Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7595453b-dcef-36b7-ae79-3559f0f5e4d1.roa
File:                     7595453b-dcef-36b7-ae79-3559f0f5e4d1.roa (raw, json)
Hash identifier:          uF5MoiT2HIEAAeHzJr+fZx46nqcEr6mN35y76BvAwcU=
Subject key identifier:   F1:B4:7C:6C:89:F0:4E:EC:1C:0F:81:F8:B1:9C:8D:C1:98:D2:5A:96
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EFDB734E4A46222BE38CB58C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7595453b-dcef-36b7-ae79-3559f0f5e4d1.roa
Signing time:             Sat 20 Aug 2022 12:00:00 +0000
ROA not before:           Sat 20 Aug 2022 12:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fd:b7:34:e4:a4:62:22:be:38:cb:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 20 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=dfb7b6d9-76ad-411b-a3ba-39240f9beda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:aa:6f:d3:4f:bf:4a:51:b0:1a:7f:f9:d4:
                    39:92:1a:f5:d9:18:f5:42:b6:0b:51:23:0a:83:7e:
                    a2:f7:c1:1b:66:da:d0:e9:66:d9:3c:79:51:62:63:
                    a1:34:5a:49:b5:c5:69:db:69:c1:9c:53:0e:f5:6a:
                    d8:27:50:b7:ce:2e:e2:55:08:3a:12:7f:fa:55:5b:
                    26:92:0f:d7:19:ba:c9:60:ad:5c:0b:f5:99:bf:56:
                    5f:b8:bf:59:29:40:d2:6b:44:cb:22:da:91:31:b9:
                    8b:55:51:ad:21:87:49:c9:ad:de:59:ed:df:8f:d3:
                    bc:aa:b8:43:bf:30:73:1a:97:30:f3:3e:96:52:17:
                    bb:0d:68:82:1a:fe:83:45:38:b4:b2:ce:d7:c5:50:
                    c7:bd:79:c3:45:e0:27:61:56:c8:55:05:84:2b:7d:
                    52:06:85:c1:65:dd:ea:e0:67:fb:ef:48:8d:07:14:
                    20:ca:c4:9a:8e:03:ab:2c:8d:13:c7:ec:f4:7d:69:
                    15:27:09:17:11:45:58:b5:7c:75:50:b9:17:25:89:
                    fa:20:e9:32:f1:45:42:8f:67:25:61:db:21:7f:2d:
                    be:4c:10:ed:50:27:be:f4:c1:1a:5d:c4:22:4e:3e:
                    ed:f5:35:e2:03:c1:06:ab:b4:7b:32:be:af:1b:00:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:7C:6C:89:F0:4E:EC:1C:0F:81:F8:B1:9C:8D:C1:98:D2:5A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/7595453b-dcef-36b7-ae79-3559f0f5e4d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:c0:96:ba:03:df:95:99:cb:78:50:7e:9b:92:a7:03:f2:
         1e:57:6a:4f:d0:68:cd:24:16:a7:36:bd:14:08:9f:83:85:4a:
         b9:39:41:a1:73:2e:31:74:f9:23:47:3f:c9:d5:8d:64:bb:7c:
         86:c6:3d:4f:f7:21:cf:05:59:8f:27:98:c5:dd:b0:ea:d5:a5:
         34:6e:ca:8e:7b:2d:25:a4:db:1d:b6:f6:aa:05:a7:f6:ac:85:
         8f:81:a6:f5:ad:01:f0:fa:97:25:c9:d2:77:35:05:1f:60:98:
         d7:47:7d:ad:ba:14:d0:cf:cd:2f:2b:3c:50:a7:8b:29:61:a0:
         51:a9:13:43:70:44:81:ed:56:86:7c:60:bc:91:45:9e:3a:77:
         6b:23:16:75:21:0c:77:1b:1f:e7:84:3f:4c:21:96:cb:5d:78:
         4d:27:ec:73:46:c0:da:87:c3:43:1d:45:0f:a0:e3:82:e4:e2:
         aa:d6:e2:cf:5c:e9:a8:9a:63:94:cc:45:45:16:a8:51:4d:59:
         ca:f6:29:09:4d:b5:af:1d:92:83:20:a4:83:90:6e:b9:66:61:
         4f:ee:2a:37:fe:61:5c:1c:7e:1e:d3:38:cd:91:6c:7f:40:e9:
         3c:73:8f:25:18:11:4d:7d:46:94:13:89:8d:cc:72:7b:95:6f:
         f2:13:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----