Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0a32c9b-d35e-34c2-9bc8-e797e01a55a7.roa
File:                     d0a32c9b-d35e-34c2-9bc8-e797e01a55a7.roa (raw, json)
Hash identifier:          2ELU/LKOSEUXvLw9NilNgWtd3K4y9+gcIqscM8gtubc=
Subject key identifier:   77:B8:AA:69:F1:95:23:5B:92:5B:26:39:08:54:0A:BE:ED:B4:E1:74
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F570A399EC7BC1E2B81446100
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0a32c9b-d35e-34c2-9bc8-e797e01a55a7.roa
Signing time:             Wed 21 Sep 2022 12:00:00 +0000
ROA not before:           Wed 21 Sep 2022 12:00:00 +0000
ROA not after:            Sat 24 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:57:0a:39:9e:c7:bc:1e:2b:81:44:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep 21 12:00:00 2022 GMT
            Not After : Sep 24 04:00:00 2022 GMT
        Subject: CN=c38758e3-ccf9-44d5-8b2a-a2a67f29f570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:e8:d5:aa:f9:68:06:76:26:b7:48:93:a2:
                    89:db:bb:ce:c8:8a:25:c0:f1:ea:5f:3a:9d:2b:7e:
                    1a:89:04:f8:10:1e:a3:a3:33:3e:8c:e5:7d:fe:75:
                    b8:20:3b:c3:1a:6f:e4:4a:62:f1:38:a7:ed:5b:10:
                    96:35:b1:d6:67:6d:3f:4a:e4:65:3a:71:1e:9b:5e:
                    a7:8c:0f:be:ea:a4:ca:aa:1b:3f:50:b5:17:df:4e:
                    60:e5:b0:68:71:8d:78:7b:fc:23:cd:65:03:89:03:
                    a7:a2:6c:43:6a:56:2c:f6:8f:5b:e6:d4:42:d6:41:
                    e7:70:02:66:9e:24:0d:7f:62:cc:f2:90:32:7f:1b:
                    ba:ec:06:39:a5:6c:c6:a9:36:fa:f0:42:39:55:f5:
                    1e:65:c7:02:c1:15:c7:03:ee:6a:90:14:e5:05:a2:
                    d7:60:c7:bd:60:d9:31:8d:76:41:c0:40:c5:0b:81:
                    32:8e:e5:f1:d3:5b:b1:0e:11:ea:7a:87:6e:cf:f8:
                    c3:ed:90:0b:9e:f3:7d:67:b5:29:ff:c6:d5:3f:ef:
                    f8:4e:3e:ed:77:e4:e0:36:2c:7d:3b:d5:29:df:d5:
                    01:4b:fb:83:60:67:95:b7:03:a3:de:ec:8e:f3:52:
                    60:11:af:1d:1e:6c:e8:00:aa:56:e5:7f:ce:c7:c2:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B8:AA:69:F1:95:23:5B:92:5B:26:39:08:54:0A:BE:ED:B4:E1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d0a32c9b-d35e-34c2-9bc8-e797e01a55a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:10:76:ee:9d:b7:d9:f5:42:a5:72:04:8b:da:39:3b:0c:10:
         b7:87:ad:9d:9c:bf:f0:43:49:f9:b7:f3:6e:cc:4f:5a:c3:46:
         00:dd:e8:09:5e:d5:1f:83:8e:33:e1:8e:53:f5:e3:5c:57:a9:
         99:a8:4c:c2:24:d3:a0:db:b7:83:f6:e1:cc:f3:ad:d7:82:33:
         fa:71:8f:57:49:ac:54:c9:3d:60:cf:83:63:4c:72:ad:4e:5e:
         b7:85:4c:b2:81:59:8f:df:9c:b7:17:d9:80:dd:be:78:66:b9:
         4f:f6:af:ad:a8:d0:70:e7:86:08:a0:ce:53:86:50:8f:15:be:
         59:ea:e5:8a:bc:31:09:d3:03:28:30:66:2e:fe:7f:2a:2a:08:
         39:ed:e8:14:4a:69:a8:1b:ee:a7:be:f2:cf:6f:f7:d1:a1:14:
         82:2a:68:5a:d9:b4:dc:aa:b7:b2:c8:8c:cc:2a:ff:36:db:87:
         7a:76:62:16:65:ef:1a:e5:4d:a2:bc:9f:25:1b:bd:81:ca:0c:
         a6:1e:8f:03:81:be:19:6a:18:e4:4b:1c:89:0b:0e:a2:f4:e5:
         a3:5f:9b:ae:32:6c:c6:9f:db:a1:b2:9a:12:43:7e:04:5a:29:
         2a:22:7c:1b:7d:01:f0:aa:7c:aa:1b:fc:15:e3:e0:dd:d6:6d:
         e0:78:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----