Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d96e346e-871d-3521-991b-3f8c27499f3f.roa
File:                     d96e346e-871d-3521-991b-3f8c27499f3f.roa (raw, json)
Hash identifier:          jOxCzqtWAk6Ga/XHxovFfOf7iEmDzR4+AjksahfG4tU=
Subject key identifier:   09:C2:D0:C2:3D:F9:FA:4C:92:5C:8F:0A:33:2D:AE:0C:02:FD:32:2A
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401B7098CED2BB293E31CCAC40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d96e346e-871d-3521-991b-3f8c27499f3f.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1b:70:98:ce:d2:bb:29:3e:31:cc:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=b4add210-3c13-4983-b114-7029e45cbd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:df:43:84:b8:5d:cb:5d:90:da:2b:4c:b9:
                    5c:af:6f:a8:b1:10:cc:9c:e0:3f:29:9d:40:a1:3a:
                    85:ec:20:ac:96:c8:f7:8c:98:2e:ea:b5:72:2e:d9:
                    d3:cf:21:46:d8:df:dc:02:9a:e1:a4:41:b3:d0:c5:
                    04:9d:e0:46:a0:8e:2a:3c:a2:29:37:c2:97:7d:09:
                    32:75:68:aa:52:ce:a5:18:4d:bc:96:2b:b8:51:11:
                    e5:20:3d:b8:1e:da:63:ac:89:97:01:2d:0c:e2:97:
                    31:af:66:6d:c2:c4:24:d3:2e:c7:28:ff:2a:07:ec:
                    78:b3:2a:ec:56:b4:ba:8e:ec:4d:a2:ec:db:23:a3:
                    c0:c7:4b:61:ce:41:4a:38:63:8a:3a:84:de:ae:67:
                    b4:1d:a7:de:34:8e:8f:a3:ac:c4:a2:33:ef:38:de:
                    25:52:c7:8f:aa:3f:98:53:e1:d1:ef:56:d9:5d:06:
                    49:22:cd:6e:04:03:df:de:fb:26:1c:f8:13:47:cc:
                    d7:78:7b:87:ad:34:2e:cf:d9:70:14:39:5f:9c:1e:
                    df:a9:20:d5:91:07:ec:74:1d:e2:3f:23:0a:5c:0a:
                    d9:5b:26:38:ec:07:1e:49:27:9c:71:e0:66:29:83:
                    c0:c8:0b:7d:d4:21:d7:04:0a:a4:a7:06:e7:ea:b9:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:D0:C2:3D:F9:FA:4C:92:5C:8F:0A:33:2D:AE:0C:02:FD:32:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/d96e346e-871d-3521-991b-3f8c27499f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a8:03:cb:2b:87:5e:bb:62:36:9c:a5:c2:6b:7a:c6:d4:2e:
         af:d5:13:17:d1:61:10:19:68:8f:10:24:77:b5:e5:f7:d9:1e:
         2e:b1:ad:7e:12:51:d8:f4:b0:a6:95:09:b8:9e:fb:11:4f:37:
         3f:1d:0b:63:9b:e1:7b:26:ba:be:cd:66:8c:98:41:be:92:f7:
         74:d4:c3:9a:2b:f7:e6:07:dd:6b:22:5f:ec:98:13:9a:17:6c:
         5c:f9:49:b3:cc:f2:10:80:01:39:84:eb:f8:17:46:c3:97:58:
         4c:f1:e9:90:23:cf:8d:9f:c8:0f:97:14:54:c3:a8:6d:bf:66:
         13:c1:4b:d3:b8:2f:0e:c4:77:6b:b7:6f:a8:e0:08:86:6b:c7:
         2a:23:09:25:74:c2:de:78:d6:a3:df:f0:b3:30:8f:05:7a:7c:
         73:07:fc:49:c0:b5:ef:9f:a5:f7:76:13:cd:d1:1d:fd:af:a1:
         9e:6e:1f:46:b2:75:3c:6f:60:46:a9:a3:9c:b7:0f:ba:a2:4e:
         56:b8:0e:e4:97:7b:d6:d9:8e:b3:05:f2:ab:25:4f:3a:ee:66:
         e6:5c:6c:03:45:d2:21:4b:5c:91:8d:37:02:74:4b:46:13:d6:
         9b:22:f6:c6:66:c8:c5:4c:5c:1c:81:ef:e4:44:27:2d:b8:58:
         b9:87:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----