Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed30eb46-7651-3655-b0c5-6f5fd8991113.roa
File:                     ed30eb46-7651-3655-b0c5-6f5fd8991113.roa (raw, json)
Hash identifier:          lJo+hNEKbv1lCNqOH0Ijcpo9JdGVJFLKMJ5nyKWve1U=
Subject key identifier:   B3:80:25:4A:21:0B:75:48:42:AA:4C:67:22:8C:1E:99:A1:ED:A5:99
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FB26E7A2B542F03D9212A4400
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed30eb46-7651-3655-b0c5-6f5fd8991113.roa
Signing time:             Mon 24 Oct 2022 12:00:00 +0000
ROA not before:           Mon 24 Oct 2022 12:00:00 +0000
ROA not after:            Thu 27 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:358::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b2:6e:7a:2b:54:2f:03:d9:21:2a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 24 12:00:00 2022 GMT
            Not After : Oct 27 04:00:00 2022 GMT
        Subject: CN=8070408d-0478-4a3f-a53c-4b6d07348fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:12:10:1a:26:59:fc:0e:82:f1:77:c0:83:
                    07:54:dc:e4:b4:36:fe:18:3b:69:f2:45:1c:2d:05:
                    66:65:2e:7e:eb:d5:c6:32:a1:bf:7d:a4:ec:16:a3:
                    a9:b9:4a:34:a7:fb:80:49:e6:b0:86:83:29:25:e1:
                    32:55:72:e9:37:ff:f9:22:76:eb:1f:0c:2e:c9:62:
                    e2:7f:2a:14:12:ec:a5:28:18:0d:4d:c8:5c:f3:7d:
                    a7:22:61:b1:79:6a:6c:cc:f0:71:af:ac:0a:30:3d:
                    c8:91:60:8c:41:5e:3f:ca:26:02:4c:16:a2:50:ea:
                    d9:05:bf:4b:a4:e1:c0:69:56:13:fb:b8:3e:3f:29:
                    d6:3e:2c:25:a3:17:6d:fd:64:c5:aa:c8:25:e7:d3:
                    f7:69:83:05:6e:5f:42:fa:71:f3:bb:30:57:f5:0c:
                    26:f4:33:7d:5e:65:2a:7a:bd:83:cb:cb:26:8e:05:
                    87:35:df:e5:f1:15:f4:83:3e:ba:64:0d:a5:80:85:
                    6e:94:e6:ff:80:aa:57:5c:25:e7:2d:e8:3b:27:d6:
                    e2:5c:42:2b:00:70:7f:61:ac:07:bb:b6:2d:23:50:
                    f6:3b:4b:86:49:70:ee:a6:12:0d:27:23:60:e3:75:
                    b2:36:64:4b:d3:4e:6a:c6:80:7a:48:02:0d:79:0c:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:80:25:4A:21:0B:75:48:42:AA:4C:67:22:8C:1E:99:A1:ED:A5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ed30eb46-7651-3655-b0c5-6f5fd8991113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:77:ba:b2:35:29:c4:2e:f6:cb:d2:93:c3:7c:a3:7d:f7:da:
         db:a1:08:18:db:8d:b8:6e:4c:86:30:8c:b1:20:c0:1a:fd:15:
         74:3a:34:20:73:b4:68:06:5a:e4:ca:d9:e4:4b:80:94:ee:3f:
         f1:be:de:8f:a9:bf:37:20:d6:b0:7c:6c:94:76:49:4a:3b:c9:
         61:fe:49:19:16:a6:53:03:cb:8a:25:e0:92:01:2b:ff:d6:2a:
         4d:c3:78:12:c7:7f:29:b8:dc:30:fa:ee:cb:e7:c2:61:a5:ae:
         10:64:db:9f:2c:37:80:b1:38:7f:a2:d2:1c:a1:04:17:93:06:
         4b:dc:48:ac:b8:ae:e9:62:a0:cf:1a:d8:4e:6f:3a:66:c1:f5:
         cc:ad:2d:1a:26:a4:af:aa:5a:36:16:27:31:33:69:46:d0:2d:
         b9:4b:6d:76:bb:10:8c:74:d7:eb:2c:43:ee:7b:1e:9d:71:33:
         71:fc:13:a7:5d:4a:7b:21:45:b0:32:c2:d0:a4:85:69:d6:93:
         c4:fc:07:58:12:2c:56:da:9d:c2:4c:18:cb:47:0f:d3:ce:a5:
         26:a3:ae:47:71:a5:a8:13:cb:0f:bc:d6:dd:94:46:65:94:51:
         1a:89:6f:5e:5b:85:de:d6:cc:83:b2:62:23:da:92:31:c2:f3:
         12:ef:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----