Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d13d9a0b-209a-3122-b90a-3640420497f9.roa
File:                     d13d9a0b-209a-3122-b90a-3640420497f9.roa (raw, json)
Hash identifier:          5Trki+j0o934kFry2W8q2nZodWgeCtwuugVU36Efdv0=
Subject key identifier:   FC:9A:EE:C0:81:E1:9D:FA:7E:D7:15:AC:CB:71:BD:47:5E:BD:02:77
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858402895B9B7FE68449C0A8283C0
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d13d9a0b-209a-3122-b90a-3640420497f9.roa
Signing time:             Mon 05 Dec 2022 12:00:00 +0000
ROA not before:           Mon 05 Dec 2022 12:00:00 +0000
ROA not after:            Thu 08 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:28:95:b9:b7:fe:68:44:9c:0a:82:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  5 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2022 GMT
        Subject: CN=c5161ece-be77-4178-accf-499ed135d593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:0f:7f:4e:cb:f4:14:c5:ed:6a:58:a8:68:
                    2b:94:0d:24:d3:66:37:5f:69:d3:43:34:e7:84:c9:
                    ef:4b:c2:2f:1c:43:d4:8e:18:cb:71:1d:74:73:e9:
                    67:e7:3e:ca:6f:8b:a6:9d:4c:7f:dc:b3:a6:40:81:
                    89:da:06:5a:0c:0b:b9:a9:cb:b8:81:d6:5f:73:8a:
                    93:e4:de:d4:85:9c:db:59:96:43:0d:3d:a7:5a:e8:
                    d2:1e:46:8d:10:62:af:b6:c6:7a:ff:13:db:ff:98:
                    ac:7a:29:b8:b7:98:0b:e0:62:00:ab:42:58:bb:72:
                    c7:4a:0d:a5:f0:22:a2:fe:9c:b1:dc:0c:7a:5a:55:
                    fe:d7:7c:3e:68:6f:31:11:02:39:56:1a:54:d9:5e:
                    0d:84:bb:59:0a:a4:69:79:45:f3:a5:4a:f5:d7:67:
                    79:b7:49:ee:be:11:3f:0c:48:c0:96:bf:5b:c4:de:
                    08:05:50:82:e9:fc:58:02:e6:1d:23:8d:00:94:d9:
                    b4:40:b5:99:d7:2e:45:7c:c1:e6:90:21:a0:eb:09:
                    5c:10:36:30:aa:75:80:b4:6d:e9:b3:06:13:f1:06:
                    a5:0d:53:6d:77:cb:88:d7:9e:9f:aa:c6:0a:1e:10:
                    8e:27:78:f3:54:e2:7c:03:a8:98:75:be:cb:da:da:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9A:EE:C0:81:E1:9D:FA:7E:D7:15:AC:CB:71:BD:47:5E:BD:02:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d13d9a0b-209a-3122-b90a-3640420497f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:bb:75:2b:50:73:7e:17:e9:90:12:43:a8:fc:5b:c7:ba:ca:
         82:d7:c9:23:f3:fa:d9:f0:69:d6:36:96:f9:f1:1d:db:b5:ac:
         23:7a:81:c0:41:18:5a:8a:fe:53:d5:11:70:18:4a:c9:bd:95:
         f5:f4:cf:db:2d:12:15:c1:24:6a:53:18:54:98:a1:fa:71:a5:
         69:d5:88:6c:1d:da:03:4e:08:0b:4e:0a:26:86:77:b9:a1:98:
         ae:ac:9c:bd:5b:6f:c9:20:d2:f5:06:88:26:af:b3:39:a6:80:
         54:05:43:8c:5b:0b:b0:53:35:6c:1a:9a:24:62:8f:43:eb:b3:
         7f:64:a7:c7:f3:ba:e1:c1:db:86:7a:42:ea:78:70:0d:ae:02:
         77:e3:f6:3c:31:ee:aa:cd:30:3d:34:cd:2c:69:1e:96:fa:4e:
         51:d1:7c:e7:cc:44:da:b3:6d:80:46:ad:10:9f:e5:f5:b5:fc:
         9d:92:1f:b2:20:a3:a9:ec:15:16:4d:48:54:59:4c:ce:8a:ae:
         15:40:57:81:05:ea:0c:6e:d9:3e:f8:3d:93:02:4d:6e:b2:e3:
         5f:1f:3e:e1:66:ec:41:b7:9d:79:40:1c:bd:ec:0c:b2:49:5f:
         dd:0e:c0:a7:83:d4:ad:64:84:b6:40:e8:af:f0:23:6f:64:57:
         4f:2b:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----