Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0d7eb2a-3d5c-3605-8ee6-5190adb05507.roa
File:                     f0d7eb2a-3d5c-3605-8ee6-5190adb05507.roa (raw, json)
Hash identifier:          WY1t4S6sPsMLf5YijVlmoQZ0FZj4asiAtCiL03rL+gU=
Subject key identifier:   F6:DC:71:AC:56:CA:57:DA:E5:B6:A1:C3:7F:C8:86:BC:18:AB:11:71
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FAA7EBC28999A06C00CF29300
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0d7eb2a-3d5c-3605-8ee6-5190adb05507.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:aa:7e:bc:28:99:9a:06:c0:0c:f2:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=6a8bc3ea-fd2a-44f0-88f6-bc90291caad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:9d:83:af:16:0b:42:c2:2e:0b:82:8d:7e:
                    aa:06:e3:34:f0:3b:cf:94:33:0f:5a:9f:ed:e5:40:
                    93:61:ad:25:3b:92:a0:69:7f:8a:b2:49:2f:5a:1c:
                    bd:c5:83:1f:37:1c:44:76:4f:1c:ee:e5:6b:d9:27:
                    51:c2:13:7c:bc:04:4a:38:b4:a1:dd:a0:cf:92:a7:
                    24:59:e9:38:ec:05:c7:df:b0:94:30:6f:54:4d:c9:
                    24:11:81:85:8e:3e:20:57:27:03:31:74:98:5e:0a:
                    1b:3b:0b:3b:63:ff:71:4d:97:77:f3:3a:ef:1f:c0:
                    a1:98:01:f3:17:9b:1a:b5:03:8b:33:c7:e6:5c:86:
                    29:fb:a3:15:be:76:25:cc:fe:0a:5c:e5:72:fa:7f:
                    59:87:d2:bf:dd:9e:d1:94:ef:83:c4:f4:ba:83:29:
                    83:f9:d7:a0:47:c2:8a:5a:a3:c9:5f:47:01:ad:0d:
                    f1:0b:f2:39:b8:dc:1f:7b:00:80:1a:8e:8f:fb:44:
                    52:2f:16:6d:bf:5c:77:b7:30:34:d6:c9:16:08:73:
                    d2:3b:8c:7e:26:54:75:95:85:fd:45:60:30:f9:05:
                    a8:79:fc:6f:14:ff:6c:e8:f1:55:27:be:4f:cd:70:
                    2a:fc:d3:5a:c3:76:38:c3:f7:84:e5:21:96:d2:91:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:71:AC:56:CA:57:DA:E5:B6:A1:C3:7F:C8:86:BC:18:AB:11:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0d7eb2a-3d5c-3605-8ee6-5190adb05507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:37:c0:dc:3c:dc:f5:ea:30:45:af:e1:c2:09:b4:39:11:
         75:75:99:87:38:5d:56:79:fc:43:f5:ed:63:58:6c:24:34:99:
         d7:ba:4d:b1:d7:52:85:df:ed:11:75:20:38:70:83:be:70:15:
         e0:b2:31:c3:ac:9e:91:2a:1a:25:ed:1f:01:10:f1:36:a8:5e:
         89:82:30:8c:c2:a8:05:08:07:50:0b:f0:2f:08:f2:9e:ea:4d:
         34:af:df:64:d1:d0:2a:6e:e5:3a:f2:fb:79:b6:de:92:91:ea:
         6f:c4:a5:3c:4f:69:ed:37:36:5e:06:99:38:68:79:03:42:6a:
         9f:0b:91:bc:a0:9a:25:78:55:1b:2d:32:7e:df:60:80:ec:fe:
         f5:9d:ed:1b:02:94:6b:94:80:9a:6a:9d:0c:0e:c8:73:8d:49:
         04:46:46:f8:6a:ca:77:62:17:2c:0e:57:5d:87:ed:86:30:45:
         d2:3f:c1:12:d0:47:26:64:b2:5c:7a:3e:97:59:ea:f0:f5:7a:
         68:1c:b0:a9:09:2f:74:26:16:c5:da:48:fc:25:95:10:cf:0b:
         d4:9c:81:50:9f:7d:31:ba:f0:a3:d4:c9:22:ba:88:06:31:2c:
         48:97:c2:de:1a:9f:9d:72:55:fe:ea:12:89:60:0c:56:4f:c4:
         a1:bf:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----