Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a4b99e79-aa29-3806-a73f-bea8dc5d9394.roa
File:                     a4b99e79-aa29-3806-a73f-bea8dc5d9394.roa (raw, json)
Hash identifier:          SP4smmaOxuZScaFCYDxLAKlTQMWKT2I3zAU0vparqv0=
Subject key identifier:   BC:6E:12:42:31:A6:B8:33:4A:17:47:69:38:E6:3A:27:36:8A:92:87
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F9F1F4E8D7A0C2A54532E76C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a4b99e79-aa29-3806-a73f-bea8dc5d9394.roa
Signing time:             Mon 17 Oct 2022 12:00:00 +0000
ROA not before:           Mon 17 Oct 2022 12:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9f:1f:4e:8d:7a:0c:2a:54:53:2e:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 17 12:00:00 2022 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=8ef05988-28fe-409e-8a21-7b8b445d87c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:68:ac:d7:1c:bb:e5:e2:2d:d1:b7:a9:61:
                    90:19:48:ef:21:cd:bf:1f:81:33:16:35:10:d1:8b:
                    b3:0d:1b:cf:0f:df:51:c4:40:7f:2d:29:1a:1a:ed:
                    c2:8d:5b:7a:ee:08:69:34:ed:59:8e:d9:22:e1:b7:
                    56:c9:cb:c9:0e:4a:f4:3d:6c:18:5e:aa:69:3e:ac:
                    30:66:dd:72:b3:3d:0c:c0:20:fe:e1:c9:be:8e:a2:
                    25:5f:21:4e:4c:ef:b6:2f:48:30:66:d6:fe:e2:48:
                    02:03:2b:de:7f:3c:ed:36:e1:51:e7:be:1d:79:3a:
                    d5:73:12:06:2a:0d:df:43:dc:50:c6:df:5e:b4:39:
                    fd:b5:24:47:1e:71:46:b4:d7:10:35:4f:cc:7a:d2:
                    8b:63:37:a4:97:de:35:b8:0d:0e:fd:a0:1b:19:ff:
                    b8:d8:d6:b9:66:e3:a1:0b:da:3c:8b:75:31:56:5d:
                    ce:91:28:4e:f5:20:01:6d:9f:25:d0:c9:b7:70:4d:
                    c9:6b:29:36:0d:bb:a9:42:07:5b:1c:e8:c3:d5:7a:
                    15:c6:8e:f0:43:af:4d:08:1d:27:42:60:df:cb:6f:
                    93:62:ba:40:b9:30:20:b7:14:1a:6c:28:4e:39:13:
                    c0:f6:de:7c:f1:5d:bf:e0:e1:93:8b:c2:d7:ee:39:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6E:12:42:31:A6:B8:33:4A:17:47:69:38:E6:3A:27:36:8A:92:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/a4b99e79-aa29-3806-a73f-bea8dc5d9394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:90:1b:f8:b7:9e:86:33:ac:f3:45:26:74:d0:36:80:8d:57:
         a3:9b:7b:1f:41:45:24:3d:9b:30:c3:50:4b:f6:c9:98:bd:83:
         65:7f:93:4f:a8:35:6c:fc:d7:38:d3:60:71:94:00:52:ae:ea:
         6c:28:f3:e9:2e:15:82:0a:32:d6:c9:fc:40:08:8e:a0:ab:3a:
         be:cc:cf:f2:84:82:e5:3d:34:3f:b2:6c:9e:54:1c:dd:5d:54:
         9f:d5:5a:ea:04:0a:8c:d2:7d:1e:45:00:1e:28:4e:10:9f:e8:
         0d:ae:8f:d4:0c:6a:36:54:9c:aa:30:94:84:20:29:21:00:50:
         3d:ce:66:f9:9e:70:0a:b7:7d:1a:3b:07:0a:24:7d:6a:92:e1:
         df:0d:e9:ce:c9:b1:c4:49:1f:fe:11:0c:5f:04:cb:7a:a3:ad:
         40:68:19:53:ca:79:92:aa:ac:2b:c9:d1:71:b9:12:d2:99:7c:
         9c:3f:e7:4d:2c:82:56:b7:70:eb:d5:aa:cd:9e:4d:8f:85:5a:
         c9:0c:a4:70:20:3b:1f:42:f1:a8:25:c3:6e:a3:39:46:f8:aa:
         db:ef:ca:b7:71:b5:18:dc:33:7a:dc:c3:ea:f3:9a:e4:3e:33:
         81:3b:d3:42:81:e6:37:8e:06:87:f3:50:11:a0:1b:35:a1:2c:
         4d:95:38:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----