Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/851c1aa8-f8af-3f39-849f-27e8cada7a2f.roa
File:                     851c1aa8-f8af-3f39-849f-27e8cada7a2f.roa (raw, json)
Hash identifier:          FhSr+UaTsCGm5+e0JsO5ik97Z0o6m160NRr5L2vlDX8=
Subject key identifier:   55:B7:9F:FE:99:3E:D6:21:CA:A9:D6:94:75:F7:95:E6:CC:36:02:E2
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FED2C57298E826CD0B27484A0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/851c1aa8-f8af-3f39-849f-27e8cada7a2f.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:2c:57:29:8e:82:6c:d0:b2:74:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=b3bc6f09-01e8-4027-8a26-d02e2d4b799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:af:ef:a8:5b:a1:4a:0f:6f:7b:b5:f7:8d:
                    5d:4f:15:66:56:c8:14:4f:d6:6a:b0:c8:3b:74:dd:
                    04:a7:fb:90:26:1b:63:97:61:33:aa:82:49:ff:28:
                    4f:8c:0e:19:22:d5:04:e4:fb:83:db:18:3b:69:24:
                    2b:c0:c4:8b:7a:3b:1f:6e:a3:73:df:b0:93:1e:da:
                    09:85:62:b3:6d:86:b1:00:82:8a:74:45:21:a8:3d:
                    a5:93:5a:dc:43:ae:ee:c1:d0:df:1b:1a:ae:06:da:
                    5e:6b:b0:f9:9b:12:bf:72:8c:de:ed:0b:95:79:89:
                    e0:56:91:18:57:05:b7:fc:52:ce:3d:b9:b0:8e:ec:
                    72:72:6c:17:37:9c:cf:08:9b:7f:f2:0e:da:9d:b2:
                    c1:32:5a:b4:ba:8a:b5:20:59:79:8f:45:46:9c:20:
                    ba:21:50:a2:d5:a4:85:bc:58:95:17:50:8a:e6:85:
                    df:15:8c:d2:11:38:4b:d5:40:b7:c5:6a:b9:57:67:
                    77:23:90:7b:95:de:5d:5f:7d:15:81:9a:d3:51:dc:
                    dc:57:9e:c2:c4:6b:d5:26:c6:86:8e:c0:c6:a4:a0:
                    c2:f9:51:56:b6:0e:9c:e1:b8:4c:03:5c:14:a3:d5:
                    2c:63:49:0e:de:e9:2b:51:f7:83:e0:0e:15:a9:d5:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:9F:FE:99:3E:D6:21:CA:A9:D6:94:75:F7:95:E6:CC:36:02:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/851c1aa8-f8af-3f39-849f-27e8cada7a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:48:d7:b5:44:3e:02:d0:c0:ed:06:15:58:08:b2:7a:cf:a5:
         c7:19:31:d7:df:62:29:d7:5b:ed:d3:e5:0c:83:e5:4a:de:eb:
         a2:81:bb:f3:9e:85:b6:e6:ff:a1:75:3d:82:5f:1d:0b:ac:e1:
         42:c8:d2:bc:dc:9a:06:79:41:e7:e6:44:db:9b:4d:4d:df:1e:
         22:a0:7c:29:b7:ec:84:e6:1f:a8:5c:59:14:b7:22:6f:53:f5:
         9c:55:9c:1a:a4:8e:59:7a:9b:8c:84:62:aa:d6:42:f5:ac:bd:
         ba:16:49:42:48:35:74:da:4d:15:db:d9:dc:59:9f:de:59:80:
         02:0e:84:31:8f:e8:28:ff:9d:c1:f4:c4:56:92:0f:aa:31:18:
         94:fd:9b:43:ca:55:b8:1a:44:91:f8:81:4f:1e:f1:4e:8b:38:
         65:aa:72:f0:e8:d6:aa:c8:42:2b:f2:d0:1a:08:69:3c:f1:2b:
         f4:52:88:59:b9:95:98:31:b5:42:71:fc:0f:b3:ee:cf:36:ac:
         f4:80:99:d4:ef:41:0d:0b:17:ad:3d:51:6f:7e:c2:f4:06:8a:
         d9:85:d2:aa:21:f1:1f:ef:fa:17:5f:89:f4:c2:6f:36:18:2c:
         62:63:17:d5:0f:81:f4:d3:30:63:81:05:9c:7a:e5:7e:29:b9:
         45:be:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----