Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5b53c57d-5f64-313d-9139-7eefdddb0a8d.roa
File:                     5b53c57d-5f64-313d-9139-7eefdddb0a8d.roa (raw, json)
Hash identifier:          IpL445Hk8XsXt1MYO9qN1lrIq6WWTL+QsYKj8Vdi6tQ=
Subject key identifier:   E6:38:E8:2F:D6:07:A7:22:5C:F0:0E:2B:C3:EC:04:EA:09:B1:39:48
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584011B54A793DC7741BCEAD5580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5b53c57d-5f64-313d-9139-7eefdddb0a8d.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:11:b5:4a:79:3d:c7:74:1b:ce:ad:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=c01931ad-c035-406b-8c00-804c3e5e0ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:6d:58:2f:41:d9:57:6a:a4:a6:4d:ff:11:
                    9c:43:5c:30:0b:97:11:49:e5:e8:f8:7f:76:4d:b7:
                    6b:80:06:76:bd:78:8a:1f:a3:b4:b5:54:42:5e:c4:
                    81:58:60:1f:7b:fc:b8:65:cd:38:ed:8d:ca:a1:68:
                    c6:ca:c6:9c:fa:c4:4f:15:d2:8b:d0:5d:85:2e:49:
                    11:37:55:03:4b:a9:c2:bd:d8:68:85:d2:72:bc:d9:
                    f5:4f:26:f7:fd:7c:2f:3a:85:93:45:5d:f2:b8:df:
                    47:bd:b4:8f:29:cd:97:13:97:fb:55:12:11:12:5f:
                    de:71:30:fc:29:97:a9:68:05:a9:30:e3:e9:4b:c3:
                    d3:e6:5f:c0:3a:f3:47:37:9f:e4:f6:b3:9a:6d:09:
                    95:03:d0:7b:a7:68:9e:53:ec:41:5a:fc:d9:eb:13:
                    36:7f:ab:2a:61:aa:c1:84:dc:35:62:49:9c:93:3d:
                    da:5e:2f:24:a0:fb:27:25:58:20:1c:6a:a3:22:bb:
                    8a:fa:cc:74:d5:ea:45:7a:47:44:71:71:30:0e:e6:
                    18:a2:18:6d:49:77:9c:9f:6a:e7:f1:1e:a0:f8:48:
                    8b:6e:cf:ec:07:f2:df:1f:7f:99:df:82:8e:c5:1d:
                    12:aa:af:e6:f3:9d:11:fe:7d:11:dc:80:db:74:ce:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:E8:2F:D6:07:A7:22:5C:F0:0E:2B:C3:EC:04:EA:09:B1:39:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5b53c57d-5f64-313d-9139-7eefdddb0a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:57:f0:05:67:eb:6f:78:d5:39:7b:56:e5:12:d1:4f:ba:95:
         35:55:37:c2:f3:37:0c:18:79:71:c3:de:3d:1c:f0:d0:5c:fe:
         62:c8:0d:fd:4a:25:e5:98:ec:29:8b:40:c6:6d:ae:c0:9e:3f:
         07:65:d2:46:fa:44:74:8f:97:3d:fa:07:5e:ee:e8:de:44:ce:
         d0:48:6f:77:95:69:05:4a:e4:3f:cc:6e:d9:ee:1a:95:57:bd:
         18:63:12:55:b1:c4:64:71:f4:95:67:f0:59:0e:bb:2b:1a:01:
         43:f9:d0:f4:de:62:af:aa:67:d6:7f:4e:3a:e0:08:3a:4f:43:
         e6:53:ac:b2:cc:18:fc:42:3c:c5:1c:8b:e1:8a:f0:13:02:b3:
         42:b6:27:2d:56:99:fd:f4:cb:82:4b:3d:5b:51:67:26:0c:fb:
         14:fd:58:56:a0:2b:02:65:41:fa:be:dc:b0:aa:6d:4d:82:05:
         f4:98:25:a0:e0:3a:85:06:a8:f4:62:96:fa:3c:f8:32:52:a8:
         14:dc:ac:01:f7:6e:cc:9b:d5:cb:5c:8f:31:d4:5e:86:54:92:
         28:42:49:06:51:70:48:9f:54:91:9e:70:93:b1:ec:58:63:62:
         0a:09:4f:1c:63:ea:c0:05:44:74:a0:80:40:c7:4f:ad:ce:1b:
         4f:21:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----