Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ca07b433-adbb-31b0-9a94-f9daab07c097.roa
File:                     ca07b433-adbb-31b0-9a94-f9daab07c097.roa (raw, json)
Hash identifier:          lo94AKEoM6XMxzhRiArw8H9hMAhiPu7IoViRSEuRcsY=
Subject key identifier:   1D:7F:43:DE:EF:1E:B5:03:1F:71:38:E8:56:BE:80:7B:54:5D:3B:1F
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584017A9504A751D2050769E45C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ca07b433-adbb-31b0-9a94-f9daab07c097.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Fri 02 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:a9:50:4a:75:1d:20:50:76:9e:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Dec  2 05:00:00 2022 GMT
        Subject: CN=1130c6a2-b5aa-4472-bd20-bf0b412a383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:39:9e:63:59:8b:5c:13:48:62:66:ff:93:
                    a0:c4:e3:c6:37:80:05:36:52:ed:3f:3a:30:61:62:
                    e3:97:26:12:64:d8:62:ad:7e:96:d1:2a:2d:7f:7b:
                    a8:36:0b:f0:81:1d:5d:6a:b4:4a:08:9d:61:f8:4d:
                    41:83:3f:8b:93:9e:64:f1:8d:81:9d:be:d7:b2:1a:
                    7a:c1:24:50:f3:e6:ec:e0:8e:55:9f:8a:2d:30:1c:
                    cb:5d:df:fb:92:11:35:ac:0f:df:30:32:e8:00:ad:
                    3b:b3:d8:cb:7f:a9:6d:f1:c7:59:69:4b:ce:cf:d8:
                    9e:e5:58:15:0f:0b:fe:4f:c3:74:f1:42:5a:6b:de:
                    97:ce:e0:f6:af:76:57:f3:ab:40:31:83:dd:ba:81:
                    6f:40:19:6b:64:12:04:0c:f6:34:15:4d:a3:84:34:
                    87:af:ba:97:ae:ec:36:86:9f:f3:75:5f:a7:6c:30:
                    15:c1:cd:ce:52:82:a8:2d:c8:07:31:33:28:69:a8:
                    11:bf:ea:66:e8:c9:a2:21:95:47:cd:c1:fa:67:98:
                    cd:f3:0c:10:21:97:54:76:3d:ab:63:18:bc:58:f5:
                    3e:83:63:24:94:a0:5a:dc:34:ca:2e:ee:8a:e2:22:
                    d7:de:be:8c:38:88:9e:ac:d3:a8:ea:c6:e6:d9:6c:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7F:43:DE:EF:1E:B5:03:1F:71:38:E8:56:BE:80:7B:54:5D:3B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ca07b433-adbb-31b0-9a94-f9daab07c097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:dc:ee:ee:55:e8:ef:0c:35:4f:91:cb:c1:82:27:57:b5:
         98:bc:90:94:1a:22:d7:84:a7:4a:b9:a6:32:93:50:df:ad:2e:
         90:f2:5c:0b:9f:4a:80:e1:11:31:ad:38:62:c9:4c:02:47:96:
         e0:38:7d:34:80:4e:be:19:a3:ca:ee:2d:30:ae:0e:d3:81:d0:
         f4:09:d0:f5:f9:07:3f:f2:fc:c4:25:03:e7:61:c7:f2:c2:5c:
         f0:32:1c:7a:f6:07:b0:14:49:2d:35:90:cf:83:0a:02:40:90:
         db:82:fa:c4:9a:3c:c9:92:89:09:d3:e7:5c:5f:c6:2d:84:a5:
         ab:b2:d3:73:b4:66:a0:23:69:1b:da:9c:82:fa:de:de:b3:e9:
         8d:ff:bb:dd:ae:66:22:f2:91:4c:d7:46:38:1f:3d:41:c4:b4:
         6e:10:2a:83:3a:50:ea:fb:80:76:42:e8:10:d0:80:7f:45:46:
         b7:5f:7f:57:ed:e3:21:13:39:48:95:24:3e:d9:ba:1c:49:0f:
         3b:9d:f0:45:bd:af:2d:f9:ef:57:07:ff:8d:3f:25:9f:f6:dd:
         25:c7:ab:d1:b6:20:a6:9d:25:c6:76:e7:0a:7e:4b:33:2c:b0:
         fc:94:f7:3f:32:9e:73:e3:20:9a:aa:b0:82:86:b2:31:52:7f:
         e2:7e:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----