Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c872d94-a71b-3826-a9c4-3239052ea0d1.roa
File:                     9c872d94-a71b-3826-a9c4-3239052ea0d1.roa (raw, json)
Hash identifier:          I3E6wjY8DjKGO3anTgnL8fnsRWnh7cQd3A6GSHz7GLg=
Subject key identifier:   B5:3F:9C:CB:5F:79:BE:70:CD:8E:C3:95:9F:B6:23:1F:92:A8:21:63
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858400EA56AE2CD938B72C9908400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c872d94-a71b-3826-a9c4-3239052ea0d1.roa
Signing time:             Sat 26 Nov 2022 12:00:00 +0000
ROA not before:           Sat 26 Nov 2022 12:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0e:a5:6a:e2:cd:93:8b:72:c9:90:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 26 12:00:00 2022 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=91bacc4d-9e29-456b-841a-ed1d0c00d77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:a0:ff:3d:51:4d:0c:fb:f0:e3:8d:be:f7:
                    a6:76:40:e4:db:61:03:03:e1:2d:bf:8c:a4:1b:e0:
                    cf:09:7f:71:37:22:a8:42:db:da:1f:a1:06:e3:42:
                    93:96:4c:1c:cc:b8:b1:6b:f0:ed:e5:61:a5:9f:b1:
                    8c:b1:0b:ca:85:6e:46:6c:0b:8c:a3:21:91:ec:26:
                    c3:4e:c8:77:6d:08:08:88:8d:90:dc:50:b9:80:a5:
                    3e:a8:9a:e3:0d:19:93:2b:e7:03:dd:70:db:d2:2a:
                    9b:35:41:37:77:2f:96:95:67:24:b4:14:c5:56:12:
                    69:74:fa:9c:e8:9c:54:fd:43:23:39:e5:ce:31:fd:
                    a3:79:25:1c:be:c5:01:a3:87:07:fe:ca:03:8c:6a:
                    df:b2:52:bd:03:76:6c:70:70:5a:c1:e5:a5:99:e6:
                    d0:3b:0b:cd:ee:42:45:2f:04:79:b7:54:2b:60:3f:
                    b5:19:06:da:38:c9:28:72:a7:ce:37:68:0e:29:3e:
                    21:ce:b5:d9:c2:f2:8d:5a:bf:7a:32:dd:a9:47:c1:
                    bb:ea:4c:22:69:a9:7b:c4:9b:55:ec:ba:d6:cc:1d:
                    5f:42:1f:44:97:29:0e:94:1c:99:cf:83:e1:63:20:
                    83:96:18:b3:89:10:f8:b9:40:7a:d7:5c:e8:99:e9:
                    17:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:9C:CB:5F:79:BE:70:CD:8E:C3:95:9F:B6:23:1F:92:A8:21:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9c872d94-a71b-3826-a9c4-3239052ea0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:36:2c:63:38:d0:be:a7:e4:49:10:c6:2b:47:ff:a3:f3:
         79:c5:bd:56:e7:d7:6f:4f:ce:a3:9b:51:95:88:08:c2:dd:e6:
         8d:0b:f3:91:1a:2c:27:1c:ed:f0:b0:a1:24:15:75:89:c3:94:
         68:db:3b:31:88:7a:f6:8f:01:88:1f:18:0c:63:29:47:4d:43:
         e8:29:fd:70:80:b8:5a:79:45:6e:7e:a9:a6:35:cc:93:65:b6:
         27:bf:04:67:f4:c6:f6:38:b0:f3:a6:e5:ca:b9:ee:bb:70:1c:
         67:c1:34:a1:fa:df:26:40:a2:1f:a8:8e:bd:64:2d:a9:36:3f:
         0e:85:53:37:50:b4:dc:6b:a9:db:dc:38:69:d6:98:7f:f2:16:
         6e:48:4e:a4:87:3f:fd:53:5f:1a:ad:96:db:6e:11:6f:71:08:
         c6:1c:24:98:cb:a5:9d:90:9c:5c:58:10:96:2e:39:3c:55:bc:
         75:a4:e7:72:b5:91:7e:a5:27:4e:a2:b0:46:58:ee:4f:52:c4:
         74:0d:96:64:91:7a:fd:ce:39:5e:19:3c:af:3b:93:2f:84:3e:
         68:0a:7e:75:01:4c:44:9b:42:01:4a:f7:02:bf:3d:68:5d:2d:
         52:4f:9b:c3:66:c0:34:dc:a7:c4:82:08:d1:7c:8e:ad:79:ca:
         9c:91:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----