Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8cfc14dc-9fe0-3068-91a0-1b247d41a50a.roa
File:                     8cfc14dc-9fe0-3068-91a0-1b247d41a50a.roa (raw, json)
Hash identifier:          cPbAXZ+U6C7Udo6KJBNBWyoZ3sgNzNuxWYboCq83tMw=
Subject key identifier:   64:58:42:93:F6:CF:34:82:A5:31:8D:3A:4C:36:2C:AF:C1:83:01:91
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F84C49292977325E35CD18F80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8cfc14dc-9fe0-3068-91a0-1b247d41a50a.roa
Signing time:             Sat 08 Oct 2022 12:00:00 +0000
ROA not before:           Sat 08 Oct 2022 12:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:84:c4:92:92:97:73:25:e3:5c:d1:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct  8 12:00:00 2022 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=69febbfc-3329-4be7-92ea-0ccc45bccdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:f5:a4:a8:dc:2a:0e:10:f6:28:66:fb:81:
                    f2:3f:87:9d:ec:19:f1:33:fd:a8:d8:f6:23:6e:6a:
                    fe:62:24:7e:04:17:30:4d:25:10:8f:dd:3f:4e:31:
                    1b:4b:fd:b1:18:8f:42:91:40:af:fb:04:66:64:9c:
                    06:7b:cd:de:66:b0:99:b4:67:ee:23:16:53:7e:b4:
                    e1:15:f1:32:f1:98:47:b4:cc:c6:98:1d:96:7d:8b:
                    f1:26:f8:51:60:80:3b:2a:a3:4d:88:92:79:06:d9:
                    aa:c8:72:71:a7:70:51:98:1f:9c:75:27:e0:a7:e3:
                    f2:9d:ac:e5:c3:af:ee:08:5d:10:71:6c:6f:7a:82:
                    f4:91:0c:bd:ca:c2:31:9e:f0:ef:54:76:12:15:eb:
                    83:e9:a1:b3:90:9c:d8:b6:b3:74:bd:d9:3a:a8:d5:
                    ae:e4:82:44:60:07:1a:59:cc:2a:b9:b8:9c:e4:36:
                    1f:a8:0a:7f:b4:6f:10:41:fd:09:5a:c6:b1:1e:b6:
                    b5:2c:bb:4a:61:05:b4:77:73:12:5a:99:e9:23:05:
                    b5:0f:24:cc:64:1f:43:6c:c7:cd:dc:e6:ae:7d:71:
                    70:76:7c:3b:00:5a:9b:b6:18:49:79:f0:77:00:10:
                    c2:69:ba:3e:0c:22:97:6a:3b:71:68:72:05:10:5d:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:42:93:F6:CF:34:82:A5:31:8D:3A:4C:36:2C:AF:C1:83:01:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8cfc14dc-9fe0-3068-91a0-1b247d41a50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:a1:4b:a6:70:e3:0b:eb:76:5e:cb:4b:2b:48:3f:7a:95:
         92:55:b3:38:46:46:87:21:f8:04:0d:6e:3a:8d:0a:b9:ed:b7:
         7a:79:5d:e3:8b:82:f1:65:97:1c:ef:d9:3b:94:b9:f8:70:6a:
         f0:fb:ce:01:44:3f:cf:a0:c5:8b:c0:81:ad:02:0f:0b:8d:9e:
         76:02:89:74:29:c7:f8:c9:4c:88:73:e0:21:66:f7:4a:fc:a1:
         41:d8:8f:41:c3:43:f2:e0:80:6d:bd:c5:db:55:d7:25:22:7f:
         de:81:69:23:b7:02:94:60:d7:d8:0d:64:64:58:21:26:ac:c9:
         c8:c0:a2:78:64:2c:f5:07:50:8f:0d:e7:65:f7:5f:bb:db:5a:
         5b:b3:e4:32:3e:e3:7d:e8:81:f8:4e:a3:a4:1e:62:24:f3:cb:
         65:20:6e:34:b5:b3:56:9e:70:83:dd:c2:10:cf:3d:b5:0b:8e:
         a3:71:3c:e4:35:92:5d:ed:18:16:ca:76:cf:f8:40:8d:be:37:
         12:4a:6c:74:f3:bc:c3:b7:0c:e7:05:c9:47:31:e9:05:d3:ea:
         f2:86:4b:1e:9c:a2:98:08:0e:71:ea:ab:a0:dc:44:d1:7f:76:
         1f:5a:0b:9f:db:55:f1:81:58:a7:3f:12:3b:e3:30:7b:3f:4b:
         b0:91:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----