Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/971d8904-e6b8-3a03-aa35-5b26f397e368.roa
File:                     971d8904-e6b8-3a03-aa35-5b26f397e368.roa (raw, json)
Hash identifier:          neGNk3sniFHbIrc78Qh2spPPxA4u0E5BuGMldAWjgTE=
Subject key identifier:   91:2D:9C:B8:18:94:EC:5C:07:4C:9B:41:E3:C8:6E:20:8A:41:8C:EB
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F4F64AE37AC2183CC29D28800
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/971d8904-e6b8-3a03-aa35-5b26f397e368.roa
Signing time:             Sun 18 Sep 2022 12:00:00 +0000
ROA not before:           Sun 18 Sep 2022 12:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4f:64:ae:37:ac:21:83:cc:29:d2:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 18 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=18db1254-e472-4a94-9c35-e8fc39163d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:57:56:7a:df:53:07:be:71:61:45:19:71:
                    07:a7:d0:5c:ec:ca:0f:8f:fa:e5:08:ee:19:37:77:
                    23:f1:51:e4:a6:95:df:1a:16:70:c7:b5:95:0e:38:
                    f1:2a:70:42:a5:68:48:07:6d:59:b8:23:d8:1c:c2:
                    29:88:f1:b8:62:ab:56:e7:b7:e8:c2:d1:c6:d1:dd:
                    28:73:b6:06:e4:16:d3:ec:2e:83:b8:8e:dd:ac:c9:
                    40:52:a9:1b:4e:99:3f:8c:14:59:69:4a:d6:57:e1:
                    5d:c2:99:f8:e5:ea:e9:63:87:9e:ab:ea:27:5b:c3:
                    65:ca:ed:ce:65:eb:5e:53:9e:c9:05:c0:9f:d5:5c:
                    3f:c3:4e:78:0a:f2:e7:12:6a:3d:2e:19:47:77:69:
                    31:d0:04:78:cc:4a:5b:d0:3b:07:99:5f:51:b4:5f:
                    a4:fa:bb:f6:a5:80:e0:05:21:c9:25:60:1b:aa:e0:
                    33:04:f8:23:d9:4b:ea:8a:af:ac:04:50:61:b1:21:
                    bc:cd:f9:cd:96:0f:db:b3:70:16:eb:88:c7:53:41:
                    23:d1:2a:1e:00:b4:ee:3a:2a:61:cd:13:e6:d0:87:
                    ea:62:5c:87:4a:f8:af:2b:15:fc:cf:57:71:81:06:
                    3e:0f:1e:b2:ca:52:8b:8b:eb:7e:b9:8e:95:c3:39:
                    a0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:9C:B8:18:94:EC:5C:07:4C:9B:41:E3:C8:6E:20:8A:41:8C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/971d8904-e6b8-3a03-aa35-5b26f397e368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:60:4e:49:3b:7f:ea:0f:70:61:22:59:72:a1:22:b0:50:6b:
         89:ae:81:06:fa:3e:30:c1:1c:1d:3f:9d:5d:f5:6b:69:6d:55:
         c2:9f:f0:46:54:83:72:8f:96:79:42:10:22:66:3c:ec:b2:98:
         2c:ff:e5:9d:f0:94:34:67:b3:89:ee:08:a1:44:88:34:9c:cc:
         b0:90:f5:4d:dd:32:85:96:1f:bd:da:c1:09:8a:22:89:a5:06:
         e4:53:33:b6:92:a4:f1:0f:21:9a:1a:4e:66:8e:1d:e4:57:0c:
         ab:fe:fd:e2:83:8c:8c:b2:3e:e4:73:0a:44:5c:54:ce:a8:cb:
         82:a2:37:02:79:54:13:7e:7d:7f:f7:93:af:b1:72:50:da:27:
         ec:ab:e2:d6:25:6e:62:a4:36:12:de:3f:2a:62:9a:5b:32:75:
         df:28:53:c1:cb:92:7d:82:31:4f:ef:4c:66:1d:c4:76:10:a5:
         76:52:62:b5:77:c5:fe:c8:2b:9f:28:98:09:e4:96:52:31:22:
         96:7a:e7:0c:be:9d:4d:8a:a7:73:b0:a2:66:3a:1d:e0:46:c2:
         c5:f6:6c:38:2f:ef:e6:9b:c4:ff:f2:17:b9:67:20:67:3b:d1:
         cc:a0:c9:72:7e:10:34:aa:1f:6c:6c:aa:15:5b:84:28:e9:5c:
         12:33:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----