Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/85960346-24a7-371b-8b3d-b72f07542853.roa
File:                     85960346-24a7-371b-8b3d-b72f07542853.roa (raw, json)
Hash identifier:          MT5oVc471H2kMBTtRpRVtkqP8i/9IPbXJ1CpYT6D/P8=
Subject key identifier:   77:2A:14:5F:E7:05:34:2D:C2:3D:EF:D2:4C:A2:D3:28:AC:7F:4D:39
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FCCD6AA15FA349363B4003D00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/85960346-24a7-371b-8b3d-b72f07542853.roa
Signing time:             Wed 02 Nov 2022 12:00:00 +0000
ROA not before:           Wed 02 Nov 2022 12:00:00 +0000
ROA not after:            Sat 05 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:d6:aa:15:fa:34:93:63:b4:00:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  2 12:00:00 2022 GMT
            Not After : Nov  5 04:00:00 2022 GMT
        Subject: CN=866e9eb0-73e5-459d-b750-51c603d13647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:4f:7a:b2:2d:b4:32:17:7e:68:cc:fd:8b:
                    1e:a2:2b:81:a3:fb:a2:05:8b:19:c4:83:1a:bd:32:
                    72:22:46:85:c2:59:40:c6:61:54:64:7c:d2:01:e8:
                    bd:cc:32:5c:ca:0d:e5:4e:e6:fd:b6:c6:f7:89:c6:
                    40:52:a0:ae:f6:b1:0c:2d:0a:04:2b:c8:e7:d6:2f:
                    f9:5b:4e:c3:f5:9f:41:35:19:73:6d:7b:9f:e3:67:
                    c0:56:42:8d:72:91:4e:10:a8:01:72:c6:48:79:76:
                    57:88:af:9b:f8:31:46:dc:fb:90:8d:47:b9:21:dd:
                    c3:e7:d8:2a:b7:f8:52:71:f4:71:ff:59:3e:6a:9d:
                    c6:0a:d9:84:4b:d7:92:3b:29:ed:87:d9:c1:00:80:
                    a3:55:a3:b1:6b:72:51:30:51:ba:5a:3b:34:00:c2:
                    28:63:1e:de:9b:32:ef:04:3f:7c:b6:cb:06:6f:0b:
                    59:9e:29:49:c4:4f:86:80:36:71:36:b5:da:14:4e:
                    a5:33:eb:b4:ec:7e:6c:68:c8:b9:f9:57:33:03:37:
                    6b:3d:b1:3d:57:67:0c:24:e8:5f:4d:63:c3:ac:25:
                    cf:27:e3:52:3d:62:f6:a4:4a:8e:38:1e:10:b8:f3:
                    4d:e1:9e:6d:44:89:0b:7a:45:0f:4f:b3:e6:33:ff:
                    75:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:14:5F:E7:05:34:2D:C2:3D:EF:D2:4C:A2:D3:28:AC:7F:4D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/85960346-24a7-371b-8b3d-b72f07542853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:02:ff:b8:a7:39:a5:f7:6f:60:3c:ea:4f:2c:c8:96:cd:79:
         9f:9c:38:3d:45:69:1e:cb:b7:9a:c7:4c:9c:ec:9a:2b:a0:1a:
         31:fa:a2:d3:58:e3:c5:36:0e:a2:c3:59:83:ad:bd:7b:2c:66:
         3a:05:a1:8d:87:66:3e:d9:05:38:48:c7:8f:aa:4d:af:50:26:
         48:fb:56:b7:f2:78:ba:32:32:52:7c:6c:61:b1:68:9e:e5:73:
         f4:b4:48:bd:2c:be:3e:6b:f4:ed:64:7f:b2:f1:31:c1:3a:07:
         9a:82:56:60:6e:53:67:49:a4:72:70:9c:78:58:a5:79:99:8a:
         c2:30:b8:33:59:48:b0:c4:10:3f:7c:c0:2c:9f:75:ca:27:20:
         2f:26:b8:ce:33:f8:b4:1d:4b:15:90:fe:8c:c9:81:39:b4:ba:
         56:08:b5:b5:88:23:5a:c2:56:82:c3:33:e0:03:f7:31:44:4a:
         a8:05:e2:51:25:a7:8e:ce:8d:de:d7:94:75:43:e0:91:dd:69:
         71:68:da:5c:33:ab:8a:54:61:bd:ff:1b:cc:b9:d3:68:f0:a6:
         2a:ff:9d:e1:45:20:26:80:1e:de:c1:e9:90:ec:83:c2:6e:b9:
         6c:9e:43:c9:0a:a4:cf:f4:52:62:2c:10:04:1a:a7:39:09:42:
         00:f4:c7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----