Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0e4efcf-ea51-34f6-acce-51ea6fd7502d.roa
File:                     f0e4efcf-ea51-34f6-acce-51ea6fd7502d.roa (raw, json)
Hash identifier:          WV8H+1WKkUm/OwKv5Ztr3zNCnlawsdIM5ZgO2osAqps=
Subject key identifier:   6A:31:3B:3F:4B:84:EB:FC:BA:8C:26:7A:5C:76:93:42:85:6B:50:34
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F432858401D0CAB2DB47849FFAA7CB380
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0e4efcf-ea51-34f6-acce-51ea6fd7502d.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Sun 04 Dec 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:382::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1d:0c:ab:2d:b4:78:49:ff:aa:7c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Dec  4 05:00:00 2022 GMT
        Subject: CN=46b172c1-43d3-4dab-b093-7ef4d3714e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:c4:fd:88:44:db:7b:69:f6:11:62:e0:47:
                    50:9c:d0:50:dc:cb:7f:c8:8b:fe:85:2a:68:77:39:
                    14:40:91:5d:ea:b6:13:cc:cf:24:bb:bc:c3:a9:3a:
                    e1:56:b8:b5:63:b2:aa:ea:e0:59:f5:29:25:6c:c0:
                    2a:b5:e8:41:b3:00:89:92:dc:0e:47:1b:b3:2d:55:
                    cb:f4:d7:5a:39:0a:4e:10:b5:f9:7a:74:e0:1c:ac:
                    19:ca:40:27:3e:c5:fa:14:d9:0a:3f:e0:5d:73:56:
                    76:27:18:83:31:2e:a2:fe:99:b4:23:75:9d:19:40:
                    69:c7:fd:a4:1c:7b:2e:c5:3b:6a:bd:dc:72:4d:df:
                    29:e7:d2:b8:74:be:fe:e5:8e:d1:4b:54:51:af:2b:
                    9d:95:7e:be:8a:35:69:96:6c:87:82:81:94:3d:d8:
                    1a:bc:97:34:d8:0f:fc:5a:ec:1c:db:61:fd:ff:81:
                    3b:c3:dd:2d:de:24:f2:45:92:01:bf:ba:be:1e:7a:
                    d2:5f:35:e2:3a:86:b7:d9:29:d8:63:b6:76:2e:9f:
                    63:50:c9:fa:c8:42:b3:15:5d:7f:38:3f:0d:28:62:
                    2b:2d:04:1c:13:f7:49:8e:37:fa:58:cb:3b:fe:c8:
                    44:6f:bd:f9:c3:4b:46:b4:b5:29:20:89:3a:01:15:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:3B:3F:4B:84:EB:FC:BA:8C:26:7A:5C:76:93:42:85:6B:50:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f0e4efcf-ea51-34f6-acce-51ea6fd7502d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:ce:2e:aa:b6:5e:4a:f8:7e:cd:de:5e:4d:20:11:5c:d6:
         92:96:90:ff:18:e0:0d:7c:77:4b:88:cc:c4:ae:2c:73:76:a7:
         97:e7:92:cc:12:0b:48:17:b6:f1:2d:15:a3:b6:2c:be:9e:75:
         ea:89:2c:4d:15:2b:2d:ea:09:2a:f6:7d:0c:c1:bd:5d:66:31:
         7b:4e:b1:55:66:ba:d1:7e:17:e2:2b:e5:1a:92:7c:a4:1d:e9:
         49:1c:f5:75:b8:db:9a:73:0d:9c:27:e9:be:a4:92:a7:bc:e7:
         c2:a8:bb:fc:76:47:6c:12:f3:76:b6:b0:2b:00:23:ba:7f:86:
         61:be:ce:6d:a2:8f:dc:c1:59:e8:3b:56:49:b5:95:9f:01:af:
         20:74:30:4a:ad:9e:c1:09:a3:4e:00:21:8f:14:8e:9a:f0:4f:
         ab:c8:3e:35:00:db:41:f3:09:dd:11:4c:2d:2d:b2:92:c5:ad:
         60:dc:76:34:84:d8:a5:1f:88:59:80:28:7d:9e:fe:23:7e:b6:
         ea:be:ff:90:24:20:92:bf:bc:11:e8:4b:c0:70:fe:66:65:fe:
         e2:0f:5f:9c:d2:06:49:0d:bf:75:09:dd:c5:c9:79:56:30:12:
         33:c8:f4:29:d7:f6:ce:b0:0f:e2:58:53:4b:b8:0c:b3:be:a2:
         cc:f9:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----