Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9f3c6a0e-3b66-3f18-b816-caab13982665.roa
File:                     9f3c6a0e-3b66-3f18-b816-caab13982665.roa (raw, json)
Hash identifier:          fiU8tKMt6uzfSrppTPzRu6V+xo7Ohe59a9WTkSdHojw=
Subject key identifier:   9E:AC:C6:DD:D2:85:7E:7B:E4:C9:CB:AE:E4:A7:AE:67:6E:E8:75:4F
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584016582F60A86369E230EADB00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9f3c6a0e-3b66-3f18-b816-caab13982665.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:58:2f:60:a8:63:69:e2:30:ea:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=9a7a9a4c-39de-497e-8eaf-4801368598f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:47:78:a1:e0:14:1c:e9:42:63:cd:76:b7:
                    ba:16:22:d9:eb:c6:c1:1d:15:eb:04:a3:d0:6e:2a:
                    41:65:16:5c:f3:14:87:79:0d:53:d7:ac:2b:61:7f:
                    73:6b:43:c5:79:a1:6b:b8:d8:fc:fc:4b:45:b7:17:
                    65:03:98:59:d2:7c:c2:74:53:05:ae:a1:81:59:0e:
                    f2:cf:30:81:b6:99:6a:99:51:f3:9d:10:a0:5e:99:
                    60:32:0d:18:ba:6e:99:77:6a:62:f2:04:38:6c:bf:
                    53:a5:d7:36:59:c6:00:ae:aa:02:5d:ee:4e:fd:91:
                    f8:90:b7:0c:e0:9e:0d:12:6f:ab:1a:7f:5d:60:3e:
                    5d:03:85:24:8b:bd:f0:1e:0a:d9:9d:88:98:f3:75:
                    cf:3f:d4:c6:f5:bb:cb:72:4c:dd:eb:41:1a:32:9e:
                    a9:13:6c:ae:51:d7:35:cc:df:ac:43:cb:4c:9f:00:
                    34:02:0a:ff:65:16:61:82:8c:2d:33:62:e4:ec:d6:
                    4a:82:13:e2:6d:c9:c0:68:e7:6d:6d:d0:98:34:04:
                    b2:5d:57:a3:5b:e9:f3:02:b2:06:22:49:45:60:fb:
                    5b:18:5c:37:3f:a7:72:8c:55:b9:b1:ef:3a:7a:b4:
                    ad:9d:5c:53:0a:3e:c9:93:79:ea:75:6f:d1:05:b7:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:C6:DD:D2:85:7E:7B:E4:C9:CB:AE:E4:A7:AE:67:6E:E8:75:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/9f3c6a0e-3b66-3f18-b816-caab13982665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:75:04:9a:ac:f3:76:5b:95:d3:24:6e:14:ca:50:f3:be:2c:
         96:5a:af:7e:35:95:9c:21:df:f9:1f:9d:01:38:ac:28:8f:e4:
         29:8a:af:42:70:b7:50:44:d5:2f:03:4c:39:4f:15:2e:91:87:
         68:59:e3:09:0e:15:45:25:8f:77:a1:90:87:16:c9:87:18:92:
         29:f2:f4:6a:c7:7e:13:df:e4:08:02:54:3c:be:d8:dc:78:ac:
         41:c1:f3:53:e7:f7:a6:47:f3:ad:5d:51:b7:11:cb:e1:e2:ce:
         61:62:56:08:0a:e7:60:2f:ec:62:f5:fe:93:04:05:1a:66:1a:
         4a:f0:74:d1:d3:49:5b:5a:4a:2d:c7:86:90:4e:a2:31:c4:be:
         01:b8:2c:82:24:99:55:98:70:34:5d:96:a6:57:4d:6b:e9:ea:
         b5:d0:42:65:52:9a:3c:cc:d5:93:36:3a:71:0c:8e:a9:38:2c:
         d7:ec:97:76:67:6a:03:0e:1e:cb:0b:47:91:f6:4e:a6:d9:e5:
         3b:5e:97:2f:3a:88:0d:51:3f:2d:76:91:5c:7b:05:a4:88:1d:
         2e:f6:68:3a:3a:d6:36:a5:24:d8:da:71:a1:6e:20:98:01:eb:
         c6:59:c3:ed:cb:33:91:4c:cd:5c:b2:f6:80:28:d3:7e:82:a1:
         e2:4a:70:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----