Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6320ecbc-7045-3ec4-8584-183f237dc967.roa
File:                     6320ecbc-7045-3ec4-8584-183f237dc967.roa (raw, json)
Hash identifier:          gBSU3+vkRcWtzzQ91C9RvAkDvTJAOJGF3YdclVxuhSQ=
Subject key identifier:   B8:B4:AE:D6:B2:7B:8A:4D:D5:72:37:35:7F:6E:7A:86:4B:B3:46:8C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401D7551920F7F9B9A491BC7B0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6320ecbc-7045-3ec4-8584-183f237dc967.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:75:51:92:0f:7f:9b:9a:49:1b:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=b4a6a47e-2210-4435-88d2-c6e1e8455282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:e7:21:19:e0:ec:78:42:97:6a:2d:29:f6:
                    fa:37:12:1d:db:35:93:8c:3a:6c:2c:a9:12:e2:12:
                    d2:de:45:12:69:6b:60:47:fc:ed:05:6a:03:8f:94:
                    6f:f2:8d:c8:e0:b2:b7:5f:ff:42:1c:fe:c1:d7:78:
                    fe:13:d3:bb:ad:76:76:d2:86:ec:11:fe:71:ca:15:
                    c6:d6:f5:5b:51:db:58:3a:e2:75:31:ed:0c:e1:73:
                    ae:3b:a4:ec:5e:4e:e7:7a:ce:f1:7c:58:99:33:16:
                    5a:23:06:9f:81:d5:a1:32:ca:94:e8:6b:f5:16:5e:
                    e5:37:b1:48:0d:43:14:7c:2f:e1:f7:c0:4c:98:58:
                    d7:50:88:dc:a9:81:03:85:c5:d9:57:9a:08:d8:ea:
                    83:a2:1a:4d:da:18:d9:fa:b1:21:6c:cd:4b:29:ce:
                    15:95:00:5b:46:ed:80:fc:5c:90:02:27:96:35:69:
                    63:f4:20:13:59:a4:54:c9:84:7d:14:c1:1b:23:4d:
                    0f:5b:0b:92:dd:db:b2:dc:dd:a7:9b:a2:6d:db:5c:
                    eb:b8:cc:49:68:15:98:92:de:3a:c5:9a:93:2c:b1:
                    e2:f4:83:93:07:34:12:c7:ec:da:ab:6a:3e:4d:8d:
                    14:ee:57:0d:26:e5:1d:f5:57:21:70:bf:ec:3b:f7:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:AE:D6:B2:7B:8A:4D:D5:72:37:35:7F:6E:7A:86:4B:B3:46:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/6320ecbc-7045-3ec4-8584-183f237dc967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ea:3a:35:68:8f:75:a5:74:d5:dc:54:bf:01:b0:56:52:54:
         57:ae:63:2d:0b:f0:4d:93:8a:7a:a3:f2:62:ef:ec:97:73:1e:
         9f:f4:30:00:28:39:eb:58:57:36:85:43:3f:7b:0e:e6:a7:f4:
         b4:a1:bf:88:e2:40:00:e7:5c:25:a8:2e:7e:ff:dd:a3:e5:53:
         81:dc:67:ff:e7:62:44:e1:e6:80:4c:36:7c:75:22:9d:44:8f:
         05:72:a5:e3:62:be:a0:6e:16:ec:fc:9c:5d:dd:68:11:28:5c:
         d5:db:03:a4:7b:ee:74:89:30:bc:72:1c:9e:55:74:47:80:f3:
         cc:6e:1d:3e:f3:d7:b0:21:ea:57:b3:ff:cb:d5:e7:3e:c6:4d:
         9f:01:c5:df:5f:67:ab:3c:88:85:96:9a:b0:8f:e2:d0:b3:c8:
         0d:d7:54:3f:d1:41:d0:e2:34:24:c6:29:d8:9c:8b:04:fe:b7:
         19:c8:6c:43:fd:4b:39:22:c2:5e:ac:bc:47:05:f4:d3:7d:d9:
         49:5a:65:de:b1:8d:03:d9:f6:86:28:fe:43:2d:7d:d6:a9:64:
         44:4c:d9:df:be:da:50:fb:2b:8d:54:97:3a:36:de:5b:16:db:
         8a:e9:43:0c:4c:df:b0:d0:92:07:09:0a:45:cb:ed:47:7c:ef:
         6d:e8:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----