Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eaa20c7d-6f47-3d03-98d5-88b3c453d40e.roa
File:                     eaa20c7d-6f47-3d03-98d5-88b3c453d40e.roa (raw, json)
Hash identifier:          wx1twEd7AaISdnxQv8yvpaB0E25uAF1/IFfNLuC20j8=
Subject key identifier:   EA:9B:63:ED:A7:C4:F8:51:B3:14:36:AF:66:00:D8:F5:40:39:86:D3
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583F25B0B169B4249A374FE4DB40
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eaa20c7d-6f47-3d03-98d5-88b3c453d40e.roa
Signing time:             Sun 04 Sep 2022 12:00:00 +0000
ROA not before:           Sun 04 Sep 2022 12:00:00 +0000
ROA not after:            Wed 07 Sep 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:25:b0:b1:69:b4:24:9a:37:4f:e4:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Sep  4 12:00:00 2022 GMT
            Not After : Sep  7 04:00:00 2022 GMT
        Subject: CN=6cf78f6c-4ac8-4273-a1ca-a37c71fdc82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:a6:bf:9f:0e:82:63:7c:e1:f7:5c:66:c3:
                    0e:8b:2a:8e:43:9a:3b:64:c7:7a:cf:ad:a2:52:8e:
                    d1:7d:51:db:28:89:81:91:19:f7:0c:86:1f:b1:a3:
                    0f:77:4c:54:04:4b:0b:ed:5c:c2:02:6a:02:14:b2:
                    12:6d:7f:0a:c6:06:6a:d0:bd:fe:08:8b:64:68:72:
                    7b:ce:12:86:d3:d1:52:ad:72:2e:e2:cb:19:77:47:
                    85:e5:c1:b8:dd:9e:74:3d:88:af:7a:1e:75:57:1f:
                    01:27:4f:21:4d:59:8e:74:74:af:ed:2d:79:5c:30:
                    86:17:5b:d3:cf:95:65:7a:cd:b1:e7:80:57:97:c1:
                    ea:ae:4a:3e:3d:d6:1f:84:b7:85:42:02:9f:d5:bc:
                    9e:33:20:20:7f:b0:20:98:4e:75:d4:74:8f:66:2d:
                    c8:dd:cd:ba:3f:33:24:46:9d:4e:a7:cd:24:5a:35:
                    dd:80:e3:95:62:b9:2a:9a:e3:0b:07:fe:33:06:b5:
                    2e:53:cb:24:e4:08:3f:7b:09:93:76:3d:97:a7:c8:
                    92:91:7a:17:ab:d2:9a:9f:d1:a2:91:12:0e:72:b3:
                    82:d4:1c:18:1c:00:8f:94:f9:7d:5e:2c:92:59:31:
                    c1:5f:8f:bf:84:90:20:c2:40:98:f3:06:42:60:88:
                    ec:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:63:ED:A7:C4:F8:51:B3:14:36:AF:66:00:D8:F5:40:39:86:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/eaa20c7d-6f47-3d03-98d5-88b3c453d40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:02:eb:7e:56:df:f4:a5:29:93:0e:67:b6:52:93:2a:ab:
         58:11:a6:21:b8:9b:97:c4:80:a6:08:0b:6e:ea:e0:39:ad:68:
         83:fa:3c:91:f7:5f:57:0b:6e:86:f4:0c:78:12:9f:f4:25:d5:
         dc:8e:a6:ff:0e:5f:e2:1c:f2:b0:70:dd:e8:44:9e:0d:08:48:
         9f:c3:8f:ea:36:8a:5c:40:83:c6:d2:b9:20:2e:21:7e:29:8d:
         50:74:fa:69:b4:8c:f9:74:63:83:ec:95:98:39:4f:50:c8:7b:
         a3:ea:61:71:c8:ba:e4:b8:36:9f:22:df:69:9b:71:d3:cd:54:
         83:66:f2:0e:60:d2:bb:d4:3f:d4:1b:85:ab:32:67:02:a9:8a:
         82:11:a1:15:ed:fc:44:b5:2f:fd:07:2f:ba:4b:2d:cb:40:2c:
         83:8d:81:14:a9:63:ed:67:08:0c:19:ed:50:42:de:44:36:74:
         e4:2b:5f:7c:08:c5:b0:5a:81:62:41:2d:2f:2a:f3:2f:b8:ef:
         04:66:a3:0d:6b:37:6d:26:3a:87:32:a9:96:f4:cd:3a:58:b0:
         25:53:16:a5:63:35:01:ee:06:28:bd:60:eb:93:2e:36:b3:c9:
         d5:04:2a:10:10:9e:4f:be:26:a5:ea:01:6d:a0:27:aa:1f:9d:
         4c:16:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----