Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/79031daf-fa57-33cc-9849-cd13d37265e3.roa
File:                     79031daf-fa57-33cc-9849-cd13d37265e3.roa (raw, json)
Hash identifier:          gRqjFM34bO0XP1Fj/4LcdIiXzYT5CR2KsSGE3jCfsiM=
Subject key identifier:   DC:5E:20:8C:25:C6:3C:74:D7:F9:89:85:2E:A1:98:F6:59:C5:11:B6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EB3F2450B72D04F2EAD73C400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/79031daf-fa57-33cc-9849-cd13d37265e3.roa
Signing time:             Mon 25 Jul 2022 12:00:00 +0000
ROA not before:           Mon 25 Jul 2022 12:00:00 +0000
ROA not after:            Thu 28 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:f2:45:0b:72:d0:4f:2e:ad:73:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 25 12:00:00 2022 GMT
            Not After : Jul 28 04:00:00 2022 GMT
        Subject: CN=0b560c69-11ff-466b-8e2e-66534d450719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ab:ef:f0:5c:18:52:9c:5d:dc:8b:40:63:98:
                    cd:a0:48:44:68:19:9f:bf:ef:aa:5e:d7:3b:52:b9:
                    79:bf:46:fd:3d:d0:74:98:07:0a:f5:59:de:cb:89:
                    91:0f:ba:c4:11:0e:a0:3b:77:79:a6:b4:c7:79:a1:
                    5c:2f:af:81:6d:35:91:ec:56:63:bc:2b:66:18:c4:
                    d4:44:52:20:38:87:74:e8:5a:5b:c5:e9:94:7d:5d:
                    d8:93:b4:a7:36:36:e2:a4:de:7f:33:6a:f8:15:1c:
                    6d:f5:5e:e6:ef:00:4e:a9:31:10:89:18:31:c9:62:
                    86:a3:9f:10:af:b4:3a:29:e1:65:e6:9b:79:39:70:
                    9b:47:b9:07:7c:1f:3c:a5:cb:a1:14:34:fe:da:da:
                    45:44:ef:1a:72:ca:5a:5b:ca:7b:ab:1f:47:71:ad:
                    da:18:24:05:f1:21:ae:1e:e5:ad:b6:e4:2c:af:77:
                    3c:a7:53:b2:2f:3d:c1:6c:44:b1:5b:49:4b:4c:67:
                    c2:4e:0b:15:c5:52:fe:8c:61:cd:5d:ed:49:85:b6:
                    74:70:94:fe:4f:db:16:fe:f9:54:c0:3f:c9:cd:33:
                    dd:93:a7:5c:ab:72:e7:62:34:af:31:94:97:2d:bf:
                    b9:52:3b:55:b5:89:ff:6f:f3:93:4e:ea:68:aa:6a:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:20:8C:25:C6:3C:74:D7:F9:89:85:2E:A1:98:F6:59:C5:11:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/79031daf-fa57-33cc-9849-cd13d37265e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:80:a7:4c:f4:e6:5d:5d:a1:a8:a3:55:da:72:a5:11:8f:
         af:e1:bb:dc:d4:6d:c0:27:84:63:11:7b:49:5e:75:64:63:f7:
         02:76:9c:34:f8:e6:94:8c:8a:a7:c0:0a:05:cf:fc:2b:a4:bd:
         be:23:b2:4f:a6:78:53:a6:bf:b2:00:1c:3a:3c:9a:f3:17:c8:
         6d:cd:cc:93:64:ce:b3:4f:8b:c7:bb:ab:c6:16:7d:cc:8a:eb:
         b8:df:b0:2a:82:cf:19:d5:a2:56:9a:1d:81:fb:ec:7f:d1:04:
         96:d6:82:07:44:6d:11:a1:8a:24:23:34:e6:75:b6:a3:c5:27:
         9a:8e:d8:69:d7:1c:85:ab:2b:bb:3d:6d:77:98:d0:ab:5c:61:
         6a:58:4d:f3:0a:8f:e7:3d:92:00:86:de:50:c8:52:f3:c1:36:
         ad:2f:a1:55:48:04:d4:8a:25:49:92:8e:8e:0a:fd:43:c7:2d:
         63:0b:ca:5c:15:8d:6c:f9:93:34:fe:50:3d:71:3e:c3:41:71:
         ba:7a:c4:ed:0e:65:84:1d:83:22:da:e8:1c:a1:c6:36:94:70:
         1f:22:86:fe:7a:9a:e0:7b:2b:6a:b8:f8:b9:fc:53:c4:4a:21:
         09:89:ad:9a:83:5b:ba:d0:dd:81:26:a9:1d:0b:f8:af:8d:78:
         38:67:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----