Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4518e459-46be-389f-a719-05ca3f540b24.roa
File:                     4518e459-46be-389f-a719-05ca3f540b24.roa (raw, json)
Hash identifier:          qUqBlFz+6SKOA+jHIiMqMhee679kasgpoynUEhanmmg=
Subject key identifier:   F0:50:E8:81:35:DD:B9:AC:87:DD:6A:3B:B1:46:81:05:0E:63:8B:69
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EACA41A382123656FAB27FCC0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4518e459-46be-389f-a719-05ca3f540b24.roa
Signing time:             Fri 22 Jul 2022 12:00:00 +0000
ROA not before:           Fri 22 Jul 2022 12:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ac:a4:1a:38:21:23:65:6f:ab:27:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 22 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=0e94c251-de78-4bbd-83cb-11af4666ec67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:dd:f9:35:3d:db:b4:c7:3d:f8:8a:f1:aa:
                    09:53:97:7c:4b:5f:03:89:ca:e6:b8:96:13:61:76:
                    74:af:73:a3:a2:5b:c1:69:e2:72:b9:56:37:65:f5:
                    13:9d:e9:ce:53:84:ab:39:b3:e3:87:80:1f:ff:5e:
                    fe:60:0c:f9:ac:5d:bb:72:8c:b9:c3:34:07:97:16:
                    57:60:7c:20:2e:cc:7b:eb:59:5c:7d:d0:16:56:33:
                    d5:db:8b:02:be:77:1a:77:a3:a9:16:73:ba:06:34:
                    56:d9:b8:d3:07:55:ea:e4:88:68:5a:0c:12:51:fd:
                    f8:d4:78:1c:da:50:eb:82:4c:0d:05:b6:f3:98:2d:
                    5e:5c:94:6a:64:b9:85:bc:f5:c3:14:96:35:04:fc:
                    c0:9c:ad:68:9b:c8:b7:fe:4d:c6:3f:5a:3f:31:d6:
                    27:5c:45:c3:e3:e5:03:d6:49:0e:5e:80:d0:e8:0f:
                    49:87:39:d0:d0:30:cf:57:9e:3c:71:e3:3f:bf:97:
                    ad:0d:d9:05:dd:36:bf:10:d5:80:5e:43:aa:58:48:
                    7d:93:36:54:c7:b5:80:65:bc:3e:a7:75:27:80:18:
                    92:1f:db:2d:c5:4f:35:21:a6:a8:12:9f:53:63:39:
                    c4:16:e3:7b:01:82:3f:72:9a:ea:90:2d:0f:9f:c7:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:E8:81:35:DD:B9:AC:87:DD:6A:3B:B1:46:81:05:0E:63:8B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4518e459-46be-389f-a719-05ca3f540b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:a9:e1:02:44:4c:8c:7d:90:c8:b2:5a:dc:e3:44:44:41:e1:
         14:93:64:4e:90:98:aa:b3:48:47:8f:ee:1c:7a:e0:cf:80:1f:
         27:0e:fc:0e:a9:6f:e5:5a:62:f8:aa:85:aa:4f:0e:c4:6d:81:
         7f:5b:45:ea:42:fe:50:b7:d6:0c:2e:ec:e7:cf:42:ca:24:d5:
         a4:b8:f8:9a:36:fe:0b:3a:e8:82:b1:75:85:9c:49:d1:84:56:
         e3:bf:99:92:79:3b:81:34:d7:c6:14:fa:1d:89:ee:0c:a6:1f:
         d4:d1:e9:8c:e3:b4:ae:54:d6:46:d5:1d:8a:3e:57:61:03:a9:
         aa:91:28:86:1d:f8:ae:12:a9:6e:63:81:25:cb:0f:82:cf:b7:
         fe:2f:20:d2:60:3f:31:a1:a4:e9:03:12:43:12:56:12:cb:55:
         84:57:39:75:a6:af:86:95:1c:ef:f8:78:5f:45:66:c6:13:0c:
         0b:1f:15:6a:81:24:83:9d:2a:07:90:1b:c2:39:e9:a6:76:18:
         5d:bc:ed:cc:e7:ad:14:b5:ef:9b:ca:f2:43:6c:f2:e1:d1:e8:
         bb:34:53:4c:cd:2c:f9:60:13:81:7b:76:4f:ba:bc:b3:75:ed:
         75:5f:1d:ef:11:9d:33:97:d3:74:b5:ab:3c:e3:cd:bd:63:e4:
         66:33:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----