Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8300fda7-de22-32d4-a9b5-633384cb34f8.roa
File:                     8300fda7-de22-32d4-a9b5-633384cb34f8.roa (raw, json)
Hash identifier:          1T7pEM3uX79wbVlLCCEMKJYu8gJV7+5RuU+l6OYdjac=
Subject key identifier:   98:04:41:A8:75:BB:4C:B7:B6:C4:C7:52:66:58:63:D1:0A:85:91:B7
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858400662ACF5EA2C3D84CC5B2000
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8300fda7-de22-32d4-a9b5-633384cb34f8.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:06:62:ac:f5:ea:2c:3d:84:cc:5b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=e24446a7-e298-4f98-8713-2f408cc9e35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:aa:42:32:0d:9c:b9:eb:96:2d:e0:97:c8:
                    65:35:f5:48:df:8b:2d:cc:25:a1:17:2e:88:5e:f4:
                    b0:e4:1c:af:44:0e:de:eb:cd:0e:83:a2:ee:c5:38:
                    9b:ef:9e:c5:7a:09:63:46:aa:57:30:d5:b8:5c:18:
                    aa:b0:b5:72:68:f2:49:f0:04:b7:7f:10:e5:6e:15:
                    c8:1a:2c:c7:43:0c:de:51:1f:49:45:dd:ab:f1:5d:
                    aa:3c:af:dc:ca:2a:ac:85:4f:82:3a:b1:bb:20:3a:
                    1c:1f:a8:21:c5:15:10:0d:93:70:82:51:7a:34:95:
                    a7:a8:46:42:5f:cc:00:15:76:0b:64:8e:d9:66:bf:
                    ef:0f:e1:8a:30:74:90:3f:56:d5:38:ee:82:4d:48:
                    7b:a1:7c:c8:3c:d5:13:13:cf:33:0e:e6:12:a8:01:
                    44:5d:22:8b:fa:28:c6:12:6f:3b:d8:61:c9:2b:fb:
                    cc:f4:2c:e4:5a:c9:06:36:1d:69:5b:8d:2e:90:af:
                    d5:6f:b0:19:88:24:ce:d0:43:91:65:90:d7:ad:54:
                    e6:c7:f9:b2:04:3d:fe:75:25:56:3a:fe:0e:a9:23:
                    78:1b:13:9f:d6:af:8f:0d:70:16:83:be:20:5e:ad:
                    72:1f:fe:c2:1e:ed:cc:11:02:b1:f5:aa:e4:f4:45:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:41:A8:75:BB:4C:B7:B6:C4:C7:52:66:58:63:D1:0A:85:91:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8300fda7-de22-32d4-a9b5-633384cb34f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:72:78:8a:34:f7:bc:69:ae:bf:ca:20:98:b2:77:9c:86:9a:
         45:6f:0e:ed:37:29:ad:44:02:fb:3f:10:e8:d6:84:51:55:7b:
         e7:75:10:69:8c:61:c1:b9:2a:94:e9:ac:6e:d9:12:f3:cf:44:
         7f:ed:ca:34:d1:18:04:59:cc:d4:40:15:8d:01:85:d6:bd:0f:
         07:7f:88:7a:d4:b8:d1:fa:3c:7e:ac:d0:39:33:dc:92:2a:8e:
         b1:12:e0:e4:ff:d2:4a:ad:9d:aa:a5:8d:b0:9f:b5:7e:74:ac:
         83:4d:7d:91:12:bc:c8:54:ca:a1:47:fe:18:0f:37:85:b6:b2:
         a8:89:52:cb:ea:06:61:20:50:37:26:fa:2a:93:fc:b2:65:16:
         0e:1b:29:34:99:cd:a1:49:91:bb:c8:aa:2e:b1:34:d5:72:66:
         6d:f6:b0:8c:15:23:b0:93:cf:43:6c:38:65:ec:49:d1:94:12:
         ef:ab:2a:aa:93:a0:c0:ff:bb:ec:ea:3f:a1:67:79:f2:ae:b6:
         22:9f:5e:33:8e:2b:71:06:c8:be:fc:9b:d3:a1:15:5e:00:dc:
         cc:03:82:46:6d:e1:69:c0:44:9c:54:7d:e1:67:6e:eb:9a:e9:
         b9:fc:03:e8:a6:63:6d:6c:00:c8:3f:7b:69:ca:8b:a5:15:eb:
         90:6a:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----