Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/52e097bf-5763-3083-a2e1-6ca37938b30c.roa
File:                     52e097bf-5763-3083-a2e1-6ca37938b30c.roa (raw, json)
Hash identifier:          qiS+Vui3tn2WrgiLM7CpTbZ/v2KsVxlkpnpTtb3p/og=
Subject key identifier:   C7:91:B4:4D:E5:71:CD:B7:66:F0:0F:A3:B2:C0:31:AB:22:6F:B9:4E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EC75335EB2CF2C7BB49EC6480
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/52e097bf-5763-3083-a2e1-6ca37938b30c.roa
Signing time:             Mon 01 Aug 2022 12:00:00 +0000
ROA not before:           Mon 01 Aug 2022 12:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c7:53:35:eb:2c:f2:c7:bb:49:ec:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug  1 12:00:00 2022 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=2259967c-09ac-4217-bead-d0d00ab55ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:4d:d1:dc:67:59:71:22:97:0b:b7:6a:48:
                    12:71:0f:ca:23:5c:e8:14:85:c1:b8:10:32:ea:8d:
                    ce:af:38:cf:7b:34:88:c8:d9:49:13:89:7d:af:a1:
                    ca:2b:33:7e:2c:ac:0d:4c:0d:45:4b:06:9b:c3:67:
                    a2:36:f4:fc:26:bf:62:41:7a:22:39:54:88:46:d3:
                    c0:1b:4e:e7:58:e6:81:08:55:4c:89:cf:55:31:1d:
                    29:a2:c6:f8:e4:23:e9:01:41:ab:73:7a:f4:67:ab:
                    b7:a0:27:22:c2:2b:92:d0:78:78:75:a5:0f:76:a2:
                    e3:f3:c0:7c:25:00:49:23:81:bd:de:bc:d2:85:91:
                    cb:a1:70:0d:9b:5a:ac:03:66:8d:99:fa:4f:ad:2a:
                    1c:cb:a6:d1:dd:0b:cc:28:91:09:c6:da:ea:7c:fb:
                    68:07:84:f1:4b:71:c0:37:08:c8:8e:03:ac:45:9d:
                    c7:22:e6:ef:cf:10:e5:9e:4e:fc:55:35:ae:f6:e8:
                    d1:16:3a:00:9d:c3:c7:f2:34:3a:be:ae:7b:40:cc:
                    94:8e:b2:3f:9d:a8:c3:a3:2f:99:82:fd:47:9a:e5:
                    9d:f5:48:8f:24:bb:f3:80:1e:98:2d:ce:6d:d1:d4:
                    8d:a0:24:3b:30:d3:9f:76:8a:ed:65:93:a6:f4:8a:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:B4:4D:E5:71:CD:B7:66:F0:0F:A3:B2:C0:31:AB:22:6F:B9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/52e097bf-5763-3083-a2e1-6ca37938b30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:50:32:fe:96:8d:6f:f3:2b:92:c4:48:cf:b0:45:65:a8:8e:
         74:21:c8:95:3c:f2:dc:2a:3c:32:74:c1:48:a0:9e:97:e3:c4:
         f0:d8:5e:0b:47:1d:22:06:2e:a6:0d:50:4e:c1:8a:d1:29:24:
         22:58:91:ac:2a:bf:43:73:93:13:8f:22:59:bc:29:2a:86:f9:
         10:4d:5c:4f:90:d0:b3:05:a1:80:93:02:e7:49:bb:ef:9b:12:
         35:b0:99:8a:f4:fb:87:d5:d6:f1:28:d7:51:ba:e3:12:71:4f:
         ef:e2:6c:90:0f:a3:6b:35:a9:56:33:c8:02:69:2c:99:5c:0f:
         09:fe:eb:31:eb:b6:45:9f:15:77:5f:97:65:f6:62:69:54:e7:
         dd:88:9d:24:ae:01:94:90:de:c7:cc:33:87:2d:40:33:86:a9:
         5f:12:78:00:83:47:9f:ae:03:e2:ad:1c:64:ce:b3:76:e5:3b:
         db:60:ef:00:f6:04:7d:3e:dc:ca:7a:c9:88:73:af:96:69:89:
         07:0c:17:89:05:9a:26:ca:83:0b:5d:a2:95:41:ae:00:88:e5:
         ae:63:80:cc:21:3d:a9:f7:e1:c9:f9:16:36:1e:e8:1d:64:e4:
         fa:b7:2f:54:54:8f:7f:05:fd:be:12:41:cd:bd:4b:2a:f8:6f:
         c2:49:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----