Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f1afa9cc-4bd3-36c6-8a1e-3f4651c4d8a5.roa
File:                     f1afa9cc-4bd3-36c6-8a1e-3f4651c4d8a5.roa (raw, json)
Hash identifier:          LwLPxk5fio53uF7tUFPNL7gEOsqUVDdFAhhY4XXb1CE=
Subject key identifier:   EF:7E:DD:10:FA:35:38:54:8B:E0:29:0C:2A:42:E7:43:8C:90:73:C5
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583FD13FBEEB25893D296C0DE280
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f1afa9cc-4bd3-36c6-8a1e-3f4651c4d8a5.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Mon 07 Nov 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:391::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d1:3f:be:eb:25:89:3d:29:6c:0d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Nov  7 05:00:00 2022 GMT
        Subject: CN=91c8f69d-4c9f-488a-b0de-6b0549fb451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:cd:14:a7:15:dc:f9:2b:f8:3d:0b:4f:a2:
                    3f:aa:98:07:cb:50:f0:ca:24:cc:46:3d:a7:67:96:
                    65:7d:e9:69:53:f3:32:8e:02:09:22:60:df:9a:cf:
                    ea:df:5c:08:99:b1:cb:18:d9:17:e7:23:69:9b:df:
                    bd:c4:18:e7:59:dd:a6:f8:dc:c5:96:cf:68:8a:15:
                    9c:5c:f7:c0:5a:65:8e:e2:f8:01:36:ae:e1:ad:de:
                    7e:6c:80:1a:64:e1:3b:12:90:37:66:ee:42:38:bd:
                    93:3d:6e:4a:db:71:6f:9d:7f:ee:60:5e:ad:f0:46:
                    99:48:30:c1:28:92:a6:e9:78:5a:5f:44:77:b4:1d:
                    94:59:1f:df:68:df:18:7c:d1:27:49:9b:41:16:8c:
                    7f:a6:ad:88:c7:5a:2c:b9:22:20:0b:b6:b4:f9:da:
                    3a:f6:32:9b:ca:1a:33:84:8a:5a:4b:82:1f:19:9f:
                    ca:27:d5:15:90:f6:6d:66:74:38:71:c5:a1:f1:f9:
                    70:31:6d:6a:d1:d8:24:ea:ed:22:5e:18:11:ff:ea:
                    d0:ca:d9:c9:34:e8:29:ba:8a:ea:ac:df:18:69:e0:
                    ed:06:64:5f:6f:00:99:a0:ba:38:a8:98:49:f0:d1:
                    0f:20:82:7c:79:9a:66:53:62:78:0a:9f:4b:0b:84:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:DD:10:FA:35:38:54:8B:E0:29:0C:2A:42:E7:43:8C:90:73:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/f1afa9cc-4bd3-36c6-8a1e-3f4651c4d8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:d8:b0:1c:b4:84:a3:e1:b0:f0:49:22:e0:ab:72:44:50:
         ca:6a:bd:ed:90:40:a7:2b:43:9d:a3:26:40:4e:75:c1:8f:00:
         16:f8:25:92:2e:68:c2:54:0c:72:c1:87:84:c8:8f:71:97:03:
         78:09:7a:10:16:77:c9:2c:e3:c4:22:f1:a6:f4:bb:76:2d:27:
         10:ed:b5:9c:a9:96:b9:f2:31:d6:1b:b2:7f:36:7b:a9:02:b3:
         56:4f:28:65:7e:f8:23:a5:d8:a8:5a:08:aa:11:7b:ee:be:c8:
         33:85:05:5d:3b:54:cc:ec:53:a6:23:55:da:3d:df:cb:2a:7b:
         5b:b6:de:3b:cb:ce:d8:cc:7b:a0:01:a0:c3:f0:d0:c1:ba:4b:
         7d:9a:6f:a5:e5:bd:0b:5c:be:38:da:75:5b:f8:9b:3a:5d:e0:
         af:0d:ea:39:23:f7:12:8a:41:88:73:d5:28:ba:ba:4f:87:9f:
         2b:7a:ea:08:1c:ef:73:dc:e2:5e:15:d6:2d:7f:00:ab:39:e4:
         a5:9d:16:18:b8:70:6b:47:67:43:06:8c:d8:44:87:57:79:82:
         aa:e0:0a:8b:fe:1e:75:59:02:c9:3c:6c:f2:40:aa:70:d9:73:
         c7:c0:b3:3f:63:f1:fb:40:a9:bb:6e:13:44:6b:55:f7:1f:99:
         dd:63:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----