Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3672b08c-20d6-3c1d-862c-4d0f32901ccb.roa
File:                     3672b08c-20d6-3c1d-862c-4d0f32901ccb.roa (raw, json)
Hash identifier:          fUKkwROFBv7lbW6y23ZcrF9k511LHLQqwyc/0dxofiU=
Subject key identifier:   7F:9D:47:53:10:EC:F2:26:25:D9:35:D6:5D:44:29:35:E5:6D:51:9E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FF58CC1877A5238D71E333500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3672b08c-20d6-3c1d-862c-4d0f32901ccb.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Sun 20 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f5:8c:c1:87:7a:52:38:d7:1e:33:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Nov 20 05:00:00 2022 GMT
        Subject: CN=4a4cbb52-b353-4c82-bf9c-cf6058d12596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:9b:02:a0:81:4a:c2:ef:04:0c:55:80:be:
                    06:c3:f3:97:37:fc:a1:2e:32:d3:e5:e9:f9:dd:15:
                    ee:c0:62:ac:78:d3:1a:72:a5:16:80:7c:d2:f2:7f:
                    7f:db:89:5d:3a:53:a3:13:d2:0e:df:d8:58:38:c7:
                    14:26:38:c0:d3:88:63:4e:a6:fa:d4:4d:bc:4f:97:
                    ec:7f:dd:d4:69:c3:45:ba:ed:f5:99:73:78:e7:95:
                    96:e0:c3:46:4c:b7:eb:aa:a9:6e:ec:a5:3e:1c:3c:
                    ab:fb:9e:f1:dd:31:dd:db:4a:62:47:eb:31:3b:2a:
                    38:50:cf:3e:d7:0a:af:f6:db:01:61:6e:e7:02:0e:
                    f5:9a:59:46:c4:5e:77:e7:52:3f:d4:1a:fd:97:d9:
                    6d:62:86:6a:36:8b:72:a2:6e:1b:e9:e4:d1:f9:e8:
                    74:3c:a8:e0:7e:c2:d6:ac:6e:63:5b:74:db:f9:f1:
                    56:0d:25:2c:83:0e:5e:43:c0:9c:29:af:71:c8:86:
                    67:b9:7f:0a:d0:ab:d8:aa:88:b3:75:29:9d:65:26:
                    18:73:91:f5:30:a8:45:84:80:04:71:8d:41:2e:a9:
                    07:f9:c7:a8:dc:23:62:6f:b3:d7:61:56:5b:72:57:
                    ae:57:9e:9e:2c:d9:5f:d5:0f:f9:ae:31:e8:a6:50:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9D:47:53:10:EC:F2:26:25:D9:35:D6:5D:44:29:35:E5:6D:51:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3672b08c-20d6-3c1d-862c-4d0f32901ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:07:83:ba:b8:4f:dc:e0:3c:ca:7c:d7:51:b1:c2:31:2b:7e:
         cf:8a:00:7b:ff:3c:f8:7c:36:10:47:5e:93:21:d2:fc:a7:68:
         4b:24:a2:79:b4:fb:67:e0:59:6d:9c:03:80:8a:08:ae:7a:bd:
         99:df:26:39:9f:e8:c8:5d:21:1a:1a:2a:0c:5b:5d:ce:ea:9e:
         b8:5b:d4:6a:e0:87:08:52:0b:50:4b:ad:d7:03:0a:0d:c1:44:
         f1:e4:43:8e:31:a5:79:bb:74:1b:50:53:5b:a1:0e:97:d0:d9:
         d2:97:e8:b5:15:e4:2f:47:66:19:cd:16:fd:d3:82:06:e8:43:
         2c:06:f8:ce:ff:76:9f:80:07:a4:bb:0d:b4:93:f8:34:23:ce:
         7b:ce:69:39:65:be:08:84:22:20:f5:cb:b6:a4:bf:89:f7:bb:
         96:da:6c:80:0d:5a:03:7a:2c:97:9b:66:6d:ac:64:ea:be:5c:
         76:0d:74:96:70:46:eb:85:59:7b:7c:f9:d8:26:eb:3b:97:d7:
         24:16:af:2b:d8:74:2d:a8:90:5d:b1:01:f5:7a:5c:97:02:7f:
         e7:af:b6:ef:86:9d:2b:6d:71:62:4c:21:f3:a8:e8:f6:dd:c2:
         71:a1:7b:eb:e4:f5:45:ac:83:0c:ad:a2:5d:07:ad:9e:19:af:
         37:0d:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----