Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/701a0557-de65-3a67-8a9f-9894eaa55ef3.roa
File:                     701a0557-de65-3a67-8a9f-9894eaa55ef3.roa (raw, json)
Hash identifier:          w6x3XPwR2qWtsDNJNiJ2/AfpyKTJ0Iq1+jI34rDyf4I=
Subject key identifier:   8F:AC:4E:65:64:EF:67:86:51:94:FC:E4:C4:65:13:68:05:ED:2F:46
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F320301215E576FBCE42BD0C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/701a0557-de65-3a67-8a9f-9894eaa55ef3.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Sun 11 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:03:01:21:5e:57:6f:bc:e4:2b:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Sep 11 04:00:00 2022 GMT
        Subject: CN=11aeb01e-6091-4d23-8282-20480f8bc8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:9b:85:d4:81:5b:c8:12:3b:20:35:d6:32:
                    9b:fc:c7:20:68:cb:ca:40:2d:1a:ab:b7:81:4b:c7:
                    22:24:bc:9c:0e:12:62:14:68:9d:df:56:54:9e:47:
                    37:53:e0:f4:e3:2c:db:45:92:ca:10:e6:d8:1a:de:
                    a6:a6:95:e3:a4:72:7f:a1:47:fd:8f:c5:0d:2c:be:
                    7c:91:48:e1:85:f1:38:ca:0b:d4:4f:8d:2e:20:c4:
                    7d:fb:b3:36:79:9b:c5:30:5a:cc:ef:9e:8f:01:aa:
                    2f:c7:c0:85:1a:5a:6b:75:6d:64:01:34:c4:00:92:
                    8f:0e:40:6c:2a:c0:05:7e:12:d0:37:b1:7d:c0:d7:
                    b8:90:19:b3:07:1c:6b:e7:ef:0b:4c:cd:c3:be:bf:
                    97:b0:2e:5d:15:e2:74:d8:87:5e:26:ab:bb:b0:2f:
                    3d:69:de:6a:45:66:b4:a9:9c:6e:8c:af:09:4f:69:
                    94:69:ed:2f:61:13:0d:b2:2a:74:54:e1:f7:17:b3:
                    c7:af:ca:25:12:51:51:11:f5:5f:4f:7c:3b:ee:e9:
                    0b:e7:ef:01:06:ce:59:2e:9f:79:27:ad:2f:fc:57:
                    84:8d:50:4e:77:e1:c6:2c:2b:cb:cf:21:28:ca:b4:
                    99:b2:0b:e6:4a:6b:41:8e:76:ec:0d:bf:5a:95:b6:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:4E:65:64:EF:67:86:51:94:FC:E4:C4:65:13:68:05:ED:2F:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/701a0557-de65-3a67-8a9f-9894eaa55ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:f8:6a:69:a1:0c:df:12:28:ea:81:d8:26:17:62:a0:c1:b8:
         3f:85:72:9f:8d:82:b7:0a:78:cd:d5:14:5a:17:e3:17:10:0b:
         65:ae:49:86:27:50:ce:92:47:de:0c:61:d1:f1:e5:13:3e:57:
         81:f5:9d:84:7e:ac:11:32:43:15:1e:e7:c6:db:25:51:af:91:
         d6:33:52:6a:c6:73:5c:07:cd:78:48:a1:a3:a2:41:99:3c:23:
         f8:66:b0:c0:2f:d1:16:ab:84:0d:33:2e:e1:d7:be:d9:d0:5a:
         ee:53:8f:3e:52:8c:87:63:47:79:98:fc:79:3d:d4:fb:f6:c2:
         fc:b2:89:ac:65:0f:99:1d:74:5b:4b:90:b8:e6:c2:1f:26:91:
         fc:a9:17:fc:db:19:35:54:32:b2:c3:63:d8:55:7a:6b:24:74:
         99:08:70:6d:78:23:01:cc:e3:b8:63:62:b2:cf:7a:64:c4:ed:
         32:df:7b:0f:dc:cb:3f:07:e7:b8:7b:26:ca:33:6e:dd:14:71:
         46:1c:ea:dd:e5:e6:a1:26:ce:67:78:36:57:db:00:f5:89:3d:
         6b:00:f6:7b:67:dc:a9:d1:ad:35:57:c8:d9:c9:97:4a:49:66:
         48:56:bb:a2:13:e8:30:ed:da:a8:aa:50:a6:91:8c:0d:0a:3e:
         b2:60:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----