Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b65474ee-7a4f-3812-b5ce-164cdd976470.roa
File:                     b65474ee-7a4f-3812-b5ce-164cdd976470.roa (raw, json)
Hash identifier:          7QUExb+aaLySIvVeFv2s6pimEEKQdwbPl0KJZeK6BEY=
Subject key identifier:   C9:ED:61:17:2C:0D:CE:EB:44:AE:46:FE:24:17:9D:4B:91:98:9D:AF
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FFDEC4ADEFD5C4C9805109300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b65474ee-7a4f-3812-b5ce-164cdd976470.roa
Signing time:             Sun 20 Nov 2022 12:00:00 +0000
ROA not before:           Sun 20 Nov 2022 12:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:ec:4a:de:fd:5c:4c:98:05:10:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 20 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=4435ffdb-4e6d-4604-ab39-59d21d1792e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:26:98:6e:0a:60:32:66:0b:8a:bb:36:e5:
                    1c:a0:32:0e:ea:b7:d8:c8:b6:4b:8c:77:2d:ac:da:
                    e2:9b:66:e8:1a:3e:b3:3d:10:fa:85:6e:d2:3e:37:
                    88:2d:18:5e:13:97:ee:81:ed:35:b6:cf:7f:2a:67:
                    a7:30:8a:c5:1b:18:19:4e:a4:da:2f:29:60:c0:59:
                    e9:b6:7a:1b:fb:14:25:01:97:50:0c:f0:d0:4f:f2:
                    45:2d:86:51:6c:42:a1:5c:7b:ca:b7:ab:56:b8:74:
                    a4:73:c0:83:dc:40:9d:b9:1e:dd:30:3a:c7:00:f8:
                    a7:b6:3b:51:ab:9e:2f:f8:ad:67:7a:e2:0c:f5:22:
                    a5:75:18:b3:71:6a:26:41:0f:c1:df:f5:9e:0e:01:
                    69:4e:06:e7:a6:69:af:54:1d:03:f8:04:1b:56:ef:
                    5d:fc:55:c4:93:e1:4d:69:c1:e0:4b:69:b7:87:2e:
                    0e:cd:03:5f:9b:8d:6e:7a:8f:80:de:bc:0a:99:24:
                    9f:24:c4:66:df:9a:df:68:4a:56:bb:25:05:78:d0:
                    56:df:89:c4:4e:ad:f2:33:df:61:82:71:bf:c5:9a:
                    b5:b0:48:59:f9:76:39:9c:63:f3:a8:f7:60:27:bb:
                    c8:b3:e9:ea:79:a3:90:ac:f1:9d:9c:3c:6a:c3:b0:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:ED:61:17:2C:0D:CE:EB:44:AE:46:FE:24:17:9D:4B:91:98:9D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b65474ee-7a4f-3812-b5ce-164cdd976470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:7b:07:9d:7b:e7:7c:2d:ad:9d:94:eb:fb:b1:53:b1:12:35:
         b4:08:f7:8f:da:35:38:a0:91:b8:b6:4b:99:09:24:7e:c1:e4:
         55:61:4d:e0:31:db:f9:99:56:09:60:c1:3b:ff:d0:be:cc:97:
         59:90:7a:0b:50:92:33:86:50:85:2f:a9:88:b1:09:f5:c2:27:
         2f:76:36:b9:07:de:83:78:2e:a7:16:2d:94:ff:fe:eb:31:f6:
         18:ee:3c:72:2b:d1:d9:7d:fb:25:7b:f8:b8:4f:50:0f:c7:a6:
         25:cb:d8:54:63:e5:47:8d:f8:0d:34:b0:7a:69:58:bd:ce:27:
         fa:67:58:54:a5:d8:d2:02:99:e9:45:09:43:58:02:66:87:7d:
         49:39:e2:0b:41:6a:e7:a7:41:ab:77:99:6f:5f:eb:1c:92:9a:
         df:3c:dd:c5:a3:59:35:46:d3:2d:24:87:ab:e2:f3:3c:30:7a:
         39:a5:1f:82:72:c8:a6:62:2b:7a:27:be:d0:0a:8a:ef:db:3e:
         be:d7:c5:41:b7:50:0d:30:55:bd:69:50:47:10:19:a7:3a:bb:
         87:59:a6:34:62:3e:e1:7c:23:5c:3d:d0:59:9b:56:8c:53:44:
         51:7a:27:51:82:19:7c:1a:d4:9c:0e:b8:79:70:ba:f8:8e:07:
         a9:6a:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----