4:11:81:
                    84:78:e2:3f:47:c5:34:9f:8e:9f:30:26:c0:18:4c:
                    1b:d2:92:74:06:94:84:af:6b:d4:ec:4e:53:a2:f7:
                    b8:97:32:52:56:f7:30:03:b7:01:d8:34:94:7e:f6:
                    b7:8b:d8:f6:39:6b:a0:9c:ba:43:9a:9a:ef:0f:41:
                    a5:ef:9a:28:cd:bc:6e:10:6f:c0:a3:07:53:74:95:
                    20:96:40:28:27:64:9c:aa:82:b5:92:26:ce:a3:a0:
                    00:27:6c:62:b1:68:12:78:22:e2:93:8a:df:39:1f:
                    35:08:8b:72:36:83:d8:af:84:1f:9b:4e:5a:e3:fa:
                    57:68:ff:b5:20:9d:90:7a:19:52:3e:90:87:10:28:
                    1f:01:71:62:01:18:d2:50:3a:ff:96:4c:03:b1:5f:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3C:D9:A4:37:7D:E8:AC:FF:17:A1:C9:74:B9:B5:D1:50:78:11:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/2c0c4a4e-afb0-34ce-80fd-14d5c40d5b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:27:e0:37:79:68:6e:50:f3:90:7c:00:45:9c:79:1e:27:
         0c:23:af:18:a9:19:1e:2f:38:c6:15:57:cc:47:db:8a:73:b5:
         1f:18:e8:d5:80:b7:5c:01:6c:7d:df:65:3b:53:df:78:7b:e5:
         7b:15:50:ec:51:3b:0b:2a:50:33:a2:89:35:fe:d1:3a:5e:2d:
         cf:8b:63:a5:18:01:26:b0:95:62:8e:96:cc:f4:7f:77:52:83:
         b5:39:cb:25:2d:85:b2:3b:23:1c:02:30:ee:cd:05:a7:38:52:
         d0:5e:56:19:ea:6f:37:0a:70:27:f5:5e:fa:eb:28:80:11:dd:
         bb:64:4e:f0:1c:2d:c5:f3:bd:dd:f0:8a:80:57:58:3d:6c:3c:
         ea:07:7d:04:6d:80:8b:df:37:6e:d2:15:97:ee:d4:f7:81:91:
         46:00:71:69:55:b4:17:03:8b:6a:7a:6a:a3:b4:e1:48:da:38:
         40:94:b1:39:a4:98:9f:74:83:2d:6c:4b:cf:cd:28:2a:70:16:
         aa:7a:93:09:93:82:48:b0:de:5a:6b:53:39:a3:ec:bf:27:2a:
         de:da:82:14:52:f9:91:e2:7b:6d:2b:c2:fd:a4:fd:60:3a:dc:
         60:e3:61:61:dc:55:f4:b1:02:5e:0d:55:f6:a4:64:24:2c:98:
         7d:f6:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----