Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76bcc30f-c945-336c-8d78-40a1662c2f14.roa
File:                     76bcc30f-c945-336c-8d78-40a1662c2f14.roa (raw, json)
Hash identifier:          RcV+4PpBXyo9x11kmZMh8L7Ug1W8bzrMNV7ZqLxMxvE=
Subject key identifier:   DF:7F:7B:35:8C:B2:6B:7E:0E:F4:6B:C2:61:22:53:52:CF:FC:CB:4C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401999FA15F04E4D4D566DC680
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76bcc30f-c945-336c-8d78-40a1662c2f14.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Sat 03 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:99:fa:15:f0:4e:4d:4d:56:6d:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Dec  3 05:00:00 2022 GMT
        Subject: CN=79884c10-0a62-4d52-9cf8-38ba9a10ae50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:e9:2f:ae:c8:7c:f8:cd:a5:b9:21:a3:a6:
                    20:88:38:09:c6:88:3b:fd:70:26:30:98:fa:9c:45:
                    a7:05:15:29:a8:52:93:89:ea:27:82:82:69:82:41:
                    32:f3:56:78:c2:33:fe:dc:79:51:ea:69:fc:64:48:
                    39:60:0b:d6:83:3a:ab:a7:7d:f9:d9:64:6e:3e:bc:
                    32:58:a1:a1:12:36:a9:21:ad:d8:de:4a:43:43:53:
                    cf:0b:16:a7:87:fa:22:96:bd:c1:c8:0a:03:97:df:
                    bf:c8:18:91:2b:57:9e:c5:08:0a:20:b4:06:82:96:
                    9a:1a:04:38:a9:a0:92:7b:cd:dc:90:84:4d:61:11:
                    64:14:22:7f:47:03:32:9b:a1:bb:4e:84:86:92:46:
                    5f:52:d7:61:33:56:51:04:c7:d5:bc:a0:7c:51:12:
                    eb:1c:71:43:67:c7:dc:af:44:3a:82:03:71:5c:64:
                    5d:d0:03:48:ac:44:ae:e6:65:3d:27:72:c9:12:61:
                    33:13:6b:1f:d7:c2:f0:df:16:72:53:e0:b1:13:f3:
                    dd:59:66:8e:aa:56:83:6b:e0:91:bb:80:33:f3:21:
                    1d:48:0a:54:1f:ae:18:1a:b0:d7:e6:f9:5c:45:8c:
                    f9:e4:89:ce:a3:70:89:73:7f:df:a1:06:e1:38:e9:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:7B:35:8C:B2:6B:7E:0E:F4:6B:C2:61:22:53:52:CF:FC:CB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76bcc30f-c945-336c-8d78-40a1662c2f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:8a:62:bb:11:19:f9:98:01:2e:1b:71:c3:1f:07:6e:44:0c:
         67:4b:9e:51:0f:af:58:1d:40:17:3d:c0:20:de:2a:a4:ea:4f:
         64:02:d6:99:8b:97:bf:00:e6:2e:0f:05:e4:17:15:c5:5a:40:
         63:c8:d0:fe:9f:9d:be:2b:37:bd:37:dc:7e:ab:f5:3b:3d:51:
         8b:63:b0:d0:88:61:92:f7:ae:30:97:f7:0a:be:2e:35:c9:f7:
         b9:7e:66:56:73:ce:be:2f:51:ac:14:f5:13:b1:3e:1a:11:5e:
         6b:f5:e6:01:4b:cd:29:60:68:cf:62:94:02:e8:e1:a4:2b:dd:
         53:1f:12:c3:aa:38:d9:7c:07:d9:fb:03:04:5d:a6:58:cc:68:
         fe:d6:aa:a9:2d:ab:e1:5f:1f:d2:96:0e:11:e1:a5:94:8d:ba:
         d7:00:87:ba:d0:d1:55:0f:24:ad:cf:d7:a8:11:1a:a3:8f:6d:
         18:95:f3:4b:9a:b6:6e:ca:fa:e2:26:0b:b9:9b:2a:d8:6e:eb:
         b0:54:c6:e6:77:38:a2:02:da:fb:11:ec:c7:3e:fb:c7:2a:54:
         ec:17:d8:a9:ee:94:79:a0:cd:58:fc:fa:c8:2e:11:85:34:4a:
         26:e4:35:0f:4c:36:ce:f4:40:2d:62:39:4c:1d:94:cf:98:71:
         8b:cc:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----