Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44d02c14-c34d-3783-b9e9-25783c9986f5.roa
File:                     44d02c14-c34d-3783-b9e9-25783c9986f5.roa (raw, json)
Hash identifier:          qEjyTzm7h1lWopM62468aKBTpF35xkkVOjuLFHVLOPw=
Subject key identifier:   83:AA:F1:02:6F:C1:57:70:85:93:27:8E:47:19:21:08:60:35:53:0E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EEA9215DC4312792225BBB440
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44d02c14-c34d-3783-b9e9-25783c9986f5.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ea:92:15:dc:43:12:79:22:25:bb:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=4b7f1c96-27ec-48d2-a363-24ab019579be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:d8:1a:0e:4d:d0:85:be:fd:97:ff:7b:65:
                    c7:9b:ac:91:e5:cc:0a:d8:42:1b:7e:c0:81:0c:8f:
                    0c:64:2b:ce:40:6e:61:40:77:f4:83:2a:19:1d:95:
                    01:f4:a6:54:94:f0:d1:64:fa:9e:0a:a3:43:18:1f:
                    2f:fd:53:e1:b5:75:cd:61:45:ac:81:5c:9c:8f:d4:
                    8a:e7:27:a4:18:5f:4c:1e:bc:dc:3c:5e:22:c4:26:
                    c9:78:56:d6:a7:29:bd:36:b6:cc:db:ad:20:90:18:
                    ff:63:6b:b4:01:00:92:a3:68:05:1f:81:eb:52:c2:
                    68:88:cd:ba:94:c2:f8:79:44:cf:ca:fb:8a:d5:eb:
                    3d:91:24:b2:fb:a2:d9:52:5f:f5:33:1b:40:b5:ca:
                    51:34:70:8a:35:35:31:ed:04:b3:49:c0:5c:50:6b:
                    12:21:60:0e:9e:73:8c:d6:a9:97:da:d5:be:5a:3e:
                    e8:ec:58:8a:6b:76:a9:0f:39:94:78:5b:e7:8b:75:
                    5e:f0:5d:7e:20:f4:2f:73:37:de:b9:66:39:c4:5a:
                    d6:49:87:8b:76:4e:c5:28:65:54:a1:d8:7d:69:7a:
                    ef:dc:c6:7e:1f:2f:4a:87:37:bc:91:9d:f5:f8:96:
                    de:87:82:e5:bb:b2:16:4d:32:1a:0a:01:65:32:ad:
                    15:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AA:F1:02:6F:C1:57:70:85:93:27:8E:47:19:21:08:60:35:53:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44d02c14-c34d-3783-b9e9-25783c9986f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5b:cc:a4:41:71:ee:47:30:b5:0d:fd:ad:3b:be:93:1c:6e:
         ac:a0:5e:ac:5e:ee:2f:98:25:f3:aa:dc:97:53:80:4b:d0:44:
         fb:c5:0b:49:0b:70:0d:d3:76:92:b7:2b:2e:38:58:8c:02:73:
         34:9e:a8:12:06:3c:f2:4b:57:ac:81:61:98:94:df:9b:20:3d:
         1b:35:e6:57:8f:57:b9:ed:22:50:eb:08:58:59:14:d4:0e:63:
         41:75:34:1c:08:4d:ef:26:12:7a:bc:35:12:71:ad:a3:ea:80:
         1a:3f:cf:24:b5:9e:59:d8:f7:9a:ee:2f:c8:c5:f6:6c:b9:85:
         92:db:0d:1d:cf:f2:33:d9:5e:0f:00:07:96:f0:a5:a5:2b:a6:
         cc:4f:ab:b7:da:0b:e2:25:be:a1:91:65:06:aa:5c:eb:5a:38:
         33:57:a6:d8:aa:f1:a3:29:b3:e1:20:4b:54:2e:85:ed:07:58:
         2b:d9:3d:7f:66:c4:e4:59:c1:a1:b8:33:74:e9:06:18:41:59:
         51:48:8e:8a:93:53:6a:05:da:89:26:29:fa:bc:09:fc:57:6d:
         e2:24:e6:c3:dc:5d:d0:0a:a7:6f:76:cb:83:e2:ca:d9:16:5b:
         51:f1:51:49:cf:dd:46:5f:62:52:18:7e:50:aa:91:02:f4:be:
         d8:23:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----