Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b00ecbe-5221-3458-af34-975895f70461.roa
File:                     3b00ecbe-5221-3458-af34-975895f70461.roa (raw, json)
Hash identifier:          fWWzQX9oiEl8phLqm76nUZA4xbqyQsEIT/KyFAhW59Y=
Subject key identifier:   F4:3B:CE:51:E8:6C:4A:E4:77:12:D6:AC:77:94:02:B8:02:A3:04:66
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F5D28CC817187F3D9E7F19800
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b00ecbe-5221-3458-af34-975895f70461.roa
Signing time:             Fri 23 Sep 2022 12:00:00 +0000
ROA not before:           Fri 23 Sep 2022 12:00:00 +0000
ROA not after:            Mon 26 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5d:28:cc:81:71:87:f3:d9:e7:f1:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 23 12:00:00 2022 GMT
            Not After : Sep 26 04:00:00 2022 GMT
        Subject: CN=39700e50-2802-40b9-b400-cfb2ddbee178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:e2:93:53:5a:e0:64:d5:ff:25:11:6f:44:
                    85:fc:96:f2:84:86:5f:33:cf:b6:85:22:2d:e5:0c:
                    09:4a:48:05:08:a3:40:e5:dc:fe:f4:b3:15:be:e2:
                    81:79:d6:1a:b2:0b:53:c8:d9:25:fe:71:01:67:03:
                    34:07:bc:fd:3d:7d:03:bb:ee:81:0b:6e:89:8d:20:
                    12:32:ac:97:74:a7:b3:4f:57:64:38:5d:26:ff:86:
                    10:c4:17:29:f2:5b:39:d9:96:16:47:21:ca:8e:8a:
                    c8:31:2e:fe:e8:09:0f:94:7d:f2:9e:ad:a5:9a:cd:
                    0d:ff:bc:6d:0c:a9:33:96:ee:9b:40:65:83:ed:63:
                    6b:7f:1b:ca:50:25:26:00:7f:8a:64:94:8f:6a:0e:
                    eb:79:77:99:6d:83:ac:98:d5:b6:00:0b:d2:4c:cd:
                    ad:78:20:80:b0:31:a3:9c:aa:52:a2:c9:04:2e:55:
                    f4:51:ff:ba:8f:34:1d:a4:52:4a:c8:bb:5c:61:a5:
                    8b:fa:f1:cb:f1:da:ac:7d:23:f7:24:04:17:33:3e:
                    7b:92:eb:eb:fa:a6:dc:e7:45:e1:68:a2:a0:e6:6d:
                    5c:d8:ed:cb:bf:95:42:64:be:92:f2:16:a9:b1:4f:
                    7b:4c:3a:28:29:67:ee:58:e6:aa:1f:82:bc:ed:d3:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3B:CE:51:E8:6C:4A:E4:77:12:D6:AC:77:94:02:B8:02:A3:04:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/3b00ecbe-5221-3458-af34-975895f70461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:1d:f2:5f:42:96:3b:81:90:fa:5e:54:f0:5d:13:77:5b:
         a5:2d:3e:2d:16:41:6b:1d:13:f7:b8:94:76:1a:ad:cf:fb:c7:
         4e:38:a0:a5:e8:11:87:e1:17:9a:73:56:48:52:37:8f:b1:2c:
         60:b3:bf:c0:6b:0c:2f:6b:29:18:47:1e:60:df:17:d0:09:f2:
         6c:ae:16:65:bd:05:e5:bc:66:45:98:1a:8f:24:a1:63:66:2b:
         ab:64:c5:95:57:18:f5:53:38:6d:3c:c5:fb:aa:e7:7c:fb:0e:
         8b:7a:33:59:8e:88:68:bc:d5:d7:cf:d4:0b:f2:c7:90:dd:67:
         5a:e5:ca:f9:c1:76:ce:9c:41:3e:b5:e1:7c:b1:89:85:af:13:
         af:9b:c2:98:5c:7c:77:0b:e7:0b:9b:e9:d3:ce:56:53:ec:9c:
         5b:7c:54:e7:fc:52:9a:f5:5c:d9:42:d6:02:67:a1:cb:8a:7d:
         d4:b7:fd:11:ba:ca:48:86:fc:cf:bf:56:71:c9:fb:0a:47:76:
         4b:95:0f:73:15:23:7c:5c:e4:0a:2f:84:1f:16:c4:46:90:d3:
         f3:60:d3:7b:e1:af:24:d3:e6:8c:5b:b1:5e:7f:b9:b6:18:45:
         94:d8:a9:cb:61:48:e2:ff:93:71:69:32:97:1a:ec:e8:3f:48:
         e9:a7:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----