Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7296d3b4-4d1a-3b24-8813-01b6f91f5265.roa
File:                     7296d3b4-4d1a-3b24-8813-01b6f91f5265.roa (raw, json)
Hash identifier:          KfwQJOCTwm4aDxkhxN1ha1j5cLyK6x63woz722mZoYk=
Subject key identifier:   8B:00:D8:A5:C0:A1:76:63:1C:86:58:C5:06:3F:70:31:1E:0D:74:13
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FE26C9F81A6ABBF9E57C6F890
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7296d3b4-4d1a-3b24-8813-01b6f91f5265.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e2:6c:9f:81:a6:ab:bf:9e:57:c6:f8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=cd475888-eabd-4d26-b946-8497985552c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:a8:04:62:7a:b4:f6:64:8f:88:e7:56:bf:
                    c9:c7:93:eb:5d:14:89:77:98:93:30:90:a7:6a:4e:
                    49:ce:f3:18:24:25:e1:26:69:26:2f:29:83:2b:f4:
                    df:df:de:9c:5f:39:5a:02:84:75:64:24:46:97:12:
                    27:80:8e:7d:e8:59:dd:f3:fe:c2:c1:3a:44:c8:08:
                    71:12:6b:b5:a1:09:14:e7:94:1f:1c:d1:ca:56:db:
                    64:3f:a4:1e:c6:69:b5:d2:4d:cc:8e:c2:d6:4b:e0:
                    b6:0a:18:e8:ac:a7:1e:d1:5f:e8:d6:23:3e:d2:15:
                    22:db:35:f0:68:b3:aa:70:48:0d:c5:b8:08:c0:01:
                    0d:2b:3c:fe:3e:8a:c5:12:a5:33:dc:dd:2c:33:fb:
                    54:0e:18:e1:b8:0e:ab:42:fc:54:7a:ae:26:f6:65:
                    e9:87:7f:de:f9:5e:2a:31:57:0e:39:72:a6:af:ff:
                    05:59:ec:f2:bf:bf:91:0e:a7:0f:a2:80:97:36:53:
                    e4:91:49:8a:84:ed:ea:b8:bf:aa:aa:83:dc:ec:21:
                    7b:21:6d:b0:9f:e3:a7:d6:e5:4f:75:f0:6e:2d:33:
                    cf:7f:41:4e:ea:a7:3e:ff:02:76:c8:50:25:3d:28:
                    2c:51:cc:e2:87:93:27:fb:ab:51:ac:2f:26:7f:d9:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:D8:A5:C0:A1:76:63:1C:86:58:C5:06:3F:70:31:1E:0D:74:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7296d3b4-4d1a-3b24-8813-01b6f91f5265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:02:2d:59:25:21:30:e4:23:88:e3:66:8c:16:8d:54:a6:0f:
         e1:2f:36:03:da:91:c0:bb:bc:e8:38:c9:30:8e:35:6b:15:d7:
         2a:84:cd:ee:0a:69:23:27:65:52:47:a8:c0:ff:25:e6:1c:84:
         7c:7f:b0:c0:ed:e2:0a:aa:94:4f:69:89:05:f3:a6:46:45:a4:
         2f:bc:78:3e:2b:55:1f:a0:9d:78:03:45:98:90:98:a6:2f:44:
         a1:2f:20:73:16:97:04:2b:27:da:c3:97:b2:ce:19:23:bb:99:
         69:24:26:81:18:b9:84:2e:f6:90:d9:50:e0:72:7a:36:1e:d7:
         47:12:87:6e:44:11:5c:fb:03:cf:9b:49:97:04:22:1c:0f:ba:
         f0:dd:00:ad:42:df:68:82:a7:ac:00:6a:84:e3:79:be:1f:cf:
         50:42:7c:46:ee:5a:56:38:69:f4:e1:a1:e9:53:56:b1:34:30:
         14:60:df:62:fc:58:88:21:b8:e9:ea:11:93:8c:22:af:38:72:
         4b:54:bb:bc:2e:98:c6:80:a2:2d:96:86:32:f1:3f:56:34:4f:
         0d:69:bf:49:28:3a:f9:a2:2a:0f:43:4c:6e:1f:6d:e1:c0:40:
         be:51:1d:a6:9d:c9:2b:f9:fc:ba:11:19:d6:a1:c2:db:4f:53:
         3b:d1:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----