Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8f403773-ed49-3a63-bd1b-170701343546.roa
File:                     8f403773-ed49-3a63-bd1b-170701343546.roa (raw, json)
Hash identifier:          NNu3DzNTfuupStumL9ac00/+Uacv4fOLS+LJ4iv4x0Y=
Subject key identifier:   33:99:EF:4C:C7:0A:38:B1:45:AE:92:99:11:9E:73:E7:39:A1:4A:DA
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583E9DDB20FE24FD163BDED17240
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8f403773-ed49-3a63-bd1b-170701343546.roa
Signing time:             Sun 17 Jul 2022 12:00:00 +0000
ROA not before:           Sun 17 Jul 2022 12:00:00 +0000
ROA not after:            Wed 20 Jul 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9d:db:20:fe:24:fd:16:3b:de:d1:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Jul 17 12:00:00 2022 GMT
            Not After : Jul 20 04:00:00 2022 GMT
        Subject: CN=98b27d76-0bf8-4794-9c5c-77daa7613070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f7:87:d8:cd:4e:5f:0f:24:b7:34:01:4a:7f:
                    5b:80:4a:8e:af:0c:9c:33:d3:6d:9d:ba:98:20:5f:
                    24:e5:5c:23:37:17:f7:52:98:50:22:d2:7a:96:9b:
                    67:ee:c9:db:f5:87:92:d1:fd:f8:c3:cc:99:11:07:
                    80:41:c9:af:c3:a3:9a:07:1d:33:e8:c5:63:77:67:
                    91:6b:bb:c1:87:87:ba:40:b7:5a:32:0b:2e:a9:f0:
                    ef:5d:e9:0e:6d:27:40:28:4c:b7:a8:c5:42:94:a5:
                    94:e7:d5:66:e7:8a:2e:cb:fd:7c:7e:b9:7b:f3:fb:
                    3b:00:65:9f:b1:77:0e:4d:7a:81:be:1f:39:42:be:
                    03:f4:04:e0:e8:a0:24:3e:b7:a5:99:cb:91:6b:9a:
                    f0:8d:70:cf:d8:25:09:d8:6e:dc:59:90:f7:10:03:
                    44:47:64:1b:95:b3:89:dd:fe:b1:7e:04:35:7e:fb:
                    23:19:66:51:90:37:7f:1e:e2:3f:e6:40:0d:68:d9:
                    72:7f:5a:9a:a7:c4:bc:5c:54:1a:f7:f2:00:35:d6:
                    45:5c:18:7b:21:6a:21:ab:4f:12:12:74:11:fe:ec:
                    2b:9e:1d:9b:89:f9:4d:f7:95:86:87:10:c7:79:34:
                    3c:2a:d1:e3:ff:d0:1c:7e:e3:df:04:0c:55:ae:d4:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:99:EF:4C:C7:0A:38:B1:45:AE:92:99:11:9E:73:E7:39:A1:4A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/8f403773-ed49-3a63-bd1b-170701343546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:99:82:37:fa:0e:cd:36:ea:6a:4d:83:a2:08:2d:bc:33:
         72:1c:32:0b:d4:c1:af:3c:de:e1:b1:ce:29:c7:50:92:01:b5:
         0a:38:cf:f4:86:d1:1e:c7:65:bb:18:1e:42:31:97:7a:66:ab:
         2f:41:74:09:a7:2b:2a:36:92:7e:46:c0:81:85:d2:11:55:09:
         d0:2f:96:13:5f:12:1a:b4:45:f3:49:99:6a:03:a4:b1:e5:bd:
         1e:b2:64:26:c4:46:65:51:f1:9a:96:93:81:6c:c1:71:82:c9:
         4b:98:9a:a4:b4:7d:39:16:b3:47:d6:a5:2c:59:32:5f:fd:ac:
         52:21:a7:13:61:8d:fe:70:1d:00:59:90:3b:e0:f9:1a:76:82:
         56:46:02:cf:1b:11:57:eb:26:26:ba:5c:be:f1:bd:97:4b:da:
         ae:5f:5b:59:7f:4c:81:b4:8b:27:23:a2:b3:51:74:ec:38:e2:
         28:1c:d0:79:64:de:6a:ba:76:0a:52:34:35:0d:d3:3f:16:0a:
         b9:c3:de:7a:e3:00:a6:f6:ec:1a:8a:54:01:5f:a9:87:5a:ea:
         66:24:c3:94:14:0f:12:90:21:78:06:e5:9d:d2:d2:8d:0f:ca:
         bc:e7:ef:7d:6c:3a:d8:96:03:dd:90:e6:92:dd:35:c1:82:c1:
         ec:38:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----