Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aae5efa7-45a3-3782-ba26-51b509af6ed7.roa
File:                     aae5efa7-45a3-3782-ba26-51b509af6ed7.roa (raw, json)
Hash identifier:          RQPQvdssuHlByG5Me7JbqTF1VDweD4w0PrgBXXfmcqI=
Subject key identifier:   74:E9:E0:51:BB:2C:DA:49:4B:1B:A6:2F:CD:D0:0E:CC:6B:5C:3F:94
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584024A889360D916249F1C16C00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aae5efa7-45a3-3782-ba26-51b509af6ed7.roa
Signing time:             Sun 04 Dec 2022 12:00:00 +0000
ROA not before:           Sun 04 Dec 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:24:a8:89:36:0d:91:62:49:f1:c1:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  4 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=714d0248-3802-403f-b862-fd0becbba87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:ab:3b:24:4a:fc:56:fc:33:06:32:c9:92:
                    17:c3:cf:82:94:45:68:6f:34:b9:b6:3e:e8:e8:63:
                    96:69:31:06:be:c3:e4:d2:43:2b:48:b8:2f:fa:53:
                    6e:77:dd:05:37:60:be:41:64:c6:28:07:5a:81:68:
                    0b:28:e7:b4:8d:be:49:14:03:8b:32:9c:4a:3a:1e:
                    2b:25:f1:14:bd:d3:74:ca:86:bd:c0:d3:70:c1:47:
                    de:94:05:97:b2:d0:60:67:af:fe:6e:f0:3d:68:ce:
                    3c:90:28:12:b7:c1:2a:12:10:34:22:23:9d:ad:88:
                    9f:f0:62:1a:3f:9a:d2:51:08:f0:a1:7b:a0:f4:c3:
                    af:f8:d9:77:ca:1b:87:e4:93:a5:af:c9:e4:19:fa:
                    fe:5a:99:37:e0:fc:84:f6:25:13:5c:28:7d:d8:96:
                    5a:04:8f:4d:6e:02:53:f4:eb:63:fc:96:54:64:78:
                    68:04:a4:7e:c7:af:bf:60:8f:f6:07:d9:e0:fc:4a:
                    ad:84:21:76:b8:cb:4b:1b:1b:5e:35:b3:a7:27:06:
                    24:89:a0:a6:f2:36:61:ad:fd:6d:0b:83:dc:aa:cb:
                    95:ae:3b:da:96:85:00:f6:f4:fc:09:9e:be:e0:f7:
                    6a:f4:69:04:ba:00:d9:c0:5b:79:ba:fd:f4:ec:6b:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:E0:51:BB:2C:DA:49:4B:1B:A6:2F:CD:D0:0E:CC:6B:5C:3F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/aae5efa7-45a3-3782-ba26-51b509af6ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:99:11:04:96:d6:d8:53:ca:f0:76:94:99:85:14:1d:05:
         e6:1e:17:90:38:44:d4:f9:7e:3f:8c:50:43:3f:54:32:be:52:
         aa:91:5b:c3:55:04:70:cc:d0:3b:d3:ce:f2:ac:6c:c6:f1:d2:
         d3:03:d4:19:78:bd:e7:be:17:0f:31:d5:e8:01:2a:ae:e4:ff:
         4e:dd:fb:d5:b0:1a:c4:5f:1b:ba:aa:8f:e6:52:38:9f:b1:b6:
         06:49:b3:57:25:fe:19:64:b1:08:f9:2d:d6:0b:fc:27:68:85:
         e6:62:1b:40:0b:af:d2:5b:a4:90:6d:0c:84:96:ef:a4:f0:ec:
         12:a9:12:4b:14:0f:04:93:a5:e2:bc:ff:fd:93:28:ed:1b:05:
         ae:77:c4:c3:32:55:7f:f3:b3:e1:e6:a8:17:36:49:0d:33:ef:
         67:af:73:8c:c3:b1:4f:11:bb:0c:20:f3:22:ce:56:e3:82:e3:
         b1:04:7c:99:29:9e:31:d7:78:f1:11:09:12:66:22:ec:29:52:
         19:38:7d:52:37:d6:6c:16:e6:4f:d5:40:47:47:6d:24:3c:e9:
         e2:2d:4a:45:8f:35:b8:fc:33:be:8d:93:88:94:6a:1f:87:a8:
         46:63:a3:51:d4:40:bb:3b:6b:79:c1:1a:8c:09:a6:17:81:02:
         10:03:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----