Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8e2f08a-96ce-35cf-bcb7-f567cebf096b.roa
File:                     b8e2f08a-96ce-35cf-bcb7-f567cebf096b.roa (raw, json)
Hash identifier:          wy3siSyM7AijJEledBcLWEmJ471h7h9oX1TTDeL6O8w=
Subject key identifier:   D4:AC:1C:C5:43:F4:4E:0A:A7:81:BA:3F:B8:FC:B1:01:95:BC:A0:98
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FC382D5CF22660ACE691DC700
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8e2f08a-96ce-35cf-bcb7-f567cebf096b.roa
Signing time:             Sun 30 Oct 2022 12:00:00 +0000
ROA not before:           Sun 30 Oct 2022 12:00:00 +0000
ROA not after:            Wed 02 Nov 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c3:82:d5:cf:22:66:0a:ce:69:1d:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 30 12:00:00 2022 GMT
            Not After : Nov  2 04:00:00 2022 GMT
        Subject: CN=af1bbadb-9307-452f-8493-ccd6f4b92554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:ca:37:ca:0e:4c:80:d6:88:c1:cc:91:26:
                    57:71:e5:73:73:6c:0b:d0:40:b6:73:01:87:9b:87:
                    1c:96:76:1d:47:96:8c:32:59:fc:1c:2e:30:61:24:
                    3a:1e:21:bd:d1:3d:f0:ff:7f:1e:33:51:de:e1:a0:
                    e2:e9:5c:a8:bd:ab:26:84:2e:ab:fa:fc:19:93:11:
                    f1:aa:00:be:7f:36:22:b8:84:3b:29:c0:90:69:74:
                    1d:ff:97:f2:ad:c3:b2:bf:fc:4e:7c:9b:fa:9f:d2:
                    49:c5:1b:28:ef:19:a5:2f:28:74:dc:29:ad:f4:ab:
                    e4:bb:50:a4:88:f4:dd:68:af:19:7b:e0:3a:8c:db:
                    da:d2:a4:e2:bf:3f:6b:32:c9:38:8c:e9:2f:bd:48:
                    bb:e9:d0:bb:81:11:58:01:87:af:44:f8:61:43:0d:
                    a2:7e:17:fb:cb:f1:17:0a:14:c0:30:90:93:2e:ac:
                    4b:42:60:57:79:9a:de:e8:e1:31:cd:b3:aa:1f:53:
                    86:97:41:35:0f:da:3f:4a:c5:55:ac:d8:e7:a0:cd:
                    7f:b6:6e:b4:14:d6:0c:09:c7:0c:de:e6:24:17:7c:
                    d0:45:23:e4:04:71:60:8c:08:9d:28:13:0d:8d:61:
                    c3:43:b9:46:e2:22:8f:f3:22:c3:9f:d3:13:98:ac:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:1C:C5:43:F4:4E:0A:A7:81:BA:3F:B8:FC:B1:01:95:BC:A0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b8e2f08a-96ce-35cf-bcb7-f567cebf096b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:20:5d:5d:60:1a:b8:4c:02:f1:c4:94:cc:17:64:39:9f:
         d6:ab:08:67:cb:7a:32:e7:fd:d6:30:81:1a:40:41:dc:87:52:
         c3:a7:a8:0b:14:2f:05:2c:8b:bc:4e:c5:18:0b:c5:f6:a5:61:
         25:41:03:b7:85:af:0e:45:bb:a2:e0:0a:f3:2e:4b:19:15:04:
         36:15:62:a5:96:ea:9e:43:7e:62:d1:2e:99:23:63:c8:76:db:
         fa:ed:4e:2b:f0:bc:96:ec:01:87:d7:00:5d:c9:20:98:34:11:
         19:6c:da:9c:f4:d5:d2:cc:60:cb:94:24:48:4a:c4:9d:f9:85:
         70:d0:63:b3:6a:37:fa:42:65:9d:2e:7a:ff:93:03:f2:91:66:
         ce:ab:2c:30:34:15:c9:1d:64:34:03:54:e7:e3:aa:46:81:00:
         9c:56:6e:d6:cc:b8:33:63:0c:b0:fc:d7:a0:2b:f0:9d:6f:38:
         f3:d9:21:55:16:de:08:ed:3c:c3:e9:dd:3d:c4:f9:3d:89:9d:
         8b:fc:93:49:e2:6d:05:34:70:ee:75:45:1c:38:a6:f3:3f:a3:
         44:6d:97:cd:0d:4f:89:c0:d8:2f:97:41:5c:3c:e9:78:a3:08:
         3c:e9:8b:7b:fa:35:63:db:bd:77:15:b8:09:a3:c2:85:34:47:
         36:91:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----