Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8be6714-014e-32e2-9d4d-795f238761e0.roa
File:                     b8be6714-014e-32e2-9d4d-795f238761e0.roa (raw, json)
Hash identifier:          qFKpQQt7DO7GqdcppnXXxcMgN+lUSuPtJv1PSSK3uEM=
Subject key identifier:   C1:67:DD:66:3E:04:52:2C:34:44:63:5B:5C:71:1E:C7:D9:58:9F:74
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F52082D9358AE7E9A1B276580
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8be6714-014e-32e2-9d4d-795f238761e0.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 12:00:00 +0000
ROA not after:            Thu 22 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:52:08:2d:93:58:ae:7e:9a:1b:27:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 19 12:00:00 2022 GMT
            Not After : Sep 22 04:00:00 2022 GMT
        Subject: CN=aa3c918e-8dd0-4c2e-8295-b4ca3e9e9074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:5f:91:87:45:5d:53:d8:fc:9f:59:66:db:
                    df:c6:8d:10:75:21:1c:3b:34:8f:5f:06:a8:93:9b:
                    ba:08:7a:e2:f0:c6:5c:61:18:73:7b:e0:5f:9f:53:
                    d8:92:a2:81:ee:1c:75:54:a2:9d:08:84:c0:2f:f3:
                    2c:88:37:16:da:47:9c:bb:4f:e2:a0:68:2c:e8:53:
                    13:a3:42:6c:fb:f7:35:62:3d:c3:36:cf:18:ef:b7:
                    c3:2a:9b:b8:71:b1:96:6c:88:e4:21:dd:e5:3c:49:
                    2a:b9:a4:a4:44:9c:5a:ca:3c:16:85:01:a7:3f:a8:
                    49:37:a0:22:2d:e7:cb:0f:d0:03:37:e7:e6:b7:e2:
                    7d:1c:61:7d:23:6f:0d:1c:d7:14:ad:6b:f7:b8:6a:
                    9c:a3:df:0b:f0:4e:a6:54:af:4d:3a:1a:01:37:2e:
                    ad:3f:ce:6a:c7:de:42:5e:03:0a:12:67:af:29:9e:
                    c7:b6:f7:b1:09:7a:0a:fb:dd:fc:05:9c:49:eb:ff:
                    b5:d5:fc:8b:44:96:dd:e9:6b:54:4c:60:b7:1f:93:
                    6d:c9:9e:3a:8a:d7:fe:c5:0a:5b:8f:c0:2f:2c:b3:
                    89:1d:e3:6c:e6:fe:78:72:7c:bc:a5:37:15:c4:0a:
                    3b:3f:16:82:a7:5b:9c:15:b4:8e:80:fa:74:e3:91:
                    7d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:67:DD:66:3E:04:52:2C:34:44:63:5B:5C:71:1E:C7:D9:58:9F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8be6714-014e-32e2-9d4d-795f238761e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:fb:e5:1a:76:17:4a:19:b3:b6:05:ba:1d:b4:16:a7:c8:
         28:e5:1b:6b:2d:fb:3b:f3:61:40:4d:b5:f2:2d:a2:c7:cd:5d:
         68:55:29:07:c9:9d:91:0a:54:eb:9e:12:93:e5:8a:b0:82:7b:
         8c:fe:c4:0d:bd:e2:d9:ac:0c:e5:de:e6:03:6e:a1:ca:b7:c5:
         34:05:f8:50:52:0d:bf:38:c7:b6:8b:d1:47:a4:e2:6e:71:f8:
         85:ec:1f:17:80:b2:85:3a:ca:0d:81:d5:d4:c9:b6:c2:a2:82:
         86:3d:b2:b3:1a:b7:a6:ad:ed:4f:ae:11:d5:6a:85:20:26:cf:
         68:ca:d8:f4:3b:ad:1c:2c:fb:68:39:a0:f8:0d:2f:e7:6c:23:
         f5:30:62:d2:61:1f:95:be:63:c4:93:45:e3:9a:4a:87:2f:b4:
         49:af:a9:e2:19:b3:0d:18:1f:4e:73:9a:6c:52:85:38:c6:92:
         73:12:f5:5e:64:bb:d5:c6:ad:d9:43:9f:78:6b:f0:6a:14:6d:
         42:20:4c:08:2e:2f:1a:1a:26:7e:57:6d:a2:ac:e9:f9:4e:5b:
         0d:8d:2c:34:01:88:ae:01:29:1d:e5:47:7e:4d:80:e0:f6:44:
         80:78:40:2d:a6:44:2d:91:3d:b4:c1:96:b9:a8:da:46:2f:be:
         90:44:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----