Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/525c7c59-de38-3b45-bde9-f22d6b759660.roa
File:                     525c7c59-de38-3b45-bde9-f22d6b759660.roa (raw, json)
Hash identifier:          sWyhYwpuY5sxbwOuAIoBI7eAfiRoqyYzekH7mraORM0=
Subject key identifier:   48:A7:92:84:88:64:8B:B4:A3:4D:39:4C:00:F2:1D:95:57:89:A9:EC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FCCD5C50C4F77289F9E12DA40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/525c7c59-de38-3b45-bde9-f22d6b759660.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:d5:c5:0c:4f:77:28:9f:9e:12:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=73f2b9c7-34da-4853-b576-fe135a380f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:79:d4:27:6c:65:b8:a7:38:b4:c4:38:a1:
                    07:25:7f:47:6e:df:9a:0e:1b:cb:08:34:3f:07:f5:
                    fb:aa:9c:d5:13:0d:23:4a:da:74:56:f1:b3:8b:d3:
                    fa:98:c0:1b:eb:b9:51:b8:9e:75:08:ec:54:0e:a9:
                    5f:6c:43:48:60:1a:dc:26:cf:1d:f4:d8:2b:06:20:
                    d1:4e:fa:4a:92:a3:df:6e:0b:3c:0d:ae:d6:e2:1e:
                    0f:5f:57:49:d1:9a:a7:42:a6:0b:55:39:0b:3c:64:
                    ee:f7:de:db:48:40:ee:2c:18:b4:91:3f:55:c0:92:
                    ac:c2:5f:e6:a2:e8:d5:48:49:92:1d:7b:c6:af:56:
                    89:64:03:44:72:1a:cb:5e:2c:aa:65:ad:e8:24:fd:
                    06:eb:76:0a:29:38:5a:db:97:87:d6:8a:ef:ed:fa:
                    cc:3e:f3:eb:9f:56:8a:67:67:d1:ab:26:08:55:3e:
                    3a:d3:8f:30:65:de:29:60:4a:0f:c1:b7:3c:0b:15:
                    a4:9f:fc:c0:7c:33:9d:35:00:96:ff:ef:4b:71:a6:
                    8d:31:9f:84:8d:a3:8b:77:8d:ee:9b:d0:cc:10:03:
                    2e:39:92:a5:81:6f:73:37:ff:97:2f:d1:42:e2:a6:
                    a7:2e:d7:62:9a:cb:33:36:17:07:37:3e:7c:d3:26:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A7:92:84:88:64:8B:B4:A3:4D:39:4C:00:F2:1D:95:57:89:A9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/525c7c59-de38-3b45-bde9-f22d6b759660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:bd:e4:78:d0:43:74:be:ad:bf:8f:f3:b9:b5:a1:dc:02:1c:
         16:54:24:49:fa:d9:61:e5:e4:ea:6a:ec:65:f6:3f:5a:39:3d:
         fe:36:18:4c:94:58:c2:ab:39:fe:7f:0e:91:f6:aa:df:3a:55:
         3d:d4:79:a6:f4:1d:bd:93:e4:68:b1:c3:33:0c:37:1b:cd:7a:
         a8:7e:aa:9c:3f:24:1b:a7:3d:74:e7:8d:95:83:ec:49:24:98:
         9a:e2:c4:eb:89:6f:b5:0f:da:74:1f:05:ea:27:2d:7d:e1:ea:
         0a:ba:42:76:23:4c:d5:2d:d1:a9:43:97:b0:46:73:8a:dc:69:
         fa:1c:cb:3f:0c:65:ee:78:b9:45:f7:86:bf:9e:63:a3:db:d8:
         de:fd:f2:4d:b0:c3:f8:bd:18:c1:14:19:d6:88:a5:4e:71:b4:
         90:94:ea:aa:a6:99:23:ba:b3:b6:08:20:14:d1:3d:05:0a:1d:
         3c:c7:e7:31:cd:02:24:3f:77:7a:6c:2a:b1:0e:41:ac:bd:0e:
         c2:00:4e:f4:b8:ca:d7:d8:1b:a8:67:8b:50:55:49:51:c2:0d:
         8e:85:9e:19:d7:9a:33:50:50:bf:ea:38:bc:56:67:e0:c9:3b:
         bd:24:0e:10:f3:54:8b:36:27:48:ff:b6:ff:2f:d5:be:e0:6d:
         5a:ec:84:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----