Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76d938a0-6c88-30d5-9a6c-f902a1e862aa.roa
File:                     76d938a0-6c88-30d5-9a6c-f902a1e862aa.roa (raw, json)
Hash identifier:          swNSM987cBKEDrmUDmcoFGz86SZ7Eub+rdGqwjfab74=
Subject key identifier:   61:65:32:AA:8B:EC:28:8F:34:26:23:9E:2C:56:C5:1B:91:25:07:4C
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F50B14915915E21B024C96A80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76d938a0-6c88-30d5-9a6c-f902a1e862aa.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 12:00:00 +0000
ROA not after:            Thu 22 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:b1:49:15:91:5e:21:b0:24:c9:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 19 12:00:00 2022 GMT
            Not After : Sep 22 04:00:00 2022 GMT
        Subject: CN=927da2f1-f019-4347-aa62-a3858b73b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:dd:4d:06:2f:ee:52:1c:3d:be:16:42:73:
                    60:dc:44:87:4e:79:07:4a:bb:18:83:94:5e:5d:9a:
                    d0:4d:ab:50:83:48:a5:fe:6f:b9:69:7f:bd:77:0c:
                    97:a5:5d:87:3f:1e:cd:9b:23:35:59:8d:0c:75:4d:
                    ee:83:18:e5:b9:d9:ee:6e:5e:d0:52:40:13:63:f9:
                    b0:0c:49:e5:88:34:7f:ad:cc:31:e9:9b:9d:12:6c:
                    72:d4:4d:3d:f2:6f:d7:4f:ea:2b:5f:e4:6b:18:7e:
                    59:bf:90:2c:5a:cd:cf:d7:25:25:21:8a:1c:2a:b5:
                    6b:ac:ce:70:9d:a3:8c:43:22:2c:bb:88:c7:ae:50:
                    90:8b:cf:93:22:6f:d2:68:2e:9f:ce:33:67:2b:e4:
                    76:13:3d:c3:53:94:0a:4a:e3:c2:e6:88:da:50:8e:
                    1a:75:ad:99:07:b9:1e:9c:db:1a:8b:cb:d0:29:dd:
                    75:a9:b4:d7:8f:84:75:4f:35:4a:9e:2c:68:b4:7b:
                    27:64:19:1b:6b:50:32:41:d4:89:08:20:2a:19:59:
                    a4:5f:10:1f:2f:b7:db:6c:29:a1:f2:72:5c:f9:46:
                    0e:5a:0b:65:f5:75:d6:40:35:89:13:c4:fb:64:a1:
                    81:d4:1c:9d:b4:17:e3:07:36:cb:30:a6:6e:a5:78:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:32:AA:8B:EC:28:8F:34:26:23:9E:2C:56:C5:1B:91:25:07:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/76d938a0-6c88-30d5-9a6c-f902a1e862aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:3c:69:c4:0b:34:88:4a:66:fa:de:cb:c3:05:b9:64:bf:91:
         52:55:9a:6b:90:2f:7b:74:59:5c:25:a5:76:c7:d5:84:33:5c:
         b9:5c:d6:fb:44:4f:4b:08:cb:a7:b1:ca:ee:ea:e3:60:be:a5:
         4b:ac:8d:89:a2:02:55:ef:ad:11:45:04:af:d7:40:29:3c:33:
         3f:ef:f1:b2:87:c3:02:3e:d8:5b:fc:03:e0:fc:4d:0e:83:2f:
         71:57:31:9c:49:10:78:13:73:b4:41:b3:57:7f:e3:9d:0d:e4:
         2e:71:af:e7:c7:03:ec:7f:c8:a8:1f:83:50:e4:9c:93:f7:ae:
         10:99:c4:75:cf:12:09:a3:6c:2e:1f:0a:aa:e2:03:26:63:6a:
         38:b1:b1:28:e2:b6:0a:85:76:7c:a3:3f:0e:58:50:65:c5:00:
         ee:f4:f6:08:fd:f4:39:6d:0a:b6:b1:f1:e8:21:ab:53:ca:c5:
         33:9c:12:f5:70:93:d5:2f:45:c0:29:dc:b7:38:d8:45:72:05:
         62:dd:7f:19:13:91:8d:aa:c3:18:b8:27:90:05:07:67:51:5b:
         fb:3b:52:90:8c:39:e6:b1:1b:17:e9:bf:70:d4:00:fb:56:b4:
         73:3e:fb:0f:85:6c:fb:4f:06:96:32:f3:39:9f:04:50:11:be:
         71:1d:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----