Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44f79adb-f1fe-357b-9d97-216fa5fe7e14.roa
File:                     44f79adb-f1fe-357b-9d97-216fa5fe7e14.roa (raw, json)
Hash identifier:          exhAHuBZtM/NQA7iA6pdL+uFF/+VfbF8uIGtJHMWbWw=
Subject key identifier:   B7:DF:E1:AC:F4:5D:F6:2C:D6:D4:E2:4D:38:5C:1C:90:FE:7E:7B:D7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB5ABF631F26B6BC90F29E780
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44f79adb-f1fe-357b-9d97-216fa5fe7e14.roa
Signing time:             Tue 25 Oct 2022 12:00:00 +0000
ROA not before:           Tue 25 Oct 2022 12:00:00 +0000
ROA not after:            Fri 28 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b5:ab:f6:31:f2:6b:6b:c9:0f:29:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 25 12:00:00 2022 GMT
            Not After : Oct 28 04:00:00 2022 GMT
        Subject: CN=30427697-2ae6-4e88-86fa-6acb40505a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:55:a3:fc:f3:76:d9:9d:f0:27:7e:11:42:
                    4a:01:2f:db:59:ee:aa:0e:9f:64:76:a0:b6:58:3f:
                    53:99:e8:73:a8:bf:a4:c7:fe:54:b3:a0:82:4d:61:
                    0d:d8:67:6a:42:20:c7:71:a9:17:1d:a6:5a:98:3d:
                    c9:95:4c:d6:61:7b:c7:1c:ec:ec:1d:b3:5b:88:fd:
                    fc:c1:64:f9:99:4c:16:29:22:1e:b5:4b:7e:b3:6a:
                    a1:c2:6f:fc:50:27:17:26:8b:f5:21:1e:a9:14:36:
                    db:ac:08:3f:ad:a0:2f:df:6d:86:cf:7e:38:1b:b1:
                    3a:25:44:2a:34:96:28:c5:a5:ff:ec:76:72:3a:e6:
                    e1:28:be:44:a7:cc:49:d5:20:e8:60:6c:5e:c8:af:
                    f5:52:44:a6:75:11:3a:40:9c:df:ea:bf:42:1c:21:
                    19:b9:2f:b6:7a:cf:c4:ef:b0:4c:65:c9:b1:41:77:
                    a2:77:02:c9:10:d5:e9:54:aa:2e:e0:97:06:a7:da:
                    9f:b1:7e:4b:4b:b2:a0:5d:cd:03:78:de:07:1b:e5:
                    3d:30:82:4d:6e:18:0c:e0:98:d0:c7:3e:bc:43:2c:
                    3c:76:9b:e5:db:3c:c2:b4:49:f7:78:86:fd:53:18:
                    bd:20:bc:50:ae:ea:77:4b:64:d2:df:b9:ca:55:6c:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:E1:AC:F4:5D:F6:2C:D6:D4:E2:4D:38:5C:1C:90:FE:7E:7B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/44f79adb-f1fe-357b-9d97-216fa5fe7e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:88:31:53:fd:05:07:66:cb:89:1f:08:1e:cd:b1:2d:88:
         ee:6e:91:b7:f0:06:ce:61:c8:5e:56:3f:95:f3:a8:c0:68:c6:
         08:62:70:f7:b6:12:33:12:97:65:cc:cf:46:ba:57:29:c9:ec:
         03:4a:70:36:fb:49:ec:17:05:58:a4:24:13:a0:03:15:97:d7:
         d3:55:a6:08:c5:1c:7b:12:83:5f:89:dc:8d:20:85:9a:65:fd:
         30:de:08:4d:82:ea:f0:14:a6:10:d6:be:58:df:ee:ae:19:32:
         1d:37:20:9e:9b:dd:3c:ff:b8:eb:fd:55:cd:af:54:44:7d:75:
         58:e5:bc:81:28:32:cd:34:06:fd:2e:88:11:0a:75:bc:1c:90:
         b2:34:16:8e:9a:d4:49:99:d8:d9:62:ba:8a:34:77:d0:e6:aa:
         06:83:04:1b:9b:21:24:81:b8:f4:f2:2a:74:3d:ab:c1:6c:9f:
         29:ee:59:3d:4a:cd:1f:eb:f2:95:a8:b5:1b:3f:b1:4b:9e:f4:
         11:54:bf:b9:1d:1e:b5:63:93:c7:63:d7:3b:4b:d1:c8:82:b4:
         1e:e4:5f:41:fe:15:54:b4:8f:d6:c7:9d:9c:dd:83:ad:07:f1:
         10:7b:ac:9d:7d:f6:6d:cf:5d:46:0f:d3:86:8b:a7:ea:64:9a:
         eb:39:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----