Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/886739a5-c322-324e-bfac-092289d86efa.roa
File:                     886739a5-c322-324e-bfac-092289d86efa.roa (raw, json)
Hash identifier:          EJJIa0UU1ZSMKmfTmvsO19GwY30XMthgYxF8iD0DSME=
Subject key identifier:   B6:1B:C0:DE:20:84:DD:82:A1:A5:C0:2B:A2:DC:1C:54:E5:18:67:71
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FDCFF6189CC13950CDD609A80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/886739a5-c322-324e-bfac-092289d86efa.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:ff:61:89:cc:13:95:0c:dd:60:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  8 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=3cba316f-5e4a-4968-b2cd-43dd834cdfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:13:18:36:a2:c5:a2:38:53:9c:4b:e2:2d:
                    5f:fd:b5:ba:cb:27:df:85:10:5a:46:04:05:1c:d4:
                    45:5f:e4:fb:18:f0:2b:96:84:b5:44:a1:c4:d5:18:
                    3e:76:90:d7:f7:13:3d:ca:9e:41:8d:7a:e2:89:89:
                    ef:81:d7:6e:95:79:82:68:da:d2:7b:1b:91:a2:0c:
                    bc:18:03:83:d6:71:c0:79:d2:4d:4c:05:ca:30:e9:
                    32:aa:28:a6:0a:ff:ba:9a:cd:fc:a3:0c:ee:37:2d:
                    c3:85:17:a7:6a:66:22:6d:f2:de:ce:e1:6b:28:e6:
                    86:25:21:30:71:2b:5e:0b:b7:58:9e:c4:0e:37:a9:
                    6d:b8:cf:68:ac:86:0a:4a:5e:6f:79:99:61:4e:22:
                    33:27:75:04:ee:33:01:e9:e1:a4:e5:d9:81:08:d9:
                    13:0b:76:a5:e7:8a:b5:4b:d0:60:3c:67:72:3a:05:
                    53:77:72:0b:2e:d0:bc:5e:0f:5a:96:9a:6b:f6:9a:
                    db:d8:bf:06:9e:8c:9e:bd:db:af:c5:f1:e4:7d:bf:
                    60:1d:81:a4:92:b5:55:f9:c2:f3:fa:71:c7:1f:36:
                    85:44:26:52:39:88:90:8b:66:74:0b:ab:88:c4:17:
                    33:12:34:5a:bb:34:15:23:34:a7:59:19:6f:f8:ba:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:C0:DE:20:84:DD:82:A1:A5:C0:2B:A2:DC:1C:54:E5:18:67:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/886739a5-c322-324e-bfac-092289d86efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:cd:35:15:b3:a2:53:d4:55:81:24:b4:c5:41:42:85:33:
         7e:7a:5c:7a:0c:95:4c:06:05:15:5d:35:82:9e:72:64:4e:d0:
         39:b1:1c:69:ac:13:8f:2f:6a:be:2d:76:cd:1c:24:e2:dc:90:
         f4:ca:c2:85:11:f8:2a:71:ee:ca:9b:b0:e2:47:79:f9:e4:fb:
         ea:78:e5:51:77:e7:cb:50:6a:81:2d:ec:7b:b8:b4:c3:c1:13:
         d5:06:f9:70:76:63:e3:73:5a:56:74:0d:da:b1:8d:93:c5:59:
         34:08:4f:44:3f:a4:8d:e5:73:b0:4d:8e:a5:ef:81:fe:1c:84:
         bd:5b:b0:ec:d9:f6:b2:83:e4:ae:7f:66:8a:96:37:7c:b7:8c:
         6a:34:6c:65:67:69:3e:c4:e4:08:3d:a4:f4:b7:cf:44:16:71:
         64:9b:70:c8:aa:13:c4:ed:21:7f:dc:af:74:c9:c6:4c:5a:91:
         b0:00:3b:51:8f:b4:d1:39:c8:10:05:60:28:04:c3:38:23:ca:
         e8:ce:12:b8:29:76:35:29:d3:90:a4:5a:86:bc:e6:81:03:ed:
         4c:53:72:a7:08:b8:26:23:e4:dc:a7:4f:ba:5d:51:8a:46:bc:
         23:06:f7:06:fc:1b:af:ce:54:11:be:ee:af:ca:c3:cd:a3:1c:
         7b:85:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----