Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dc1da161-3411-3fda-aaed-dec1fba81dd1.roa
File:                     dc1da161-3411-3fda-aaed-dec1fba81dd1.roa (raw, json)
Hash identifier:          ouFl62IOhL0a8h2hNKBDZC6gPgw1ypUMJWfS4j06RGg=
Subject key identifier:   22:05:77:AB:9E:84:20:93:0C:BE:B4:D9:98:BD:30:DC:AD:CC:7D:27
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401E1D7E69B9D971188EE15660
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dc1da161-3411-3fda-aaed-dec1fba81dd1.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Mon 05 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1e:1d:7e:69:b9:d9:71:18:8e:e1:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Dec  5 05:00:00 2022 GMT
        Subject: CN=fbca1da0-6b10-4013-af63-ea67227ffa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:5d:b5:18:58:9d:5c:7c:10:36:61:b5:c5:
                    4f:8f:1c:e4:cc:b3:35:33:2f:f4:d3:f5:2c:14:57:
                    c7:0a:ba:f9:23:ca:33:6b:49:09:49:86:37:e9:97:
                    f3:da:8b:3b:2e:18:a0:bc:9c:d8:dc:c2:40:aa:12:
                    6f:d6:8c:0e:1a:27:f6:1d:1f:92:f2:77:25:34:c6:
                    f1:c5:e5:49:a8:a8:91:d5:99:6b:2b:92:24:8a:e7:
                    d5:83:0b:e1:91:9f:cb:c8:eb:ea:c8:f4:59:22:3a:
                    53:fa:e8:4e:da:1b:3c:0e:43:d6:5b:b6:87:ae:73:
                    4e:e8:9c:d8:26:66:2b:1c:12:3e:27:c0:4e:bc:4b:
                    2e:e9:a9:de:b9:02:43:1e:d3:46:db:bb:0b:a7:9c:
                    f2:39:20:f5:16:b8:84:39:07:8d:67:76:82:53:03:
                    64:87:63:3d:ef:1a:9c:28:2a:f8:d9:b7:c2:4e:d0:
                    93:c0:40:8b:84:7d:6d:d9:8f:6b:d4:86:55:98:f9:
                    04:41:2f:7f:45:2e:62:a4:77:79:f7:ee:0d:4a:e6:
                    a5:9b:24:ea:23:d7:96:ea:c4:b3:d5:27:f1:e2:ef:
                    4c:09:4c:e3:1c:da:67:b9:dc:97:5d:53:b4:c0:c3:
                    c9:42:0a:76:31:99:0b:ba:27:b7:36:f7:68:96:e7:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:77:AB:9E:84:20:93:0C:BE:B4:D9:98:BD:30:DC:AD:CC:7D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dc1da161-3411-3fda-aaed-dec1fba81dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:23:4a:c5:36:84:1d:85:a4:3f:8e:b6:48:02:16:a8:b4:cb:
         5c:5c:05:bc:ea:32:a9:ba:23:c1:2f:bd:c0:2f:d2:6d:87:69:
         db:3f:f4:f8:3c:e6:0b:ca:79:fa:c9:bf:5b:27:f6:f8:3a:87:
         9a:f7:1d:21:fb:b7:ae:51:a2:33:25:ad:d6:ed:f9:65:f7:e0:
         8b:01:82:ee:28:15:ad:45:ba:b3:3f:e1:96:eb:f2:c1:c9:ca:
         3b:d4:eb:ec:4f:eb:e9:1d:a7:2d:34:aa:f5:5f:e6:f0:78:40:
         a5:9e:e6:58:df:86:c1:a5:51:2d:28:c4:c0:54:c7:b8:98:fd:
         e1:46:3b:16:6d:53:57:15:f0:56:32:73:51:0f:8f:fe:f7:e1:
         05:b1:29:02:9c:50:b5:ae:53:10:81:82:7c:b9:d3:1e:43:ee:
         3a:76:3c:a4:00:cf:d0:1e:81:45:e1:5d:d4:72:b0:dc:93:23:
         68:c7:22:5e:60:70:54:01:d7:97:04:c6:53:e1:ff:68:39:de:
         73:23:15:0a:f4:46:59:4f:08:bf:66:8d:73:ff:b0:f4:22:de:
         a7:65:c9:5d:8a:68:2e:97:a6:1f:33:17:cc:32:95:15:4c:66:
         2a:10:c7:4d:6a:0b:75:8b:4c:e6:2e:67:52:01:6c:8f:67:3d:
         af:fe:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----