Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b9e958be-10de-3323-bce4-9d7e56079e06.roa
File:                     b9e958be-10de-3323-bce4-9d7e56079e06.roa (raw, json)
Hash identifier:          up79W0s8IsV28OJKIh1FnTwRlmIfFAR3KTvb9pPf7DA=
Subject key identifier:   DE:41:5C:5F:9B:AE:56:5C:4F:BA:C2:6B:EF:1E:73:D8:49:67:AE:BA
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583EE4FD4FED8CFFEA5F6EA2C8C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b9e958be-10de-3323-bce4-9d7e56079e06.roa
Signing time:             Thu 11 Aug 2022 12:00:00 +0000
ROA not before:           Thu 11 Aug 2022 12:00:00 +0000
ROA not after:            Sun 14 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e4:fd:4f:ed:8c:ff:ea:5f:6e:a2:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 11 12:00:00 2022 GMT
            Not After : Aug 14 04:00:00 2022 GMT
        Subject: CN=7e1281ec-ebb4-4f4d-80c2-c70ef4e1c5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:69:d6:0a:c8:5c:97:5c:9c:2e:e1:56:3a:
                    66:af:da:c5:1e:33:b9:4f:5e:6c:01:83:b4:2c:8d:
                    ec:35:d8:e7:4d:51:83:f9:91:87:fd:92:33:d0:3a:
                    aa:7a:4b:50:68:2d:f7:5a:57:54:94:d7:9d:4c:09:
                    c9:31:4d:1e:ca:65:0c:44:d8:a5:a4:92:9e:14:b7:
                    5a:25:b1:8e:80:8a:7a:59:e3:38:06:a0:ff:51:06:
                    ca:3b:2f:58:fd:c6:ae:10:06:a0:e2:2c:17:f2:06:
                    dc:2a:16:25:96:fa:a6:ea:e9:fe:bb:16:d6:6c:8f:
                    4d:e8:2c:36:95:6d:6e:73:e1:48:bb:a1:95:2c:87:
                    f6:6d:32:03:86:89:dc:d0:22:f3:7d:26:2d:03:62:
                    86:61:68:a7:f7:31:f8:52:d7:f9:30:e4:26:eb:a3:
                    3b:8e:e4:e9:b4:e3:da:b9:a6:15:c6:81:70:cf:0d:
                    fc:9f:c4:84:82:98:82:c2:75:ef:f2:77:6d:da:93:
                    40:a9:c0:cb:12:9b:54:0f:24:40:19:af:27:48:9b:
                    90:97:74:63:76:6d:e9:89:0a:69:a9:18:dc:be:cf:
                    d2:5a:fd:0d:ec:d4:71:fa:15:91:4a:16:a4:c8:14:
                    0e:5e:87:78:93:72:2e:3d:3f:67:24:e4:f0:86:f8:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:5C:5F:9B:AE:56:5C:4F:BA:C2:6B:EF:1E:73:D8:49:67:AE:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/b9e958be-10de-3323-bce4-9d7e56079e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:3e:15:88:17:75:87:68:c3:62:2f:0a:7f:29:b1:0e:6b:
         2e:e2:24:77:9f:bf:d1:af:d6:c7:60:9a:e7:59:9c:af:8a:cc:
         40:e2:05:62:c8:25:63:f9:31:9b:41:4b:6f:b5:53:cf:24:00:
         4a:56:e4:58:1e:cb:d0:6b:50:9b:7c:f8:f1:0c:0c:90:f4:3c:
         2d:c3:72:12:ac:c7:f1:19:75:21:be:d8:4b:e0:4e:76:67:32:
         21:6e:d6:b6:08:47:84:90:6b:4d:4a:a1:27:09:38:99:98:96:
         40:92:4b:f8:46:9b:b9:2e:00:fc:2f:2d:e2:0d:13:aa:32:94:
         d4:e1:e1:ea:b7:3f:93:d0:61:79:8d:dd:42:32:4e:96:6e:f7:
         ed:7b:df:e2:9a:7f:1f:97:99:a6:1c:e6:e7:74:2a:7f:85:3b:
         8e:49:24:42:fb:d5:fa:bf:ec:db:23:93:80:67:d9:ce:c3:15:
         3d:94:22:60:20:9a:14:e8:5c:d3:33:e0:d7:e0:ff:4e:db:62:
         b3:8b:c5:f9:6a:b2:88:21:84:11:46:df:7b:69:f0:ba:0c:a4:
         77:5a:ae:45:94:17:92:f5:4c:ef:ae:8c:0a:9b:1d:76:07:27:
         62:29:39:d3:8f:77:24:f4:6c:26:09:02:fb:fc:c6:57:1a:f5:
         f8:b0:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----