Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dfd4d91d-cd7d-3990-a0f0-bf35dee1783d.roa
File:                     dfd4d91d-cd7d-3990-a0f0-bf35dee1783d.roa (raw, json)
Hash identifier:          mcNQOlRKpW78oRsp3ajsJ/qUkwZp4Dlid6ltx3AL0ks=
Subject key identifier:   EF:5E:18:7C:56:3A:BA:5D:AD:FA:FA:2E:52:80:21:81:B1:89:C9:E6
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FE0AB7E6247299524C869E500
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dfd4d91d-cd7d-3990-a0f0-bf35dee1783d.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:357::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e0:ab:7e:62:47:29:95:24:c8:69:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=2b40b67f-21ad-4faa-90a4-9386283918a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:b5:1c:6d:d6:e2:60:57:19:ba:ef:39:30:
                    d3:0e:c5:b0:d8:a8:4f:fb:07:42:8b:b7:79:17:93:
                    9e:7c:c8:6d:64:d6:02:b7:0f:2f:ac:dc:99:75:9a:
                    c7:9c:b2:2b:9c:fe:6f:8f:8c:f9:58:dc:ab:01:e8:
                    8f:1c:c1:10:ef:45:c4:a7:d7:42:6a:96:41:52:41:
                    d1:51:2e:10:81:86:8f:ed:a7:25:43:ba:95:ea:c3:
                    a1:f6:49:df:95:f3:a6:04:74:13:bb:17:2f:3c:d3:
                    10:2d:a3:2a:21:81:8b:4d:30:97:a3:46:e5:85:24:
                    38:00:07:c9:f9:c6:f1:2e:62:1b:ee:d3:2e:4e:19:
                    5e:eb:7e:48:ba:9a:63:ec:fb:63:d9:21:a9:6d:47:
                    49:10:a0:6b:7d:d6:02:c9:80:4c:85:0e:42:33:02:
                    58:7c:27:f4:13:06:67:58:51:44:d1:18:89:7f:fe:
                    4f:75:82:f0:0d:bb:96:19:90:68:60:45:0c:c3:48:
                    fd:83:83:47:15:86:98:24:9c:46:1e:b1:3b:d2:3b:
                    24:01:b2:db:69:0b:cc:72:36:ef:cf:16:5c:24:65:
                    31:9f:45:f4:ce:a0:a1:04:05:87:70:0d:40:5d:7c:
                    96:07:87:33:5b:af:c4:31:2b:90:18:59:1d:8e:c7:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:18:7C:56:3A:BA:5D:AD:FA:FA:2E:52:80:21:81:B1:89:C9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/dfd4d91d-cd7d-3990-a0f0-bf35dee1783d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:357::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:eb:c1:0b:f2:fb:0c:2a:3a:f3:40:a4:02:e8:43:14:d4:8e:
         da:93:0f:32:52:31:a5:84:bf:d9:fc:3b:8f:26:d5:75:b7:25:
         0b:e5:d5:58:2b:5d:35:ef:3c:27:f4:7d:ac:49:a7:56:d9:3c:
         84:50:e8:58:c5:ef:ac:75:ad:7e:0a:13:a5:95:7a:8c:4c:7c:
         2b:e3:d4:5f:0d:2c:e2:38:5b:fe:0e:74:80:fb:c1:82:70:35:
         7c:4c:d5:3b:1d:64:23:9c:16:62:f5:3c:a4:db:56:70:cd:d3:
         9e:9b:5e:d7:1d:05:14:eb:1f:12:97:a1:22:2d:40:60:d1:13:
         f0:26:a7:e2:d6:a9:f3:e9:09:6e:30:43:f9:fd:d1:6d:65:2f:
         c5:e1:36:15:55:df:a1:1a:96:e8:cf:83:56:7a:03:17:b7:bc:
         0a:83:e4:2e:5f:46:6c:c0:70:f1:f2:cd:6b:0d:c2:40:ff:48:
         14:5e:c9:09:85:6f:22:fe:44:bf:86:f9:0f:c2:9c:dd:74:59:
         95:dc:54:94:ca:8d:3c:33:f5:c0:76:ff:24:0a:ce:4a:8c:00:
         8d:96:a4:db:23:27:3f:f4:64:f1:3c:05:39:c4:36:26:12:4a:
         b2:5c:6e:cd:45:b5:68:91:40:82:d3:24:42:8a:14:13:6c:bb:
         17:ce:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----