Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ef2a9361-74e8-305b-8f7d-c6f4468c0988.roa
File:                     ef2a9361-74e8-305b-8f7d-c6f4468c0988.roa (raw, json)
Hash identifier:          2e9jzObCdC8MkCTkzyFp7xfVEtCDoiERurcFK9fbsys=
Subject key identifier:   CC:C5:7D:39:7E:71:CB:56:DB:48:99:C7:CE:B6:B8:7F:73:64:1C:D3
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FEA19B08CC3D12D49A75A7E80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ef2a9361-74e8-305b-8f7d-c6f4468c0988.roa
Signing time:             Sun 13 Nov 2022 12:00:00 +0000
ROA not before:           Sun 13 Nov 2022 12:00:00 +0000
ROA not after:            Wed 16 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:19:b0:8c:c3:d1:2d:49:a7:5a:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov 13 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2022 GMT
        Subject: CN=0c62da09-9575-40b1-9041-a6fad06f0c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:16:a6:f4:52:d0:86:7c:e8:44:70:96:5f:
                    da:a6:a3:9d:31:c2:6c:7c:06:65:e2:80:ff:67:0d:
                    a2:bc:b9:48:51:e4:9b:c6:d9:46:9f:0f:87:4f:fc:
                    94:cf:80:2d:a6:6d:ff:be:79:7d:4c:ce:3d:01:c9:
                    bd:0c:1a:a6:41:be:58:cf:19:61:01:1d:d2:d4:4f:
                    0d:98:31:ba:b7:f4:b5:9f:eb:35:64:00:2b:e4:82:
                    4d:ab:53:8b:c2:2a:79:b2:e0:f4:68:ad:0c:91:1c:
                    4b:65:51:ea:d9:82:30:6b:60:ad:05:b4:a4:d8:d7:
                    4a:65:9a:e4:42:b5:55:f9:49:39:36:c6:de:5f:9e:
                    95:3e:ec:cb:5a:f5:8b:b0:69:77:2c:8e:e6:e8:17:
                    b9:7b:ab:e9:db:7e:a2:5f:e6:43:3b:0f:75:87:fa:
                    34:f3:85:a1:a1:37:89:75:0e:c2:cb:c8:84:4c:15:
                    ba:d6:7e:3a:83:55:49:30:e6:7d:38:99:e3:c8:42:
                    8f:36:2b:aa:12:fd:53:7d:bf:e8:a0:ac:60:ab:34:
                    07:d9:00:c9:fc:02:1a:33:8a:fe:5d:89:6e:29:cd:
                    78:04:64:7a:2e:f9:05:6a:09:11:c1:78:59:fe:67:
                    4f:d4:0b:88:14:f8:37:ab:8e:81:43:36:e2:44:41:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:7D:39:7E:71:CB:56:DB:48:99:C7:CE:B6:B8:7F:73:64:1C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/ef2a9361-74e8-305b-8f7d-c6f4468c0988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:18:e4:16:94:79:ae:f6:8f:90:0d:b4:fe:c5:58:6c:89:e9:
         65:b7:46:6c:cf:62:d4:06:0e:eb:5b:56:e5:39:d6:ed:73:18:
         62:e3:a9:ca:cf:57:d2:7e:f9:2f:3e:00:78:b0:d1:5d:9e:8a:
         4d:31:b8:5a:04:ad:e7:6d:6f:2e:a7:f3:83:f9:b6:12:2f:da:
         81:96:cd:cc:48:3e:96:2d:b1:a1:5e:57:20:31:00:03:b1:4c:
         79:c5:10:2b:06:17:88:c0:d9:3b:c0:7f:11:94:46:0e:85:17:
         3e:0e:f9:7b:cd:b9:13:05:c9:a7:ac:7d:95:6a:39:57:ef:87:
         69:66:b1:11:ac:cc:76:75:58:4a:89:51:a5:7c:08:d5:6b:4d:
         49:66:70:42:91:ff:34:51:c8:01:93:88:61:3b:ce:17:bb:e4:
         c5:63:d5:4c:91:6f:31:f7:41:e4:bb:6d:05:00:dc:28:5e:8a:
         e6:b9:e9:66:00:03:48:18:67:ff:b1:78:b8:d3:03:1b:5b:32:
         d9:b5:b3:7f:92:9e:72:13:82:21:87:ed:ea:5d:3b:b0:e8:e7:
         07:b1:93:3b:98:14:9a:10:7c:35:fd:c1:92:47:7f:c9:e6:0e:
         a3:81:96:b9:1c:4d:e2:be:49:69:70:10:88:2b:e2:f9:b0:18:
         3b:fe:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----