Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/575257f3-2964-34d6-9e81-36fbfa10ac1e.roa
File:                     575257f3-2964-34d6-9e81-36fbfa10ac1e.roa (raw, json)
Hash identifier:          cP8Ccx1Y4Jp26OxqpIkBktx0V/9ZgtAk3gsYzh5MXRw=
Subject key identifier:   E0:3A:EE:8A:A3:6D:00:B0:46:A9:AC:86:1D:CF:AB:CC:89:5B:86:2B
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F847C9A5F9E10B1092D9249C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/575257f3-2964-34d6-9e81-36fbfa10ac1e.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:84:7c:9a:5f:9e:10:b1:09:2d:92:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=2040fd2e-988a-403a-bcac-47ca42570e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:fe:5f:b0:1c:11:91:c6:a1:5b:77:18:9e:
                    86:92:24:a0:bb:8e:b3:61:de:a1:d9:12:27:8d:8f:
                    0f:2f:7a:f2:88:94:b5:8a:2b:82:2c:06:47:bf:9e:
                    04:3e:75:48:b5:06:d4:83:6f:b9:cf:7f:e6:3f:b8:
                    d7:e6:37:66:eb:40:40:c4:4c:81:d6:b2:58:7a:15:
                    72:63:1f:2c:81:43:f7:2c:4e:40:1d:bf:08:9f:ad:
                    c7:e2:da:fa:d0:ba:e3:e8:1a:af:1a:51:d2:fc:ce:
                    a0:43:40:42:ab:3d:a8:d9:fc:c2:af:53:89:8c:ad:
                    99:97:c9:0c:58:06:db:fa:35:08:5e:c0:d7:cc:ba:
                    b5:e0:02:03:48:1e:19:ff:5b:40:11:3a:e1:49:9b:
                    af:2b:32:e9:e4:b6:3d:f1:37:b7:9e:71:ec:ab:6a:
                    3a:81:3e:fc:3d:4a:c4:b9:d7:a3:3d:1d:20:3a:21:
                    84:3a:f4:17:c7:b0:45:19:39:d1:32:d2:8e:08:a2:
                    5f:51:59:5d:5b:d5:1b:49:d0:b9:b6:32:78:64:9c:
                    2b:61:29:69:b3:18:08:a3:36:c7:52:2f:c7:f3:fa:
                    ee:13:16:38:86:a0:e3:ab:52:23:7a:ac:03:3a:dd:
                    8f:41:31:ea:4d:00:cf:70:2c:da:fd:92:9d:1e:8a:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:EE:8A:A3:6D:00:B0:46:A9:AC:86:1D:CF:AB:CC:89:5B:86:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/575257f3-2964-34d6-9e81-36fbfa10ac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:e7:98:8a:88:77:98:77:ed:aa:71:4e:36:6d:b8:d8:43:b8:
         63:62:da:e8:5e:e1:31:56:71:39:03:c7:14:85:b4:77:32:ad:
         a0:9c:29:2e:3d:b5:7f:a5:d9:ff:56:f6:2a:40:c7:46:cb:9e:
         1b:db:d5:12:3a:74:34:a1:8c:1c:ea:93:13:4d:66:5f:91:30:
         ea:64:2e:81:2a:b1:7a:f0:33:ac:56:82:d9:9b:ad:a5:1a:71:
         be:44:26:7b:96:cf:91:8c:62:2c:56:69:ca:33:b0:b7:34:72:
         6a:45:ba:23:5c:85:fe:c5:26:29:66:8a:50:e4:27:f9:13:6e:
         4a:35:f0:19:c7:44:7a:60:c5:84:74:73:4a:84:e4:9a:ea:1d:
         94:9e:95:90:c1:5f:2e:6f:a2:83:d1:7f:eb:6d:a9:06:5b:15:
         6c:04:8d:70:78:13:d1:be:1b:fb:cd:98:19:71:aa:e3:79:8e:
         99:cb:ff:35:08:f7:7f:ee:87:d9:6f:00:8d:e3:98:05:f3:aa:
         12:04:94:47:40:6d:64:25:f9:8f:c0:be:3a:89:8b:61:07:14:
         c7:f6:a5:95:4e:fa:4f:56:e6:d8:ed:d6:ac:0a:89:6d:26:55:
         11:3c:47:b2:c5:49:47:63:ae:9d:51:18:01:d1:d7:f9:37:9d:
         44:1f:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----