Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9aea401c-9c0a-33da-8922-ccdcabda8c4b.roa
File:                     9aea401c-9c0a-33da-8922-ccdcabda8c4b.roa (raw, json)
Hash identifier:          5iNoa+0Wa5lRdLbiZYrKy6EfcZ94iP41iXSxNPKVswk=
Subject key identifier:   9E:9A:20:6E:C0:10:DF:30:A8:73:23:EE:EC:54:7A:31:EA:59:42:77
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F22C5BD1DC622F90D546BCB00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9aea401c-9c0a-33da-8922-ccdcabda8c4b.roa
Signing time:             Sat 03 Sep 2022 12:00:00 +0000
ROA not before:           Sat 03 Sep 2022 12:00:00 +0000
ROA not after:            Tue 06 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:22:c5:bd:1d:c6:22:f9:0d:54:6b:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  3 12:00:00 2022 GMT
            Not After : Sep  6 04:00:00 2022 GMT
        Subject: CN=3687e17b-34ec-4ec1-b053-725b21b4fd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:91:1c:42:99:f9:78:a9:29:39:de:fd:c4:
                    0e:03:f2:8d:00:2b:f6:60:7a:b2:0d:58:82:3e:7a:
                    10:64:99:87:30:35:78:23:a5:ca:c2:c2:c3:1e:33:
                    32:40:bb:03:cb:21:40:4c:19:0a:58:6b:02:e5:08:
                    12:d3:b9:29:77:0b:c0:31:c5:fa:c2:d8:82:50:67:
                    59:ab:f4:59:bc:93:d4:cd:34:3c:5a:d9:18:1b:0b:
                    a1:64:d2:0f:c8:1b:e9:20:f2:3c:c6:fd:03:d0:3c:
                    a7:5b:1c:7d:a0:d4:34:5b:32:d7:02:9a:3a:43:dd:
                    29:3e:3d:16:4d:d7:b8:49:92:ea:25:b6:99:13:38:
                    1d:d2:28:86:b1:05:24:3a:ac:8b:b4:82:3e:9d:52:
                    02:b3:e0:a9:36:28:1d:cf:b1:cd:0a:20:47:b1:70:
                    71:5b:9b:12:27:21:89:35:94:18:f6:06:d4:a3:d0:
                    fc:98:7d:ca:79:5b:8f:10:55:43:e8:04:08:2a:70:
                    b7:5b:5c:1c:a8:f5:8d:20:8b:49:e3:27:7f:a3:58:
                    1e:ca:8b:ef:ae:80:2d:97:58:9d:ee:7d:65:79:67:
                    c9:ff:dd:b9:51:bc:3d:e1:f8:cb:1f:1a:9e:0f:e7:
                    34:69:26:bf:54:21:cc:2e:ba:9b:bf:da:a9:16:24:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:20:6E:C0:10:DF:30:A8:73:23:EE:EC:54:7A:31:EA:59:42:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9aea401c-9c0a-33da-8922-ccdcabda8c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:99:41:20:4d:4e:b3:a6:d2:ba:4a:69:68:c0:ba:b3:c9:9c:
         99:be:f7:ed:6a:66:98:11:22:d5:4c:86:08:ad:7e:4e:ec:1b:
         fa:6e:30:d5:a2:26:a5:ed:61:96:23:a5:1d:8b:27:29:bc:c1:
         ad:10:d9:c9:31:81:6f:eb:78:e9:d2:e7:7d:18:c3:2e:b8:c3:
         93:28:11:3c:02:e9:dd:e0:7e:01:4a:1b:dd:a6:f6:84:47:32:
         7f:86:c6:76:64:63:a3:f5:80:36:a1:7a:f3:71:2d:cf:53:40:
         db:da:90:2f:71:6c:f8:1f:e6:b4:4f:4c:cd:cf:2b:31:2c:88:
         6a:fa:23:d3:59:38:98:1c:c5:82:0a:5a:e7:3c:bd:a8:90:82:
         4b:25:f2:05:72:bc:3a:39:74:49:a0:17:6c:99:e4:c3:15:af:
         7a:e5:7d:6a:62:a9:17:80:9d:7c:97:62:40:a6:79:6f:0d:ff:
         45:e0:0f:c6:dd:ab:a7:a9:44:77:61:21:39:ee:22:cb:1f:19:
         3e:e5:f7:ce:05:2d:77:99:3f:eb:c6:e2:0f:08:90:4f:fc:a4:
         a2:4a:6d:f2:1d:2f:76:8e:81:d1:f3:94:ed:7f:09:32:2d:5a:
         17:b5:ff:43:65:0c:2b:88:8b:ae:3a:76:da:c2:73:13:f5:03:
         60:46:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----