Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ae4099d3-3b87-308d-ac3a-6a6ff539028a.roa
File:                     ae4099d3-3b87-308d-ac3a-6a6ff539028a.roa (raw, json)
Hash identifier:          pn98PIQvXBOiqZec+CyoOBr50IZ8m7op2kIJJapD4M0=
Subject key identifier:   4C:FD:B7:5D:0A:6B:19:FF:59:84:0B:C5:CB:F8:9A:15:5E:69:27:71
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584002989DE1DAB4C7D98DC2FB80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ae4099d3-3b87-308d-ac3a-6a6ff539028a.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Fri 25 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:02:98:9d:e1:da:b4:c7:d9:8d:c2:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Nov 25 05:00:00 2022 GMT
        Subject: CN=824cb38f-09fa-48df-b0e9-ca1ec7fd5492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:80:81:d7:9f:9f:53:fb:1f:7a:9d:7e:df:f0:
                    e6:c9:71:72:73:9b:05:36:18:a5:65:90:12:95:ad:
                    bc:29:83:d8:ca:68:ec:a5:aa:84:c2:3a:71:71:9d:
                    78:57:90:d1:ee:df:73:3f:f3:1f:9f:24:cf:98:8a:
                    f9:ce:27:02:e9:88:7d:29:2f:fc:c7:26:ca:13:24:
                    1c:52:3f:6d:8f:50:04:12:3f:5f:da:b5:6c:dc:85:
                    87:38:5a:00:08:37:ea:b3:73:d4:d0:a9:c8:8f:37:
                    14:5c:ef:24:63:ae:8c:9c:d0:24:d0:76:20:68:0a:
                    fe:25:d1:b5:cc:81:b0:a5:00:97:92:26:42:49:76:
                    21:5b:66:3b:19:39:e5:99:0a:24:7f:0d:41:2a:e5:
                    0a:ca:51:2e:a1:9c:e4:bf:fd:8b:d9:68:5f:51:f8:
                    6e:b7:f5:05:17:22:4f:a1:5f:9c:b3:c5:e8:1f:ea:
                    d2:e7:f0:8b:ef:c3:43:46:4b:81:49:33:9f:be:59:
                    e2:a5:57:3b:27:de:54:03:02:c7:1f:56:32:d3:39:
                    fc:2c:74:ab:85:2f:ee:3b:95:39:31:3c:23:0b:06:
                    81:64:c0:44:ee:e9:d3:8a:2b:18:8c:1c:d1:78:a4:
                    8a:04:5a:56:16:d9:4c:62:0e:3d:ec:25:18:79:49:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FD:B7:5D:0A:6B:19:FF:59:84:0B:C5:CB:F8:9A:15:5E:69:27:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ae4099d3-3b87-308d-ac3a-6a6ff539028a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:87:0e:c9:5c:e1:e3:58:a7:ad:4b:f3:29:4c:9f:e1:68:c3:
         71:b0:95:81:4c:2f:79:4b:62:c6:ac:ce:0c:51:79:cc:68:6e:
         1c:28:2b:67:8f:fa:ff:d9:bc:15:ae:8e:2d:81:67:fc:dd:d0:
         31:be:b3:1f:7b:03:ce:b6:08:bc:28:c4:11:ff:40:6d:34:66:
         66:32:93:52:18:df:4b:0c:d9:f1:3d:05:0a:5e:8c:a8:2e:1b:
         90:d5:7f:a3:f8:97:4a:1e:72:f9:2e:34:28:09:3f:4f:a7:5e:
         6b:f8:57:00:92:09:5c:66:5a:0f:50:19:d4:20:9b:b2:b7:bc:
         e1:49:4f:ee:1c:f6:64:01:6c:35:d3:7d:28:be:cc:34:10:fc:
         c7:f9:7b:62:a3:51:80:36:d2:af:5e:a4:27:75:87:cb:71:11:
         ff:7a:b2:f5:01:64:6d:3c:0b:73:af:c0:09:aa:a0:cf:6b:69:
         84:02:87:52:a1:f4:3c:cc:22:d9:b2:31:f5:f1:4c:36:70:98:
         0b:62:df:06:df:aa:b4:92:e7:ef:e1:48:6e:b9:c2:04:b6:e4:
         f3:13:b3:8b:40:98:2e:55:46:15:40:c4:67:29:65:97:a4:5c:
         94:fc:ce:63:99:90:ba:07:fd:1d:4e:2e:22:a1:1a:df:e5:31:
         5f:1e:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----