Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d76edc76-8c06-3a4a-aa8b-bb9d411f878f.roa
File:                     d76edc76-8c06-3a4a-aa8b-bb9d411f878f.roa (raw, json)
Hash identifier:          D16qX4CJrw/tu0JnkXKWU0uolH0+eE5/6oo7ksFTe8g=
Subject key identifier:   7C:DA:DE:BF:B0:DD:04:FA:15:E6:D0:27:A6:72:53:A9:EF:4A:BB:66
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F03B6E608D69BA22EB86ECC30
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d76edc76-8c06-3a4a-aa8b-bb9d411f878f.roa
Signing time:             Mon 22 Aug 2022 12:00:00 +0000
ROA not before:           Mon 22 Aug 2022 12:00:00 +0000
ROA not after:            Thu 25 Aug 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:03:b6:e6:08:d6:9b:a2:2e:b8:6e:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Aug 22 12:00:00 2022 GMT
            Not After : Aug 25 04:00:00 2022 GMT
        Subject: CN=6cae9b14-9d88-4dc1-9828-40b6183e2853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:ca:06:9a:2a:04:86:37:75:9c:56:29:10:
                    91:d5:2f:3c:71:54:86:c8:8d:59:92:ef:8f:87:5a:
                    67:85:d1:28:e1:08:cc:24:5a:40:c0:d3:4a:44:85:
                    f9:c3:7a:c6:c1:d6:4f:5d:2f:c5:96:c1:33:35:b9:
                    90:2b:bc:e4:dd:d9:a4:16:72:27:42:fe:d8:10:3a:
                    e7:15:e6:56:0c:b3:23:1e:43:2f:1f:79:4e:11:0e:
                    7b:73:20:e0:bb:ff:d7:df:e0:ca:ff:a0:6d:ec:f0:
                    d0:e2:f2:a3:9e:b7:52:ee:5a:27:8b:ff:17:66:39:
                    b8:57:c3:9c:a5:f6:b6:99:d3:f7:ca:fc:8e:94:4c:
                    04:a5:6a:63:71:16:26:98:46:81:44:4e:02:03:11:
                    37:c6:1f:28:b9:2a:a6:7f:2b:4c:6d:8f:22:d1:5d:
                    b5:40:f1:d3:d0:bf:c4:c4:f4:59:65:26:12:77:12:
                    66:a7:aa:19:3d:bb:1c:38:fa:d0:b0:d5:51:a8:10:
                    87:e2:71:62:b9:1a:6e:50:77:41:6b:c2:ea:57:c5:
                    16:bc:4f:5f:c7:c9:f3:c6:7a:b9:d6:9b:95:31:72:
                    1d:4b:5f:77:c6:76:b4:c1:0e:2a:37:52:ea:b4:64:
                    35:2f:39:52:78:a2:6a:96:4d:03:80:e7:9c:4d:d5:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:DE:BF:B0:DD:04:FA:15:E6:D0:27:A6:72:53:A9:EF:4A:BB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d76edc76-8c06-3a4a-aa8b-bb9d411f878f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:b7:f6:96:e9:d3:b1:a9:f7:85:53:aa:ce:f5:36:b0:18:
         48:13:74:45:bf:78:21:44:f0:98:fd:37:2b:b2:68:d4:fd:80:
         91:11:a4:31:bd:56:6b:e6:da:15:8d:1c:78:66:54:93:97:3c:
         f7:35:ec:ca:c5:93:e8:31:6c:b9:84:c1:53:df:fe:8c:ee:01:
         e6:92:4f:57:07:cc:56:51:44:bd:a7:46:05:5c:18:56:62:10:
         75:d8:e4:43:95:4d:86:f6:80:2b:da:5a:b3:17:a7:ee:7d:3b:
         80:1f:c8:87:4d:7e:2a:03:47:2c:2e:53:72:0f:36:1f:a9:2b:
         77:99:58:61:6c:5b:cb:68:52:d4:71:9a:cf:93:14:e1:bd:f9:
         8c:6f:f2:16:63:2e:bf:98:a8:00:64:d5:25:b3:26:3c:19:76:
         8d:69:e4:9a:73:35:0b:32:ec:ab:bf:90:21:57:8e:94:d1:d7:
         f3:06:d8:f8:76:7c:7f:f3:4a:19:4b:4b:fd:72:9c:f0:ca:0a:
         ad:e5:f1:a5:4d:10:8d:1a:bd:38:fc:fa:8b:16:6e:62:a7:c8:
         f7:d9:71:1d:ed:e2:af:91:f5:fb:e7:3e:14:db:a6:9d:f1:28:
         e1:a5:f6:6e:bc:dc:d6:50:c4:04:7b:c5:c9:ff:22:bd:e3:0a:
         cf:5f:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----