Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b63571d6-31b4-39c7-b1c9-5bf2771b34fe.roa
File:                     b63571d6-31b4-39c7-b1c9-5bf2771b34fe.roa (raw, json)
Hash identifier:          KpnMCeVQyURFtDW/t2RC9E84+SIa48JtytlJHT3U/Hg=
Subject key identifier:   36:1C:A0:06:6D:23:0F:8A:E3:0C:AE:A7:4E:91:CD:49:A7:F3:34:02
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F10EB1CBBDDE634FE36F8FA00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b63571d6-31b4-39c7-b1c9-5bf2771b34fe.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:10:eb:1c:bb:dd:e6:34:fe:36:f8:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=2498db46-4046-4298-b990-77aa3fa7da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:06:83:9f:58:9c:c1:79:fe:48:21:b7:e9:
                    2e:f4:03:bd:76:d0:3a:3d:d9:50:0b:4e:03:40:ce:
                    f3:ab:ba:15:b8:63:89:fc:bf:b3:49:0e:31:f8:5c:
                    1e:75:7d:63:fb:bd:5a:ce:6f:54:f6:cf:ee:c1:e5:
                    da:4a:e6:c2:1e:68:58:2a:32:90:09:4e:9d:fa:a9:
                    50:44:e0:3b:4f:3d:16:82:e1:a7:d6:8c:d1:e7:cd:
                    5c:ab:3c:3c:52:74:de:4c:5d:eb:37:35:26:1c:ed:
                    d8:0f:e9:d9:c9:65:b7:b1:90:12:12:d6:78:9a:12:
                    dd:9b:f9:14:b2:98:bd:e7:88:d9:b3:a0:1b:45:a9:
                    54:4e:30:db:3d:fd:7e:42:41:30:21:6f:e6:bf:ae:
                    15:b4:e9:43:a3:27:bb:32:a7:e2:08:38:2b:64:0b:
                    a3:68:d9:b7:4f:df:c9:ec:0f:0c:fa:c4:1e:6a:04:
                    66:0e:cf:ed:f0:c1:81:97:7a:0a:f8:ef:92:7f:b6:
                    db:f7:45:50:57:c4:98:d2:ee:33:58:13:d8:6c:c2:
                    c5:07:ca:21:ab:04:10:3b:54:17:cf:6e:ce:06:a3:
                    f5:77:10:a1:3b:28:50:be:e8:77:9e:ad:4f:c1:53:
                    ae:b1:5f:b7:da:af:a8:35:ab:18:82:56:d3:cb:99:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:A0:06:6D:23:0F:8A:E3:0C:AE:A7:4E:91:CD:49:A7:F3:34:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b63571d6-31b4-39c7-b1c9-5bf2771b34fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:04:78:c9:e1:2d:d5:22:e4:94:c7:ce:70:ea:16:e4:dd:06:
         f2:aa:90:d2:b2:53:e9:76:3c:e6:73:42:c3:8d:b9:30:26:9d:
         94:79:18:d4:63:da:28:00:42:2f:7d:63:2c:98:43:6e:ff:14:
         d6:42:82:0e:2c:28:30:55:d0:8a:19:56:b8:c0:6b:e5:39:25:
         0e:7a:30:8f:07:13:5c:f1:0a:d3:9c:a6:75:4b:79:c0:ce:7b:
         7e:a2:4b:b7:55:c9:17:5a:90:7e:58:a9:ce:fb:e8:23:7c:9c:
         ca:40:ab:9e:64:19:88:3a:30:40:33:47:9f:40:a8:03:3b:c9:
         df:bb:92:c5:b7:ee:8d:e6:08:ec:5d:8b:0e:88:c7:a3:36:de:
         63:49:b8:99:7f:94:c4:b0:96:98:5a:f7:9f:a6:04:ae:a5:7e:
         78:bd:43:39:c6:12:0f:15:4b:14:0f:a5:a0:c2:3d:d9:3b:9e:
         a8:aa:e8:3c:92:c7:a8:42:70:05:a1:d4:82:d5:91:d9:a1:13:
         ec:f5:01:a1:31:4d:b8:f0:87:87:29:f2:50:a3:36:be:e4:ef:
         a6:64:db:e6:b7:91:95:87:25:5c:10:4c:51:78:0d:12:f2:f6:
         56:74:1a:e6:82:4d:e7:9b:1b:9e:55:f3:61:5d:25:3a:c7:49:
         90:38:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----