Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b60fce7c-f4b9-39b2-8381-61ea1d16586c.roa
File:                     b60fce7c-f4b9-39b2-8381-61ea1d16586c.roa (raw, json)
Hash identifier:          Tmku+HImYquojZ5FdLFTXHHP9vorrDqzY4XnujgHNx8=
Subject key identifier:   B5:3E:58:1D:28:AB:4E:BB:73:AC:63:F0:D1:C3:BE:40:29:F3:02:05
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F2F38504E9A7AA827BBDE0380
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b60fce7c-f4b9-39b2-8381-61ea1d16586c.roa
Signing time:             Wed 07 Sep 2022 12:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:00:00 +0000
ROA not after:            Sat 10 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:38:50:4e:9a:7a:a8:27:bb:de:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  7 12:00:00 2022 GMT
            Not After : Sep 10 04:00:00 2022 GMT
        Subject: CN=259e4a0b-e819-4807-8574-a9d2e3779c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:f7:cc:da:3f:58:dc:16:34:c0:d4:31:63:
                    84:74:e6:ff:c5:81:44:8a:31:60:dd:18:23:7c:c3:
                    ab:cd:e8:72:20:9a:25:05:c8:43:e0:ad:39:cf:de:
                    3b:1b:20:7d:58:75:e1:4f:da:4c:20:af:9f:8a:ae:
                    6e:41:93:90:92:c3:42:62:5f:d6:ff:1f:56:3f:35:
                    68:aa:30:3b:0d:5d:d9:2a:ec:33:1a:4d:da:5b:89:
                    4a:96:42:d5:8b:8e:48:58:3e:71:99:f3:10:15:6e:
                    5a:c4:43:f9:bd:3a:61:54:de:09:d2:9d:8f:b2:e9:
                    16:f6:55:b2:7d:c1:00:fa:c1:b5:20:5e:0b:c6:19:
                    15:74:c0:f7:6f:af:ef:79:4b:19:7d:d7:0d:4d:b5:
                    f9:6d:fb:ef:f5:52:36:da:d7:89:27:4a:77:c3:54:
                    e4:e9:41:6e:1b:5c:a7:ab:d4:54:24:81:1d:cd:47:
                    15:3b:5b:13:61:87:87:49:ed:87:78:a1:5a:4c:30:
                    b5:83:97:85:50:c9:89:cd:44:b4:5c:6f:49:41:e3:
                    77:fb:85:0f:46:c9:8c:a5:da:bb:4d:94:83:8c:c8:
                    27:23:15:ba:89:eb:b5:83:a0:79:72:d6:0a:fa:2a:
                    e1:44:d8:be:58:b4:5f:fe:df:cd:3e:a5:96:90:88:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:58:1D:28:AB:4E:BB:73:AC:63:F0:D1:C3:BE:40:29:F3:02:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b60fce7c-f4b9-39b2-8381-61ea1d16586c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:23:6a:f8:36:be:dc:48:8e:9c:0d:8b:e3:a2:f3:8b:5d:2a:
         03:39:1e:51:a3:af:81:b0:c5:69:6b:80:0a:e0:4d:ff:1c:f7:
         92:30:2c:3d:9d:b9:19:31:e9:ba:13:e1:3a:99:b4:ee:71:01:
         66:60:30:10:7f:1d:8c:c3:66:8c:a4:b5:0e:9e:15:ac:1d:e2:
         b3:eb:54:98:19:5c:c6:43:51:05:c3:21:e4:f7:14:a9:e6:30:
         36:d5:0c:b1:ed:0e:f9:f1:64:59:28:b5:73:de:e9:17:53:6b:
         cc:3f:18:55:7b:55:99:01:53:9b:44:64:12:84:95:76:78:c4:
         68:51:df:7a:d1:8c:69:0d:6f:4a:1b:89:0f:e9:88:77:eb:f5:
         d2:25:e7:92:6e:f6:98:cc:1d:c3:ad:90:eb:e8:58:b1:18:2b:
         3a:c5:64:c2:be:3b:6e:0b:44:a7:2a:e1:9a:7c:0f:8c:75:7a:
         38:16:6f:8c:bd:9d:5b:54:eb:6a:38:e2:60:fd:f7:16:17:49:
         2e:3b:fe:6a:01:a9:96:b5:e8:b3:1a:26:cd:36:7d:bf:e2:c7:
         67:65:b8:e4:b0:5c:e0:70:2e:77:62:f9:5c:f7:1e:15:ea:65:
         23:e3:1b:60:f9:f1:84:a6:e2:cc:a1:b1:ca:fa:b2:87:fb:af:
         5b:3c:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----