Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4f253b65-3459-3299-9e2f-63b4a17ecde6.roa
File:                     4f253b65-3459-3299-9e2f-63b4a17ecde6.roa (raw, json)
Hash identifier:          gxcK9cJPQuhEfTNZx8QRdNLrngjIvgXZqn6//rwYrZs=
Subject key identifier:   50:43:54:2E:39:64:40:A2:B0:5A:EA:43:86:34:B7:5E:AF:2E:C5:03
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401AF2AA981B3659A3CB652620
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4f253b65-3459-3299-9e2f-63b4a17ecde6.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Sat 03 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1a:f2:aa:98:1b:36:59:a3:cb:65:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Dec  3 05:00:00 2022 GMT
        Subject: CN=ba363caa-e438-444e-b414-f3efcbce2321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:ad:9a:92:08:e7:95:74:41:28:62:fe:35:
                    5a:1c:60:be:2e:76:81:e1:fa:5e:c5:58:a9:75:c7:
                    23:23:10:c7:87:b8:dd:46:1d:ce:71:d1:c6:13:77:
                    33:50:cb:58:4d:63:b7:7e:57:08:bb:10:72:48:24:
                    42:99:24:a0:cf:7b:73:95:b3:2c:7d:7b:8d:fe:06:
                    ec:f6:e7:ad:74:28:f9:41:2f:89:f6:7d:37:04:fd:
                    37:1e:08:8c:11:e3:1e:80:7f:47:ed:b7:d7:9f:cd:
                    5e:42:89:3a:cf:b1:29:24:72:bd:37:c0:fa:14:24:
                    f5:66:ad:5d:9b:67:00:2a:f9:64:76:df:50:9c:2c:
                    f4:79:5f:16:e5:2a:2e:a4:ec:17:7b:50:09:a9:a7:
                    80:f8:02:f5:6a:ce:76:52:a5:f1:57:c8:c2:bc:98:
                    a5:7f:bd:3a:d5:ff:23:32:26:e5:7e:05:06:d8:08:
                    2c:78:9e:a1:ab:b4:29:2c:74:84:ab:85:28:24:d1:
                    2a:62:42:2f:77:50:87:d8:34:f8:ed:5a:12:43:d2:
                    7c:42:7f:95:74:7f:c7:c1:b7:74:f1:b2:0e:9a:c4:
                    e4:53:cc:fb:fb:a7:4c:03:35:61:85:76:fc:7a:db:
                    31:ce:5b:bb:3f:7d:32:c9:a1:77:7e:49:8c:74:47:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:43:54:2E:39:64:40:A2:B0:5A:EA:43:86:34:B7:5E:AF:2E:C5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4f253b65-3459-3299-9e2f-63b4a17ecde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f6:3c:81:16:57:69:65:b7:c0:3a:89:43:10:17:b4:06:85:
         33:a2:da:6c:51:24:2f:74:c7:5f:81:e3:ae:16:3f:9c:0e:70:
         63:7a:99:bf:91:d6:40:0a:31:2a:db:f6:2b:2e:aa:22:e2:0d:
         fa:70:0a:45:f0:67:ee:56:7a:6f:2d:1e:30:81:b7:80:0b:3f:
         6b:41:7e:25:e5:7b:34:24:25:5d:39:61:23:f7:0a:72:eb:3d:
         5b:83:ca:b9:9b:07:e4:30:ea:0b:7b:ea:5a:48:5d:73:fc:c9:
         b0:83:2c:ea:e9:fd:44:4d:f7:5a:a5:35:77:fa:49:75:73:ab:
         9f:26:05:4a:a5:0b:7d:e3:60:dd:d1:7d:53:74:5e:d3:3b:d3:
         86:63:59:c8:78:3d:4c:35:80:de:6e:b8:d2:73:9a:a5:f6:60:
         cf:d6:a0:99:89:49:fd:64:c8:34:86:b9:d9:9e:0a:7c:fe:88:
         99:7f:0e:dd:99:27:62:1f:78:52:36:4d:94:61:43:51:1d:df:
         71:a7:7b:f8:29:ee:22:52:73:d8:63:94:84:3f:0a:12:6d:80:
         25:11:c6:f1:dc:08:e4:bf:7a:1b:46:19:39:fe:6c:a1:e0:7c:
         d2:e5:30:96:ff:b5:66:56:31:54:fc:b2:82:01:1c:e8:10:ec:
         b0:83:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----