Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5cd913ba-20f7-34fe-9ad1-80a48467af9d.roa
File:                     5cd913ba-20f7-34fe-9ad1-80a48467af9d.roa (raw, json)
Hash identifier:          aG8Qin6cKywBXmGTQxFT93qTVo739IjD7x3aLkzS0sg=
Subject key identifier:   AB:F8:37:76:85:9D:C9:AB:50:80:7B:77:09:54:7F:B3:87:D8:45:AC
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F5DDDF6AB9187C82393328180
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5cd913ba-20f7-34fe-9ad1-80a48467af9d.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5d:dd:f6:ab:91:87:c8:23:93:32:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=ae3db9e8-3999-483e-8e7f-b2972e1f5aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:fc:22:70:28:6a:14:ee:17:cd:a5:68:b7:
                    e4:66:45:23:a2:ac:aa:88:03:43:5d:cd:c0:e7:0f:
                    b0:85:71:83:5f:1f:de:89:16:87:50:dc:e7:f0:9b:
                    c5:95:e3:bd:ed:67:46:28:13:5e:cb:79:c1:2d:b3:
                    da:f5:9b:ce:5e:36:c9:92:fe:4e:ea:fd:4a:71:49:
                    c3:6f:b5:44:75:04:a7:8c:a9:29:8c:86:51:4c:00:
                    d3:bd:26:e0:f0:54:f0:ce:11:98:28:60:bf:bd:83:
                    0b:a1:09:25:03:57:a2:5a:b9:0a:c9:04:a9:00:4b:
                    57:4a:3e:90:0d:11:81:57:cb:b2:83:c4:f5:46:bc:
                    0b:bd:1f:f8:48:c2:87:37:62:31:e8:7f:67:78:1d:
                    33:13:8e:7f:8a:a4:6f:29:85:13:ac:df:9e:f5:cc:
                    f4:a7:66:08:08:a0:08:53:47:53:bd:7e:1c:1f:be:
                    69:05:cc:ca:a0:67:ac:d9:93:2a:c0:68:b2:7c:64:
                    70:c5:fe:ad:3c:b0:33:dd:51:10:2b:b3:1f:b8:a4:
                    54:8f:ea:9e:7c:8c:10:7f:07:08:3f:66:e4:00:2b:
                    c1:02:93:4f:7f:37:bb:9c:96:7a:a0:ac:b1:5d:d5:
                    73:15:4b:61:4b:6a:55:bd:6f:42:25:7c:7a:5b:fc:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:37:76:85:9D:C9:AB:50:80:7B:77:09:54:7F:B3:87:D8:45:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/5cd913ba-20f7-34fe-9ad1-80a48467af9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:59:42:10:0d:98:6e:84:3d:97:5c:4c:74:ed:28:89:36:39:
         ec:8e:c7:d8:4a:78:21:81:a6:ff:85:17:58:46:e6:57:cb:56:
         40:fb:12:c2:2e:c0:b7:1b:96:f8:96:c2:44:5c:e1:10:31:ff:
         f5:c2:79:17:3d:69:b9:12:fd:e2:f7:2d:09:9e:5a:9d:cc:a2:
         60:73:f1:b6:71:13:a6:c7:d0:41:44:15:48:e0:cf:e0:56:6f:
         c0:d9:59:2f:cd:8e:b5:71:35:e9:55:b1:43:54:e0:89:fc:49:
         b4:41:8d:80:0e:ce:24:5b:9b:52:85:4a:7f:bb:13:24:4a:40:
         9b:07:bb:59:59:97:e9:08:99:82:a7:94:b5:54:7a:2e:15:1a:
         56:01:30:d3:ac:02:05:f5:78:63:74:a4:a4:2d:94:40:fa:ad:
         0b:6c:8c:58:be:a7:35:fc:f5:80:5e:f2:74:b9:63:af:73:53:
         5d:c7:48:27:44:3d:54:03:f6:f3:8a:02:8f:a8:c4:0f:b2:32:
         99:ef:45:ec:62:2f:b4:ec:0c:23:4c:5f:3b:e1:ed:a1:a5:0f:
         29:a9:9e:e7:33:43:6c:04:55:d6:2f:b5:87:c4:26:6f:ea:00:
         44:df:ff:75:5f:d7:59:e5:bc:52:07:a8:59:5c:f3:9d:76:10:
         c1:8d:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----