Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4b13f67f-c134-3467-9f18-41817a106134.roa
File:                     4b13f67f-c134-3467-9f18-41817a106134.roa (raw, json)
Hash identifier:          0Rxuda4xnl4N/dG9Ma3SbrroVYXAT9spHlau6ZT1Bzs=
Subject key identifier:   BD:D4:DE:AC:CD:3E:2F:91:BE:7B:F6:BC:84:9A:FD:9A:29:B8:28:82
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858402497A247EB9D5645F421F100
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4b13f67f-c134-3467-9f18-41817a106134.roa
Signing time:             Sun 04 Dec 2022 12:00:00 +0000
ROA not before:           Sun 04 Dec 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:97:a2:47:eb:9d:56:45:f4:21:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  4 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=f8825392-30d7-4593-ab2d-bc98240b1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:c2:c0:cf:0f:df:28:bd:e6:9e:da:eb:f2:
                    6b:c9:59:c1:01:41:8b:3a:b7:ba:5d:bc:0f:1e:d6:
                    76:16:2c:39:a8:56:36:94:de:4d:3a:60:58:64:39:
                    88:95:34:5b:f9:5e:c7:7d:bb:6d:ae:6d:68:9f:3a:
                    8c:39:ee:9a:da:07:ef:47:79:de:89:b6:fd:1e:07:
                    6e:ea:7f:96:cf:97:b1:c5:c1:ad:77:47:28:21:c2:
                    d5:e8:c3:d8:76:9b:a8:25:36:c6:21:2d:51:d7:78:
                    01:2d:7a:b0:19:04:a0:7d:cd:cd:d4:78:b5:b1:bb:
                    03:b2:fd:49:79:ae:a2:04:21:9f:a4:68:18:be:e6:
                    7e:cb:ea:78:e2:02:b7:71:70:fe:4e:78:9a:21:16:
                    78:a0:f3:33:34:d5:ea:24:e9:90:71:82:1b:36:73:
                    30:b1:ab:00:53:bc:8f:83:bf:83:00:e3:15:b2:0b:
                    51:a8:6c:43:73:89:63:e9:97:40:d5:fa:5c:ed:9a:
                    a8:dd:83:21:11:d0:0a:35:8b:9c:34:7d:40:6e:b2:
                    17:26:67:9e:db:15:6a:9f:9f:a4:c6:b2:63:33:08:
                    a6:5c:b3:65:fc:9f:e7:72:95:e7:07:11:ed:95:54:
                    a6:d3:67:36:48:08:f9:dd:e3:e7:ef:73:a4:e0:52:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D4:DE:AC:CD:3E:2F:91:BE:7B:F6:BC:84:9A:FD:9A:29:B8:28:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4b13f67f-c134-3467-9f18-41817a106134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:33:8b:b5:e9:4b:54:0e:31:2d:2d:e7:cb:6c:76:48:23:7f:
         a4:6a:e1:22:5f:9d:12:f0:94:c6:5e:6a:13:2b:68:ec:49:c3:
         36:b3:d3:21:d0:72:52:d8:a7:5a:05:03:c8:b7:26:b2:8c:ba:
         54:bb:50:8c:9e:e5:53:6d:33:52:f7:3b:6b:aa:22:3c:d0:87:
         2a:7a:3c:bd:09:6b:b5:49:e1:1a:29:83:c5:27:dc:c3:1e:af:
         ae:19:f0:23:e1:f6:b5:b5:ea:f8:51:8f:a6:0e:b6:6f:a1:84:
         36:09:56:d9:32:ca:1d:65:1b:a4:83:56:ac:b5:78:e5:e6:7e:
         a7:33:4f:35:36:6c:28:de:bd:53:89:b0:7b:61:c1:28:5d:63:
         bb:0d:07:84:c6:59:c9:96:f0:f6:97:12:2f:3b:c2:6b:f5:9a:
         52:d0:31:5d:9e:ae:e0:e2:e1:2e:48:fd:2c:06:18:cf:e1:9b:
         98:ef:ff:b8:df:54:19:4b:c3:81:82:63:ee:ca:4d:69:a7:1d:
         10:32:e8:c4:08:11:5b:2c:40:ad:e2:24:02:1a:2d:a2:1a:bf:
         e4:d8:9d:1d:25:e2:58:d5:3f:6f:0a:e5:07:5a:06:fa:30:0e:
         5f:4a:91:29:09:f2:66:09:cd:fc:af:3b:f4:19:87:b8:73:83:
         5f:20:d4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----