Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32dfbaa0-448c-3554-90a0-7d19109aa507.roa
File:                     32dfbaa0-448c-3554-90a0-7d19109aa507.roa (raw, json)
Hash identifier:          RP1Hm5bCSpRtoRsElYkC0aTErAiQlbiTk2hitnbpynA=
Subject key identifier:   93:49:F0:29:86:19:7B:62:A1:62:03:54:C1:85:A1:B4:48:FC:9E:73
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F354E721B3866140D498E1140
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32dfbaa0-448c-3554-90a0-7d19109aa507.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Mon 12 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:35:4e:72:1b:38:66:14:0d:49:8e:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Sep 12 04:00:00 2022 GMT
        Subject: CN=e0131f8f-b970-40ca-aa82-1d4a59eca19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:03:b1:41:65:a4:5f:50:48:78:02:3c:c8:
                    11:0c:cb:27:96:ab:59:f8:b8:79:18:2e:85:9c:79:
                    b9:36:5f:af:78:7a:fd:2a:2f:6d:70:74:70:9c:67:
                    e8:d9:4e:8c:65:f5:73:17:c0:72:14:e2:8b:bf:89:
                    f5:38:38:f5:c6:21:a4:a9:93:4c:65:fb:6c:ba:56:
                    30:ac:74:c0:6c:b2:e0:33:08:bb:52:27:72:7c:a3:
                    dc:94:b6:19:bb:f0:be:8a:51:6d:cc:61:6c:b3:12:
                    c6:b9:f6:85:26:d1:ab:03:b9:c9:48:0a:36:9c:44:
                    98:d5:5b:5a:3e:bc:3f:ee:84:1b:e0:d2:ee:9f:88:
                    67:e9:74:93:5d:df:2b:9e:01:35:8e:35:9f:e0:5b:
                    81:75:3a:30:be:1f:4d:5d:85:66:25:4e:ea:f1:dc:
                    6f:58:66:2d:54:16:cd:60:bc:fb:a4:76:50:8e:e1:
                    31:6f:ed:04:43:dc:e2:9f:06:67:4d:5c:a3:79:1d:
                    63:9d:d9:32:0d:80:f2:52:d8:21:82:56:05:39:d2:
                    e2:6f:09:af:b8:75:48:8d:7c:02:e4:a0:6f:05:b8:
                    62:fe:72:7e:58:1e:9f:54:3a:71:3f:9d:a5:a0:90:
                    e5:81:19:19:c3:31:09:bb:16:d2:d5:98:87:2c:93:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:F0:29:86:19:7B:62:A1:62:03:54:C1:85:A1:B4:48:FC:9E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/32dfbaa0-448c-3554-90a0-7d19109aa507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:2a:60:5f:7b:28:95:f6:67:05:b5:27:12:76:c5:dc:8d:99:
         3b:7e:e0:7c:7a:27:5b:db:50:ff:c8:25:26:c9:83:af:26:c6:
         1e:04:b6:93:01:d1:6f:22:3b:ac:f0:64:0c:25:55:71:e2:cc:
         27:7c:b7:e5:60:cd:ac:dd:9f:65:c5:d4:73:9d:41:ef:57:67:
         79:a8:47:54:52:b6:33:75:41:e3:41:cf:1f:ee:15:ac:b0:1e:
         93:c4:aa:b6:f6:7f:44:e7:f2:7d:9e:9e:f5:7e:91:51:6c:40:
         b7:9b:7a:45:b7:ea:9d:4d:60:ed:2a:4a:b1:bf:00:4b:28:0c:
         74:27:1a:a9:d9:ef:bb:a3:d1:1e:5a:e0:92:be:7d:b7:bc:c7:
         8b:36:8a:6e:2a:bb:95:ab:9e:84:d0:70:ab:2f:55:9d:13:c9:
         34:bd:9d:84:f1:e0:dd:e3:cb:01:c8:02:f1:e2:01:79:cd:15:
         2c:ac:23:f2:75:e6:fd:3e:9f:c6:1c:f2:b8:1c:a1:cf:48:2f:
         87:5d:a3:89:49:27:69:fc:95:85:b3:c0:cb:9d:8c:c5:97:09:
         c8:93:cc:2f:ef:db:2b:b0:ff:1e:b8:65:4b:96:f9:27:c6:1a:
         aa:ea:f0:91:cd:44:53:ed:5f:f3:93:1a:03:71:03:e0:ac:fd:
         1b:df:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----