Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b7f5939c-d0f7-3a87-871f-4f978a68977c.roa
File:                     b7f5939c-d0f7-3a87-871f-4f978a68977c.roa (raw, json)
Hash identifier:          2V2bVBqC3q3sWVooiPBMmE3eNWo1v8R4Y5B/zAxIog4=
Subject key identifier:   24:3A:F4:0C:F5:04:32:29:D3:0E:B1:FF:F3:48:50:CB:E9:D8:CD:5E
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401B5CE3C9E0010B0D7030AEDC
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b7f5939c-d0f7-3a87-871f-4f978a68977c.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1b:5c:e3:c9:e0:01:0b:0d:70:30:ae:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=e895c96e-e7bc-43b6-b199-677278fcb9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:55:3d:c4:3d:f4:f2:4b:a7:7d:c8:30:eb:
                    97:3b:bc:25:f2:b1:a8:4c:c2:ca:a1:9e:04:a1:82:
                    83:21:7f:72:8f:f5:7f:70:b3:63:73:e0:fe:a3:f8:
                    46:74:4b:30:cf:31:3a:c3:a1:8e:d4:a1:3c:8a:f8:
                    be:d5:89:29:cd:69:01:0f:aa:4b:5e:ab:03:c7:6e:
                    4b:55:dc:94:7e:11:1e:99:10:de:d2:db:6d:e2:2a:
                    f0:eb:6e:6e:65:e4:75:5a:07:c2:d7:2d:97:11:71:
                    55:1b:18:05:1a:3b:59:1b:f1:a4:4d:97:ce:ea:a1:
                    4c:8d:fe:f4:5b:88:71:c1:3a:d7:d8:4a:95:12:25:
                    d2:80:32:f9:93:39:77:a6:90:b0:62:4a:b6:74:ac:
                    9c:a1:07:db:76:77:f6:9c:0b:b5:13:d3:d5:56:99:
                    35:86:7e:01:f6:8f:5b:c3:e4:f3:c1:10:b5:44:1f:
                    df:b8:ff:3f:d6:9d:cd:54:3f:23:41:62:a1:36:16:
                    27:46:ea:85:87:1b:0d:5d:b6:0a:af:51:00:86:bf:
                    0b:1f:99:f9:72:4a:ef:65:73:8c:bf:fd:00:a7:2f:
                    10:c9:6f:56:bb:c3:3a:9c:a3:bc:cb:22:0d:cf:ff:
                    a4:e2:f9:29:79:11:f6:e1:12:45:35:b5:07:17:68:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:F4:0C:F5:04:32:29:D3:0E:B1:FF:F3:48:50:CB:E9:D8:CD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b7f5939c-d0f7-3a87-871f-4f978a68977c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:a7:85:f7:04:9e:f6:d6:2c:9b:4b:3e:6b:2e:84:3f:c3:
         b3:38:81:ee:a9:29:b2:fc:55:1e:d5:42:5a:a0:fe:90:2a:d2:
         c8:36:e5:57:f8:26:a4:3c:5f:17:e0:52:ce:c8:da:b7:08:60:
         71:b7:d7:83:0c:b0:ee:0b:ce:47:8c:13:c0:8b:b6:f0:6c:23:
         8a:ad:8a:29:4f:98:ab:2d:a8:00:4f:31:6b:c8:5e:07:cc:3c:
         3a:98:2e:dd:2e:31:16:0a:a4:95:1c:8a:8a:0f:fb:72:6f:e8:
         0e:a5:b4:e8:88:3b:d2:b6:60:d1:fc:ed:78:a0:aa:23:00:05:
         f7:87:84:91:42:26:03:41:5e:b2:b9:33:8e:6b:45:b8:6d:75:
         d9:b4:89:5b:1a:39:80:48:9a:a0:19:77:59:88:5d:23:58:94:
         a9:2a:00:37:cb:b2:76:d8:e5:aa:3b:5e:75:ac:aa:0e:8f:38:
         0d:7a:3f:77:24:cf:5c:e5:15:c9:23:ad:71:ce:93:4b:c7:b0:
         75:b2:9e:35:f9:be:05:ee:be:7e:b6:51:18:9f:f9:53:2d:51:
         5f:0e:53:c3:b8:39:e6:5f:b5:54:26:f8:75:d9:63:63:c1:6b:
         48:db:1e:4d:d9:fb:96:1c:f4:81:a2:cd:bd:7a:f2:35:c4:11:
         25:fc:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----