Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ddde7b58-c896-31f2-ba6e-46d21cb7facc.roa
File:                     ddde7b58-c896-31f2-ba6e-46d21cb7facc.roa (raw, json)
Hash identifier:          Z22XghQAPRxtO1ZFWtkL1aXIdG/xikAmeLf+JXUfYpE=
Subject key identifier:   A7:4B:7D:10:6E:3E:F8:34:C6:C3:A9:B9:75:21:49:CF:5A:01:B8:B4
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328584026019F0AB349C910D5477F00
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ddde7b58-c896-31f2-ba6e-46d21cb7facc.roa
Signing time:             Sun 04 Dec 2022 12:00:00 +0000
ROA not before:           Sun 04 Dec 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:26:01:9f:0a:b3:49:c9:10:d5:47:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  4 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=179c5f4d-5365-4ebd-ab9e-72fe67e94670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:30:51:8a:a6:b4:8e:e3:25:04:c1:b0:12:98:
                    00:b8:a4:1a:5a:fd:e8:ec:5f:c0:f3:e9:0c:f6:c1:
                    f0:f6:2a:9e:ae:33:d3:8a:f7:2d:f6:33:ae:ac:3b:
                    25:73:d8:3d:a9:4f:26:d7:93:62:fd:64:a9:43:50:
                    fb:d1:29:91:79:fc:ad:56:ce:20:e8:74:c5:da:13:
                    6a:cf:14:04:23:65:52:8b:62:00:cc:b6:41:5e:bb:
                    01:be:f9:09:d3:44:b2:cf:93:cf:26:a9:4e:04:00:
                    16:25:d6:60:d6:f9:00:af:e4:27:9e:39:28:91:18:
                    74:c6:0b:4e:e5:d9:2c:8e:96:0d:e7:d0:69:5b:07:
                    56:19:09:59:9e:b5:3b:3c:81:28:70:29:75:99:f3:
                    88:cf:2e:8a:dd:1f:07:ad:67:a8:00:8c:15:15:0d:
                    b8:ae:3f:f1:6a:ad:03:d8:0b:43:ad:8c:5d:34:5f:
                    5f:40:39:cb:b7:5e:27:db:e9:96:be:86:1e:a9:37:
                    cc:80:bf:cf:d6:2e:c5:e5:45:8f:1f:20:2e:90:44:
                    16:7a:bf:8e:ea:7f:ac:2d:a8:4f:c3:51:84:84:49:
                    d6:95:eb:3e:5e:6a:66:e1:c6:19:d6:c7:93:76:57:
                    60:4c:8d:0d:31:b5:7e:63:be:d7:27:2b:7c:7d:80:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4B:7D:10:6E:3E:F8:34:C6:C3:A9:B9:75:21:49:CF:5A:01:B8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ddde7b58-c896-31f2-ba6e-46d21cb7facc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:f3:4d:05:c0:ff:c5:eb:df:39:4c:a9:2e:f4:8e:bf:0e:c9:
         ad:8a:94:a8:e7:29:9b:b0:12:f7:24:8a:b6:fd:59:60:cf:16:
         74:dd:78:db:92:a1:86:20:65:b0:ab:80:2a:d4:b3:87:47:0b:
         82:f7:e9:bd:12:ac:23:0f:75:09:4d:c2:18:7f:9f:23:9d:a5:
         ae:23:e0:4b:c3:33:d6:60:14:b5:78:89:e2:6b:c3:8a:28:5c:
         ed:85:4e:8a:f8:64:ab:fd:a3:d7:0e:7b:31:92:6d:65:63:32:
         d3:1c:3e:24:77:1f:6c:b3:17:d2:92:a7:bf:af:39:dc:71:5e:
         71:14:28:d7:e5:cd:fd:7a:ac:9d:33:22:ad:9f:d0:97:5b:70:
         83:dc:78:98:9e:00:9a:50:d9:06:e8:1c:bf:84:e7:3c:0a:17:
         2f:39:34:92:b6:ab:fb:1f:a8:a1:65:78:d9:cc:74:6c:60:db:
         ac:ed:13:c2:2c:9a:9f:40:66:6f:3a:f6:7f:65:89:c7:3e:24:
         be:eb:c7:81:0b:66:c1:0b:cf:4c:64:8e:57:32:f5:54:c4:f0:
         10:8a:15:3c:8f:7c:f7:b9:18:7e:2e:9c:d2:26:3e:87:70:03:
         9c:f8:e3:3e:f2:7e:9d:cb:37:1d:f2:d8:f5:b7:dd:bf:0d:d1:
         c5:ca:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----